Molebox 2.x Unpacker OEP Finder Script modified by zhupf 脚本

//免费的
//molebox 2.x unpack all, modified by zhupf(xzfff#126#com).2010/1/19
//modified form:
// Molebox 2.x Unpacker / OEP Finder Script v1.10 by Cherry
// molebox 2.x ,by skylly
//
//支持一下提取新版和老版的飓风加密视频(OD载入后,运行脚本)
//msg "需要filelen.exe和mbunpack.dll"

//-------------------
//遗留清理断点
bc
bphwc
bpmc

var a

//-------------------
//判断新老版本
mov a,eip
mov a,[a]
cmp a,6AEC8B55 //看eip处是否push ebp;mov ebp,esp;push -1
jne begin //如果不是则估计是Molebox的ep

//-------------------
//走过外面的代码
eob Break1 
findop eip, #7301#
mov a,$RESULT
add a,3

bp a
run

Break1:
bc
sto
sti
eob Break2
findop eip, #C3#
bp $RESULT
run

Break2:
bc
sto
eob Break3
findop eip, #EBDB#
mov a,$RESULT
add a,2
bp a
run

Break3:
bc
//-------------------

//-------------------
//Molebox的ep
begin:
sto