/*

//////////////////////////////////////////////////

	ASProtect 1.0 Unpacking script v0.1(for win2k/xp only)

	Author:	loveboom

	Email : loveboom%163.com

	OS    : WinXP sp2,Ollydbg 1.1,OllyScript v0.92

	Date  : 2004-12-25

        Action: Find OEP

	Config: Ignore all exceptions

	Note  : If you have one or more question, email me please,thank you!

//////////////////////////////////////////////////

*/



var espval

var count

var addr



lblset:

  msgyn "Setting:Ignore all exceptions."

  cmp $RESULT,1

  je start

  ret



start:

  mov count,2

  mov espval,esp

  sub espval,4

  gpa "LocalAlloc","kernel32.dll"		//Get API function 'LocalAlloc'

  cmp $RESULT,0

  je lblabort

  bp $RESULT



lbl1:

  run



lbl2:

  cmp count,0

  je lbl3

  dec count

  jmp lbl1



lbl3:

  mov addr,esp

  add addr,4

  mov [addr],40

  bc $RESULT

  bphws espval,"r"



lblesto:

  esto

  esto

  esto

  esto



lbl4:

  bphwc espval

  findop eip,#C3#		//Find command 'RETN'

  cmp $RESULT,0

  je lblabort

  go $RESULT

  sto



lbloep:

  cmt eip,"oep"

  msg "Script by loveboom[DFCG[FCG][US],Thank you for using my script!"

  ret



lblabort:

  msg "Script abort!Maybe target is not protect by Asprotect 1.0."

  ret