<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>火星信息安全研究院Plugin</title>
	<atom:link href="http://www.h4ck.org.cn/tag/plugin/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.h4ck.org.cn</link>
	<description>Hack-Crack  信息安全 【Institute Of Information Serurity From Mars】</description>
	<lastBuildDate>Sat, 04 Feb 2012 13:59:16 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
		<item>
		<title>Fast IDB2Sig and LoadMap plugins(IDA)</title>
		<link>http://www.h4ck.org.cn/2011/06/fast-idb2sig-and-loadmap-pluginsida/</link>
		<comments>http://www.h4ck.org.cn/2011/06/fast-idb2sig-and-loadmap-pluginsida/#comments</comments>
		<pubDate>Fri, 03 Jun 2011 06:27:10 +0000</pubDate>
		<dc:creator>obaby</dc:creator>
				<category><![CDATA[插件『IDA/OD Plugin』]]></category>
		<category><![CDATA[IDA]]></category>
		<category><![CDATA[Plugin]]></category>

		<guid isPermaLink="false">http://www.h4ck.org.cn/?p=2851</guid>
		<description><![CDATA[Fast IDB2Sig and LoadMap plugins(IDA)]]></description>
			<content:encoded><![CDATA[<p><a rel="lightbox" href="http://www.h4ck.org.cn/wp-content/uploads/2011/06/Plugin.png" title="Plugin"><img title="Plugin" src="../wp-content/uploads//2011/06/Plugin.png" alt="" width="662" height="266" /></a></p>
<p><a href="http://dl.dbank.com/c0386zpeg2" target="_blank">Click Here to Download these plugins!</a></p>
<blockquote><p>It took me two weeks to write two IDA plugins, a renew, fast IDB2Sig plugin and a new, very fast LoadMap plugin.<br />
The IDB2SIG plugin I rewrote base on the orginal source code and idea of:<br />
- Quine (quine@blacksun.res.cmu.edu)<br />
- Darko<br />
- IDB2PAT of J.C. Roberts &lt;mercury@abac.com&gt;<br />
Thanks all of you very much. I think all of you will allow me to public the new source code.<br />
The  LoadMap plugin I wrote base on the idea of Toshiyuki Tega. It will  supports loading and parsing VC++, Borland (Delphi/BC++/CBuilder) and  DeDe map files.<br />
And with two plugins, I need only two days to create  two signature file for Delphi 6/7. Very fast and convenience. Hereafter,  we can use two above plugins to create signature files, load map  symbols&#8230;</p>
<p>Source is included, and plugins are precompiled for IDA 4.5 and 5.2.</p></blockquote>
<h3>相关文章</h3>
<ul class="related_posts">
<li><a href="http://www.h4ck.org.cn/2011/05/windows-driver-debug-via-ida-pro/" title="IDA 6.1调试驱动" rel="bookmark inlinks">IDA 6.1调试驱动</a><span class="count">( 4 )</span></li>
<li><a href="http://www.h4ck.org.cn/2010/04/idapro-chinese-edition/" title="中文版" rel="bookmark inlinks">中文版</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/07/ida-pro-appcall/" title="IDA Pro Appcall功能浅析 " rel="bookmark inlinks">IDA Pro Appcall功能浅析 </a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2010/06/ida-sdk-5-5/" title="IDA Sdk 5.5" rel="bookmark inlinks">IDA Sdk 5.5</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/11/ida-name-chang-via-idc-script/" title="IDA Name Chang via idc Script" rel="bookmark inlinks">IDA Name Chang via idc Script</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/02/pluginfix-v1-01by-bob-team-peid/" title="PluginFix v1.01[By BoB / Team PEiD]" rel="bookmark inlinks">PluginFix v1.01[By BoB / Team PEiD]</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2009/09/700-ollydbgscripts/" title="700+ OllyDbgScripts" rel="bookmark inlinks">700+ OllyDbgScripts</a><span class="count">( 2 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/06/advanced-windows-kernel-debugging-with-vmware-and-ida%e2%80%99s-gdb-debugger/" title="使用VMWare GDB和IDA调试Windows内核" rel="bookmark inlinks">使用VMWare GDB和IDA调试Windows内核</a><span class="count">( 0 )</span></li>
</ul>
]]></content:encoded>
			<wfw:commentRss>http://www.h4ck.org.cn/2011/06/fast-idb2sig-and-loadmap-pluginsida/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>FullDisasm : plugin OllyDbg &amp; Immunity Debugger</title>
		<link>http://www.h4ck.org.cn/2011/05/fulldisasm-plugin-ollydbg-immunity-debugger/</link>
		<comments>http://www.h4ck.org.cn/2011/05/fulldisasm-plugin-ollydbg-immunity-debugger/#comments</comments>
		<pubDate>Wed, 04 May 2011 10:02:40 +0000</pubDate>
		<dc:creator>obaby</dc:creator>
				<category><![CDATA[插件『IDA/OD Plugin』]]></category>
		<category><![CDATA[Debugger]]></category>
		<category><![CDATA[OD]]></category>
		<category><![CDATA[Plugin]]></category>

		<guid isPermaLink="false">http://www.h4ck.org.cn/?p=2767</guid>
		<description><![CDATA[This is a plugin for OllyDbg 1.10 and Immunity Debugger 1.xx to replace the old disasm engine by a more recent one : BeaEngine 4.0. You just have to press Ctrl+W to change the disasm engine. If you want to use BeaEngine only on selected lines, then just press Ctrl+X. With this plugin, you can decode recent instructions for the following technologies : MMX, FPU, SSE, SSE2, SSE3, SSSE3, SSE4.1, SSE4.2 , VMX, CLMUL and AES. You can even decode undocumented instructions usually used in malicious codes. If you want to use a specific syntax, BeaEngine allows you to disassemble code in masm32 syntax, nasm syntax, GoAsm syntax or GNU Assembler syntax.]]></description>
			<content:encoded><![CDATA[<p><a rel="lightbox" href="http://www.h4ck.org.cn/wp-content/uploads//2011/05/dis.png" title="dis"><img title="dis" src="http://www.h4ck.org.cn/wp-content/uploads//2011/05/dis-1024x557.png" alt="" width="717" height="390" /></a></p>
<p>This is a plugin for OllyDbg 1.10 and Immunity Debugger 1.xx to replace the old disasm engine by a more recent one : BeaEngine 4.0.</p>
<p>You just have to press<span style="color: #ff0000;"> Ctrl+W </span>to change the disasm engine.</p>
<p>If you want to use BeaEngine only on selected lines, then just press<span style="color: #ff0000;"> Ctrl+X.</span></p>
<p>With this plugin, you can decode recent instructions for the following technologies : MMX, FPU, SSE, SSE2, SSE3, SSSE3, SSE4.1, SSE4.2 , VMX, CLMUL and AES.</p>
<p>You can even decode undocumented instructions usually used in malicious codes.</p>
<p>If you want to use a specific syntax, BeaEngine allows you to disassemble code in masm32 syntax, nasm syntax, GoAsm syntax or GNU Assembler syntax.</p>
<p>Current version : 3.0</p>
<div id="art-main">
<li><a href="http://www.beaengine.org/downloads/FullDisasm_OllyDbg.zip"><strong>FullDisasm for OllyDbg</strong></a></li>
<li><a href="http://www.beaengine.org/downloads/FullDisasm_ImmDbg.zip"><strong>FullDisasm for  ImmDbg</strong></a></li>
</div>
<h3>相关文章</h3>
<ul class="related_posts">
<li><a href="http://www.h4ck.org.cn/2011/07/unpack-64bit-exe-via-ida-debug-plugin/" title="IDA + Debug 插件 实现64Bit Exe脱壳" rel="bookmark inlinks">IDA + Debug 插件 实现64Bit Exe脱壳</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2010/11/ollydbg-2-01-intermediate-alpha/" title="OllyDbg 2.01 intermediate alpha" rel="bookmark inlinks">OllyDbg 2.01 intermediate alpha</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2009/10/mew-11-1-2-northfoxhcc/" title="MEW 11 1.2 -> NorthFox/HCC 脱壳脚本” rel=”bookmark inlinks”>MEW 11 1.2 -> NorthFox/HCC 脱壳脚本</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/09/mac-os-gdb-%e9%85%8d%e7%bd%ae%e6%a8%a1%e7%89%88/" title="Mac OS gdb 配置模版" rel="bookmark inlinks">Mac OS gdb 配置模版</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/05/windows-driver-debug-via-ida-pro/" title="IDA 6.1调试驱动" rel="bookmark inlinks">IDA 6.1调试驱动</a><span class="count">( 4 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/06/advanced-windows-kernel-debugging-with-vmware-and-ida%e2%80%99s-gdb-debugger/" title="使用VMWare GDB和IDA调试Windows内核" rel="bookmark inlinks">使用VMWare GDB和IDA调试Windows内核</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/05/kernel-debugging-with-ida-pro/" title="IDA调试Windows 内核" rel="bookmark inlinks">IDA调试Windows 内核</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2009/08/od-break-points/" title="OD常用断点 ^_^ 很全很全" rel="bookmark inlinks">OD常用断点 ^_^ 很全很全</a><span class="count">( 1 )</span></li>
</ul>
]]></content:encoded>
			<wfw:commentRss>http://www.h4ck.org.cn/2011/05/fulldisasm-plugin-ollydbg-immunity-debugger/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>PluginFix v1.01[By BoB / Team PEiD]</title>
		<link>http://www.h4ck.org.cn/2011/02/pluginfix-v1-01by-bob-team-peid/</link>
		<comments>http://www.h4ck.org.cn/2011/02/pluginfix-v1-01by-bob-team-peid/#comments</comments>
		<pubDate>Wed, 16 Feb 2011 13:19:15 +0000</pubDate>
		<dc:creator>obaby</dc:creator>
				<category><![CDATA[插件『IDA/OD Plugin』]]></category>
		<category><![CDATA[Crack]]></category>
		<category><![CDATA[Debugger]]></category>
		<category><![CDATA[Plugin]]></category>

		<guid isPermaLink="false">http://www.h4ck.org.cn/?p=2510</guid>
		<description><![CDATA[/ This simple tool converts OllyDbg and ImmuntiyDebugger plugins to be used with the new ImmDbg v1.80
// It needs to change the Imports and Exports of a plugin to do this, so it will NOT work on packed plugins!]]></description>
			<content:encoded><![CDATA[<p><a rel="lightbox" href="http://www.h4ck.org.cn/wp-content/uploads//2011/02/PluginFix.png" title="PluginFix"><img title="PluginFix" src="http://www.h4ck.org.cn/wp-content/uploads//2011/02/PluginFix.png" alt="" width="609" height="400" /></a></p>
<p>===================================================================<br />
//  This simple tool converts OllyDbg and ImmuntiyDebugger plugins to be used with the new ImmDbg v1.80<br />
//  It needs to change the Imports and Exports of a plugin to do this, so it will NOT work on packed plugins!<br />
===================================================================<br />
<span id="more-2510"></span><br />
//[ v1.01 ]<br />
//<br />
//  Changes:<br />
//    o  Fixed problem that if any section raw pointer was 0 then no dos/pe header written<br />
//    o  Added support for OllyDbg Plugins<br />
//=================================================================</p>
<p><a href="http://dl.dbank.com/c01bmaz8jn" target="_blank">Click here to download it(with src)~ </a></p>
<p>Source Code:</p>

<div class="wp_syntax"><table><tr><td class="line_numbers"><pre>1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
</pre></td><td class="code"><pre class="delphi" style="font-family:monospace;"><span style="color: #000066;">======================================================================================================================</span>
<span style="color: #808080; font-style: italic;">//</span>
<span style="color: #808080; font-style: italic;">//  PluginFix v1.01</span>
<span style="color: #808080; font-style: italic;">//  By BoB / Team PEiD</span>
<span style="color: #808080; font-style: italic;">//</span>
<span style="color: #808080; font-style: italic;">//======================================================================================================================</span>
<span style="color: #808080; font-style: italic;">//</span>
<span style="color: #808080; font-style: italic;">//  This simple tool converts OllyDbg and ImmuntiyDebugger plugins to be used with the new ImmDbg v1.80</span>
<span style="color: #808080; font-style: italic;">//  It needs to change the Imports and Exports of a plugin to do this, so it will NOT work on packed plugins!</span>
<span style="color: #808080; font-style: italic;">//</span>
<span style="color: #808080; font-style: italic;">//=============================================================================================================[ v1.01 ]</span>
<span style="color: #808080; font-style: italic;">//</span>
<span style="color: #808080; font-style: italic;">//  Changes:</span>
<span style="color: #808080; font-style: italic;">//    o  Fixed problem that if any section raw pointer was 0 then no dos/pe header written</span>
<span style="color: #808080; font-style: italic;">//    o  Added support for OllyDbg Plugins</span>
<span style="color: #808080; font-style: italic;">//</span>
<span style="color: #808080; font-style: italic;">//======================================================================================================================</span>
&nbsp;
&nbsp;
<span style="color: #000000; font-weight: bold;">Program</span> PluginFix<span style="color: #000066;">;</span>
&nbsp;
<span style="color: #008000; font-style: italic;">{$APPTYPE CONSOLE}</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Uses</span>
  Windows<span style="color: #000066;">;</span>
&nbsp;
&nbsp;
<span style="color: #808080; font-style: italic;">//======================================================================================================================</span>
<span style="color: #808080; font-style: italic;">// Conversion list of ordinals in order of old ImmDbg, containing ordinal in new v1.80 ..  $FF = Ignore ..</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Const</span>
  ExportCount <span style="color: #000066;">=</span> <span style="color: #9ac;">$FD</span><span style="color: #000066;">;</span>
  ExportTable <span style="color: #000066;">:</span> <span style="color: #000000; font-weight: bold;">Array</span> <span style="color: #000066;">&#91;</span><span style="color: #0000ff;">1</span> <span style="color: #000066;">..</span> <span style="color: #006600;">ExportCount</span><span style="color: #000066;">-</span><span style="color: #0000ff;">1</span><span style="color: #000066;">&#93;</span> <span style="color: #000000; font-weight: bold;">Of</span> <span style="color: #000066; font-weight: bold;">Byte</span> <span style="color: #000066;">=</span> <span style="color: #000066;">&#40;</span>
    <span style="color: #9ac;">$03</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$04</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$05</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$09</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$0B</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$0C</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$0D</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$0E</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$10</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$11</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$12</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$16</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$1A</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$1C</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$1D</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$1E</span><span style="color: #000066;">,</span>
    <span style="color: #9ac;">$1F</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$20</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$21</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$22</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$24</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$25</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$26</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$28</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$29</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$2A</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$2C</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$2D</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$2F</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$30</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$31</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$32</span><span style="color: #000066;">,</span>
    <span style="color: #9ac;">$33</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$34</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$36</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$38</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$39</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$3C</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$3D</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$3E</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$40</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$41</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$42</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$43</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$44</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$45</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$46</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$4D</span><span style="color: #000066;">,</span>
    <span style="color: #9ac;">$4E</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$4F</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$50</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$51</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$53</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$55</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$57</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$59</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$5A</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$5C</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$5D</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$5F</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$60</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$61</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$62</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$65</span><span style="color: #000066;">,</span>
    <span style="color: #9ac;">$67</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$68</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$6A</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$6C</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$6E</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$73</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$76</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$77</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$78</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$7A</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$7D</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$7F</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$81</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$82</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$84</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$89</span><span style="color: #000066;">,</span>
    <span style="color: #9ac;">$8B</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$8C</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$90</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$91</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$92</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$94</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$96</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$98</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$99</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$9A</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$9B</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$9C</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$9D</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$A0</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$A1</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$A2</span><span style="color: #000066;">,</span>
    <span style="color: #9ac;">$A3</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$A5</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$CC</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$CD</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$CF</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$D0</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$D1</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$D2</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$D9</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$DC</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$DE</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$E1</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$E2</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$E7</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$E9</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$EC</span><span style="color: #000066;">,</span>
    <span style="color: #9ac;">$ED</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$EF</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$F1</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$F3</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$F5</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$3F</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$48</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$4A</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$74</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$75</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$93</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$D6</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$D8</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$14</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$1B</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$23</span><span style="color: #000066;">,</span>
    <span style="color: #9ac;">$2B</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$2E</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$3B</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$47</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$49</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$4B</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$4C</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$52</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$54</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$58</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$5B</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$63</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$64</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$66</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$69</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$6B</span><span style="color: #000066;">,</span>
    <span style="color: #9ac;">$6D</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$6F</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$70</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$79</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$7B</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$7C</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$83</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$85</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$87</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$8A</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$95</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$A4</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$CE</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$D4</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$D5</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$DF</span><span style="color: #000066;">,</span>
    <span style="color: #9ac;">$EA</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$EB</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$F4</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$06</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$15</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$17</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$18</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$19</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$27</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$35</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$80</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$DA</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$E0</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$E4</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$3A</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$56</span><span style="color: #000066;">,</span>
    <span style="color: #9ac;">$72</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$88</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$EE</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$0A</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$13</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$E5</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$E6</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$5E</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$DD</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$8E</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$E8</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$08</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$9E</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$CA</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$07</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$C6</span><span style="color: #000066;">,</span>
    <span style="color: #9ac;">$C4</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$C2</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$D7</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$B9</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$BA</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$BC</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$FF</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$F0</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$C7</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$BF</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$B7</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$7E</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$FF</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$B6</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$B4</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$C0</span><span style="color: #000066;">,</span>
    <span style="color: #9ac;">$C5</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$B8</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$A6</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$AB</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$B3</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$F2</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$FF</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$D3</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$8D</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$BE</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$B5</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$71</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$C3</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$01</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$A9</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$FF</span><span style="color: #000066;">,</span>
    <span style="color: #9ac;">$C9</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$AD</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$B1</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$A8</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$F7</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$AA</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$AF</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$BD</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$C1</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$F8</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$8F</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$37</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$AE</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$FF</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$9F</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$E3</span><span style="color: #000066;">,</span>
    <span style="color: #9ac;">$CB</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$BB</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$86</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$0F</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$B0</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$AC</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$DB</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$FF</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$97</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$FF</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$00</span><span style="color: #000066;">,</span> <span style="color: #9ac;">$B2</span>
  <span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
&nbsp;
&nbsp;
<span style="color: #808080; font-style: italic;">//======================================================================================================================</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Type</span>
  TMemRec <span style="color: #000066;">=</span> <span style="color: #000000; font-weight: bold;">Packed</span> <span style="color: #000000; font-weight: bold;">Record</span>
    Address <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">Pointer</span><span style="color: #000066;">;</span>
    Size    <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
  PImageSectionHeader <span style="color: #000066;">=</span> <span style="color: #000066;">^</span>TImageSectionHeader<span style="color: #000066;">;</span>
  TImageSectionHeader <span style="color: #000066;">=</span> <span style="color: #000000; font-weight: bold;">Packed</span> <span style="color: #000000; font-weight: bold;">Record</span>
    Name                 <span style="color: #000066;">:</span> <span style="color: #000000; font-weight: bold;">Array</span> <span style="color: #000066;">&#91;</span><span style="color: #0000ff;">1</span> <span style="color: #000066;">..</span> <span style="color: #0000ff;">8</span><span style="color: #000066;">&#93;</span> <span style="color: #000000; font-weight: bold;">Of</span> <span style="color: #000066; font-weight: bold;">Char</span><span style="color: #000066;">;</span>
    VirtualSize          <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
    VirtualRva           <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
    RawSize              <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
    RawOffset            <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
    Unused               <span style="color: #000066;">:</span> <span style="color: #000000; font-weight: bold;">Array</span> <span style="color: #000066;">&#91;</span><span style="color: #0000ff;">1</span> <span style="color: #000066;">..</span> <span style="color: #0000ff;">3</span><span style="color: #000066;">&#93;</span> <span style="color: #000000; font-weight: bold;">Of</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>  <span style="color: #808080; font-style: italic;">// Depreciated / Coff only ..</span>
    Characteristics      <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
  PImageImportDescriptor <span style="color: #000066;">=</span> <span style="color: #000066;">^</span>TImageImportDescriptor<span style="color: #000066;">;</span>
  TImageImportDescriptor <span style="color: #000066;">=</span> <span style="color: #000000; font-weight: bold;">Packed</span> <span style="color: #000000; font-weight: bold;">Record</span>
    OriginalFirstThunk<span style="color: #000066;">,</span> TimeDateStamp<span style="color: #000066;">,</span>
    ForwarderChain<span style="color: #000066;">,</span> Name<span style="color: #000066;">,</span>
    FirstThunk<span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
  PImageExportDirectory <span style="color: #000066;">=</span> <span style="color: #000066;">^</span>TImageExportDirectory<span style="color: #000066;">;</span>
  TImageExportDirectory <span style="color: #000066;">=</span> <span style="color: #000000; font-weight: bold;">Packed</span> <span style="color: #000000; font-weight: bold;">Record</span>
    Characteristics<span style="color: #000066;">,</span> TimeDateStamp<span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
    MajorVersion<span style="color: #000066;">,</span> MinorVersion<span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">Word</span><span style="color: #000066;">;</span>
    Name<span style="color: #000066;">,</span> Base<span style="color: #000066;">,</span> NumberOfFunctions<span style="color: #000066;">,</span>
    NumberOfNames<span style="color: #000066;">,</span> RvaOfFunctions<span style="color: #000066;">,</span>
    RvaOfNames<span style="color: #000066;">,</span> RvaOfNameOrdinals<span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
&nbsp;
<span style="color: #808080; font-style: italic;">//======================================================================================================================</span>
<span style="color: #808080; font-style: italic;">// Useful functions ..</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Function</span>  <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span><span style="color: #000000; font-weight: bold;">Const</span> P <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">Pointer</span><span style="color: #000066;">;</span> <span style="color: #000000; font-weight: bold;">Const</span> Offset <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">Integer</span><span style="color: #000066;">&#41;</span> <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">Pointer</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">Begin</span>
  Result <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066; font-weight: bold;">Pointer</span><span style="color: #000066;">&#40;</span><span style="color: #000066; font-weight: bold;">Int64</span><span style="color: #000066;">&#40;</span>P<span style="color: #000066;">&#41;</span> <span style="color: #000066;">+</span> Offset<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Function</span>  ALIGN_DOWN<span style="color: #000066;">&#40;</span><span style="color: #000000; font-weight: bold;">Const</span> a<span style="color: #000066;">,</span> b <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">&#41;</span> <span style="color: #000066;">:</span>  <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">Begin</span>
  Result <span style="color: #000066;">:</span><span style="color: #000066;">=</span> a<span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span>a &lt;&gt; <span style="color: #0000ff;">0</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">And</span> <span style="color: #000066;">&#40;</span>b &lt;&gt; <span style="color: #0000ff;">0</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> Result <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">&#40;</span><span style="color: #000066;">&#40;</span>a <span style="color: #000000; font-weight: bold;">Div</span> b<span style="color: #000066;">&#41;</span> <span style="color: #000066;">*</span> b<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Function</span>  ALIGN_UP<span style="color: #000066;">&#40;</span><span style="color: #000000; font-weight: bold;">Const</span> a<span style="color: #000066;">,</span> b <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">&#41;</span> <span style="color: #000066;">:</span>  <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">Begin</span>
  Result <span style="color: #000066;">:</span><span style="color: #000066;">=</span> ALIGN_DOWN<span style="color: #000066;">&#40;</span>a <span style="color: #000066;">+</span> <span style="color: #000066;">&#40;</span>b <span style="color: #000066;">-</span> <span style="color: #0000ff;">1</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">,</span> b<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Function</span>  <span style="color: #000066;">IntToStr</span><span style="color: #000066;">&#40;</span><span style="color: #000000; font-weight: bold;">Const</span> Value <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">&#41;</span> <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">String</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">Begin</span>
  <span style="color: #000066;">Str</span><span style="color: #000066;">&#40;</span>Value<span style="color: #000066;">,</span> Result<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Function</span>  <span style="color: #000066;">StrLen</span><span style="color: #000066;">&#40;</span><span style="color: #000000; font-weight: bold;">Const</span> PC <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">PChar</span><span style="color: #000066;">&#41;</span> <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">Begin</span>
  Result <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">While</span> <span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">&#91;</span>Result<span style="color: #000066;">&#93;</span> &lt;&gt; <span style="color: #ff0000;">#0</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Do</span> <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>Result<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Function</span>  <span style="color: #000066;">UpperCase</span><span style="color: #000066;">&#40;</span><span style="color: #000000; font-weight: bold;">Const</span> S<span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">String</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">String</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">Var</span>
  I<span style="color: #000066;">,</span> L <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">Begin</span>
  L <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Length</span><span style="color: #000066;">&#40;</span>S<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
  <span style="color: #000066;">SetLength</span><span style="color: #000066;">&#40;</span>Result<span style="color: #000066;">,</span> L<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span>L &gt; <span style="color: #0000ff;">0</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000000; font-weight: bold;">For</span> I <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #0000ff;">1</span> <span style="color: #000000; font-weight: bold;">To</span> L <span style="color: #000000; font-weight: bold;">Do</span> Result<span style="color: #000066;">&#91;</span>I<span style="color: #000066;">&#93;</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">UpCase</span><span style="color: #000066;">&#40;</span>S<span style="color: #000066;">&#91;</span>I<span style="color: #000066;">&#93;</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Function</span>  <span style="color: #000066;">AllocMem</span><span style="color: #000066;">&#40;</span><span style="color: #000000; font-weight: bold;">Const</span> Size <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">&#41;</span> <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">Pointer</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">Begin</span>
  <span style="color: #000066;">GetMem</span><span style="color: #000066;">&#40;</span>Result<span style="color: #000066;">,</span> Size<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
  ZeroMemory<span style="color: #000066;">&#40;</span>Result<span style="color: #000066;">,</span> Size<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
&nbsp;
&nbsp;
&nbsp;
<span style="color: #808080; font-style: italic;">//======================================================================================================================</span>
<span style="color: #808080; font-style: italic;">// Load and map a PE file as an image ..</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Function</span>  LoadFileAsImage<span style="color: #000066;">&#40;</span><span style="color: #000000; font-weight: bold;">Const</span> Filename <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">String</span><span style="color: #000066;">&#41;</span> <span style="color: #000066;">:</span> PImageDosHeader<span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">Var</span>
  hFile<span style="color: #000066;">,</span> I<span style="color: #000066;">,</span> Size<span style="color: #000066;">,</span> Attr <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
  Raw <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">Pointer</span><span style="color: #000066;">;</span>
&nbsp;
  <span style="color: #808080; font-style: italic;">// Map a raw module to image ..  MUST be Valid PE, cos only basic testing done!</span>
  <span style="color: #000000; font-weight: bold;">Function</span>  MapRawPE<span style="color: #000066;">&#40;</span><span style="color: #000000; font-weight: bold;">Const</span> RawMem <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">Pointer</span><span style="color: #000066;">;</span> <span style="color: #000000; font-weight: bold;">Const</span> Size <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">&#41;</span> <span style="color: #000066;">:</span> TMemRec<span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">Var</span>
    Dos <span style="color: #000066;">:</span> PImageDosHeader Absolute RawMem<span style="color: #000066;">;</span>
    NT  <span style="color: #000066;">:</span> PImageNtHeaders<span style="color: #000066;">;</span>
    <span style="color: #000066;">Sec</span> <span style="color: #000066;">:</span> PImageSectionHeader<span style="color: #000066;">;</span>
    Mem <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">Pointer</span><span style="color: #000066;">;</span>
    Idx <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
    <span style="color: #000066;">Val</span> <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">Begin</span>
    Result<span style="color: #000066;">.</span><span style="color: #006600;">Address</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000000; font-weight: bold;">Nil</span><span style="color: #000066;">;</span>
    Result<span style="color: #000066;">.</span><span style="color: #006600;">Size</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">If</span> IsBadReadPtr<span style="color: #000066;">&#40;</span>RawMem<span style="color: #000066;">,</span> Size<span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Or</span> <span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">e_magic</span> &lt;&gt; IMAGE_DOS_SIGNATURE<span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000066;">Exit</span><span style="color: #000066;">;</span>
    NT <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>RawMem<span style="color: #000066;">,</span> Dos<span style="color: #000066;">^</span><span style="color: #000066;">.</span>_lfanew<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span>NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">Signature</span> &lt;&gt; IMAGE_NT_SIGNATURE<span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000066;">Exit</span><span style="color: #000066;">;</span>
    <span style="color: #808080; font-style: italic;">// Allocate 1 page more so it's possible to enlarge the image without reallocating ..</span>
    <span style="color: #000066;">Val</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> Align_Up<span style="color: #000066;">&#40;</span>NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">OptionalHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">SizeOfImage</span> <span style="color: #000066;">+</span> <span style="color: #9ac;">$1000</span><span style="color: #000066;">,</span> NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">OptionalHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">SectionAlignment</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    Mem <span style="color: #000066;">:</span><span style="color: #000066;">=</span> VirtualAlloc<span style="color: #000066;">&#40;</span><span style="color: #000000; font-weight: bold;">Nil</span><span style="color: #000066;">,</span> <span style="color: #000066;">Val</span><span style="color: #000066;">,</span> MEM_COMMIT<span style="color: #000066;">,</span> PAGE_EXECUTE_READWRITE<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    Result<span style="color: #000066;">.</span><span style="color: #006600;">Address</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> Mem<span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span>Mem <span style="color: #000066;">=</span> <span style="color: #000000; font-weight: bold;">Nil</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000066;">Exit</span><span style="color: #000066;">;</span>
    <span style="color: #808080; font-style: italic;">// Copy section data ..</span>
    <span style="color: #000066;">Sec</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>NT<span style="color: #000066;">,</span> <span style="color: #0000ff;">4</span> <span style="color: #000066;">+</span> <span style="color: #000066;">SizeOf</span><span style="color: #000066;">&#40;</span>TImageFileHeader<span style="color: #000066;">&#41;</span> <span style="color: #000066;">+</span> NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">FileHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">SizeOfOptionalHeader</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000066;">Val</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> Size<span style="color: #000066;">;</span>
    Idx <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">While</span> <span style="color: #000066;">&#40;</span>Idx &lt; NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">FileHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">NumberOfSections</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Do</span> <span style="color: #000000; font-weight: bold;">Begin</span>
      <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span><span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">RawOffset</span> &gt; <span style="color: #0000ff;">0</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000000; font-weight: bold;">Begin</span>
        CopyMemory<span style="color: #000066;">&#40;</span><span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Mem<span style="color: #000066;">,</span> <span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">VirtualRva</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">,</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>RawMem<span style="color: #000066;">,</span> <span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">RawOffset</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">,</span> <span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">RawSize</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
        <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span><span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">RawOffset</span> &lt; <span style="color: #000066;">Val</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000066;">Val</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">RawOffset</span><span style="color: #000066;">;</span>  <span style="color: #808080; font-style: italic;">// Val = Lowest Raw offset ..</span>
      <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
      <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span><span style="color: #000066;">Sec</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>Idx<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
    <span style="color: #808080; font-style: italic;">// Copy all headers ..</span>
    CopyMemory<span style="color: #000066;">&#40;</span>Mem<span style="color: #000066;">,</span> RawMem<span style="color: #000066;">,</span> <span style="color: #000066;">Val</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Begin</span>
  Result <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000000; font-weight: bold;">Nil</span><span style="color: #000066;">;</span>
  Raw <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000000; font-weight: bold;">Nil</span><span style="color: #000066;">;</span>
  <span style="color: #808080; font-style: italic;">// Get/Set Attr so we can read hidden / read only files ..</span>
  Attr <span style="color: #000066;">:</span><span style="color: #000066;">=</span> GetFileAttributes<span style="color: #000066;">&#40;</span><span style="color: #000066; font-weight: bold;">PChar</span><span style="color: #000066;">&#40;</span>Filename<span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span>Attr &lt;&gt; <span style="color: #9ac;">$FFFFFFFF</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000000; font-weight: bold;">Try</span>
    SetFileAttributes<span style="color: #000066;">&#40;</span><span style="color: #000066; font-weight: bold;">PChar</span><span style="color: #000066;">&#40;</span>Filename<span style="color: #000066;">&#41;</span><span style="color: #000066;">,</span> FILE_ATTRIBUTE_NORMAL<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    hFile <span style="color: #000066;">:</span><span style="color: #000066;">=</span> CreateFile<span style="color: #000066;">&#40;</span><span style="color: #000066; font-weight: bold;">PChar</span><span style="color: #000066;">&#40;</span>Filename<span style="color: #000066;">&#41;</span><span style="color: #000066;">,</span> GENERIC_READ<span style="color: #000066;">,</span> FILE_SHARE_READ<span style="color: #000066;">,</span> <span style="color: #000000; font-weight: bold;">Nil</span><span style="color: #000066;">,</span> Open_Existing<span style="color: #000066;">,</span> FILE_ATTRIBUTE_NORMAL<span style="color: #000066;">,</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span>hFile &lt;&gt; INVALID_HANDLE_VALUE<span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000000; font-weight: bold;">Try</span>
      Size <span style="color: #000066;">:</span><span style="color: #000066;">=</span> GetFileSize<span style="color: #000066;">&#40;</span>hFile<span style="color: #000066;">,</span> <span style="color: #000000; font-weight: bold;">Nil</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      Raw <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">AllocMem</span><span style="color: #000066;">&#40;</span>Size<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      ReadFile<span style="color: #000066;">&#40;</span>hFile<span style="color: #000066;">,</span> Raw<span style="color: #000066;">^</span><span style="color: #000066;">,</span> Size<span style="color: #000066;">,</span> I<span style="color: #000066;">,</span> <span style="color: #000000; font-weight: bold;">Nil</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      Result <span style="color: #000066;">:</span><span style="color: #000066;">=</span> MapRawPE<span style="color: #000066;">&#40;</span>Raw<span style="color: #000066;">,</span> I<span style="color: #000066;">&#41;</span><span style="color: #000066;">.</span><span style="color: #006600;">Address</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">Finally</span>
      CloseHandle<span style="color: #000066;">&#40;</span>hFile<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000066;">FreeMem</span><span style="color: #000066;">&#40;</span>Raw<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">Finally</span>
    SetFileAttributes<span style="color: #000066;">&#40;</span><span style="color: #000066; font-weight: bold;">PChar</span><span style="color: #000066;">&#40;</span>Filename<span style="color: #000066;">&#41;</span><span style="color: #000066;">,</span> Attr<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
&nbsp;
<span style="color: #808080; font-style: italic;">//======================================================================================================================</span>
<span style="color: #808080; font-style: italic;">// Save a mapped module to raw image file ..</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Procedure</span> SaveModuleToRawFile<span style="color: #000066;">&#40;</span><span style="color: #000000; font-weight: bold;">Const</span> Module <span style="color: #000066;">:</span> PImageDosHeader<span style="color: #000066;">;</span> <span style="color: #000000; font-weight: bold;">Const</span> Filename <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">String</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">Var</span>
  Mem <span style="color: #000066;">:</span> TMemRec<span style="color: #000066;">;</span>
&nbsp;
  <span style="color: #808080; font-style: italic;">// Save a mapped module to raw image memory block ..</span>
  <span style="color: #000000; font-weight: bold;">Function</span>  BuildRawPEFromModule <span style="color: #000066;">:</span> TMemRec<span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">Var</span>
    NT  <span style="color: #000066;">:</span> PImageNtHeaders<span style="color: #000066;">;</span>
    <span style="color: #000066;">Sec</span> <span style="color: #000066;">:</span> PImageSectionHeader<span style="color: #000066;">;</span>
    I<span style="color: #000066;">,</span>J <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">Begin</span>
    Result<span style="color: #000066;">.</span><span style="color: #006600;">Address</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000000; font-weight: bold;">Nil</span><span style="color: #000066;">;</span>
    Result<span style="color: #000066;">.</span><span style="color: #006600;">Size</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">If</span> IsBadReadPtr<span style="color: #000066;">&#40;</span>Module<span style="color: #000066;">,</span> <span style="color: #000066;">SizeOf</span><span style="color: #000066;">&#40;</span>TImageDosHeader<span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Or</span> <span style="color: #000066;">&#40;</span>Module<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">e_magic</span> &lt;&gt; IMAGE_DOS_SIGNATURE<span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000066;">Exit</span><span style="color: #000066;">;</span>
    NT <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Module<span style="color: #000066;">,</span> Module<span style="color: #000066;">^</span><span style="color: #000066;">.</span>_lfanew<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span>NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">Signature</span> &lt;&gt; IMAGE_NT_SIGNATURE<span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000066;">Exit</span><span style="color: #000066;">;</span>
&nbsp;
    <span style="color: #808080; font-style: italic;">// Calc raw size ..</span>
    <span style="color: #000066;">Sec</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>NT<span style="color: #000066;">,</span> <span style="color: #0000ff;">4</span> <span style="color: #000066;">+</span> <span style="color: #000066;">SizeOf</span><span style="color: #000066;">&#40;</span>TImageFileHeader<span style="color: #000066;">&#41;</span> <span style="color: #000066;">+</span> NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">FileHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">SizeOfOptionalHeader</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    Result<span style="color: #000066;">.</span><span style="color: #006600;">Size</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">RawOffset</span><span style="color: #000066;">;</span>
    J <span style="color: #000066;">:</span><span style="color: #000066;">=</span> NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">OptionalHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">SizeOfImage</span><span style="color: #000066;">;</span>
    I <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">While</span> <span style="color: #000066;">&#40;</span>I &lt; NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">FileHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">NumberOfSections</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Do</span> <span style="color: #000000; font-weight: bold;">Begin</span>
      <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span><span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">RawOffset</span> &lt; J<span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">And</span> <span style="color: #000066;">&#40;</span><span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">RawOffset</span> &gt; <span style="color: #0000ff;">0</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> J <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">RawOffset</span><span style="color: #000066;">;</span>  <span style="color: #808080; font-style: italic;">// J = Lowest Raw offset ..</span>
      <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>Result<span style="color: #000066;">.</span><span style="color: #006600;">Size</span><span style="color: #000066;">,</span> Align_up<span style="color: #000066;">&#40;</span><span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">RawSize</span><span style="color: #000066;">,</span> NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">OptionalHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">FileAlignment</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span><span style="color: #000066;">Sec</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>I<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
    <span style="color: #808080; font-style: italic;">// Alloc mem and build Raw image ..</span>
    Result<span style="color: #000066;">.</span><span style="color: #006600;">Address</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">AllocMem</span><span style="color: #000066;">&#40;</span>Result<span style="color: #000066;">.</span><span style="color: #006600;">Size</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    CopyMemory<span style="color: #000066;">&#40;</span>Result<span style="color: #000066;">.</span><span style="color: #006600;">Address</span><span style="color: #000066;">,</span> Module<span style="color: #000066;">,</span> J<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000066;">Sec</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>NT<span style="color: #000066;">,</span> <span style="color: #0000ff;">4</span> <span style="color: #000066;">+</span> <span style="color: #000066;">SizeOf</span><span style="color: #000066;">&#40;</span>TImageFileHeader<span style="color: #000066;">&#41;</span> <span style="color: #000066;">+</span> NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">FileHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">SizeOfOptionalHeader</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    I <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">While</span> <span style="color: #000066;">&#40;</span>I &lt; NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">FileHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">NumberOfSections</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Do</span> <span style="color: #000000; font-weight: bold;">Begin</span>
      CopyMemory<span style="color: #000066;">&#40;</span><span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Result<span style="color: #000066;">.</span><span style="color: #006600;">Address</span><span style="color: #000066;">,</span> <span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">RawOffset</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">,</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Module<span style="color: #000066;">,</span> <span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">VirtualRva</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">,</span> <span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">RawSize</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span><span style="color: #000066;">Sec</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>I<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
  <span style="color: #808080; font-style: italic;">// Save memory block to file ..</span>
  <span style="color: #000000; font-weight: bold;">Procedure</span> SaveMemToFile<span style="color: #000066;">&#40;</span><span style="color: #000000; font-weight: bold;">Const</span> Mem <span style="color: #000066;">:</span> TMemRec<span style="color: #000066;">;</span> <span style="color: #000000; font-weight: bold;">Const</span> Filename <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">String</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">Var</span>
    hFile<span style="color: #000066;">,</span> I <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">Begin</span>
    <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span>Mem<span style="color: #000066;">.</span><span style="color: #006600;">Address</span> <span style="color: #000066;">=</span> <span style="color: #000000; font-weight: bold;">Nil</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Or</span> <span style="color: #000066;">&#40;</span>Mem<span style="color: #000066;">.</span><span style="color: #006600;">Size</span> <span style="color: #000066;">=</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000066;">Exit</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">If</span> SetFileAttributes<span style="color: #000066;">&#40;</span><span style="color: #000066; font-weight: bold;">PChar</span><span style="color: #000066;">&#40;</span>Filename<span style="color: #000066;">&#41;</span><span style="color: #000066;">,</span> FILE_ATTRIBUTE_NORMAL<span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000066;">DeleteFile</span><span style="color: #000066;">&#40;</span><span style="color: #000066; font-weight: bold;">PChar</span><span style="color: #000066;">&#40;</span>Filename<span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    hFile <span style="color: #000066;">:</span><span style="color: #000066;">=</span> CreateFile<span style="color: #000066;">&#40;</span><span style="color: #000066; font-weight: bold;">PChar</span><span style="color: #000066;">&#40;</span>Filename<span style="color: #000066;">&#41;</span><span style="color: #000066;">,</span> GENERIC_READ <span style="color: #000000; font-weight: bold;">Or</span> GENERIC_WRITE<span style="color: #000066;">,</span> FILE_SHARE_READ<span style="color: #000066;">,</span> <span style="color: #000000; font-weight: bold;">Nil</span><span style="color: #000066;">,</span> Create_Always<span style="color: #000066;">,</span> FILE_ATTRIBUTE_NORMAL<span style="color: #000066;">,</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span>hFile <span style="color: #000066;">=</span> INVALID_HANDLE_VALUE<span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000066;">Exit</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">Try</span>
      WriteFile<span style="color: #000066;">&#40;</span>hFile<span style="color: #000066;">,</span> Mem<span style="color: #000066;">.</span><span style="color: #006600;">Address</span><span style="color: #000066;">^</span><span style="color: #000066;">,</span> Mem<span style="color: #000066;">.</span><span style="color: #006600;">Size</span><span style="color: #000066;">,</span> I<span style="color: #000066;">,</span> <span style="color: #000000; font-weight: bold;">Nil</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      FlushFileBuffers<span style="color: #000066;">&#40;</span>hFile<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">Finally</span>
      CloseHandle<span style="color: #000066;">&#40;</span>hFile<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Begin</span>
  Mem <span style="color: #000066;">:</span><span style="color: #000066;">=</span> BuildRawPEFromModule<span style="color: #000066;">;</span>
  SaveMemToFile<span style="color: #000066;">&#40;</span>Mem<span style="color: #000066;">,</span> Filename<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
  <span style="color: #000066;">FreeMem</span><span style="color: #000066;">&#40;</span>Mem<span style="color: #000066;">.</span><span style="color: #006600;">Address</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
&nbsp;
<span style="color: #808080; font-style: italic;">//======================================================================================================================</span>
<span style="color: #808080; font-style: italic;">// Fix the imports and exports of a plugin ..</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Procedure</span> FixPlugin<span style="color: #000066;">&#40;</span><span style="color: #000000; font-weight: bold;">Const</span> Filename <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">String</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">Const</span>
  ImmDbg <span style="color: #000066;">=</span> <span style="color: #ff0000;">'ImmunityDebugger.Exe'</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">Var</span>
  Dos <span style="color: #000066;">:</span> PImageDosHeader<span style="color: #000066;">;</span>
  NT  <span style="color: #000066;">:</span> PImageNtHeaders<span style="color: #000066;">;</span>
  <span style="color: #000066;">Sec</span> <span style="color: #000066;">:</span> PImageSectionHeader<span style="color: #000066;">;</span>
  Ex  <span style="color: #000066;">:</span> PImageExportDirectory<span style="color: #000066;">;</span>
  Imp <span style="color: #000066;">:</span> PImageImportDescriptor<span style="color: #000066;">;</span>
  PC  <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">PAnsiChar</span><span style="color: #000066;">;</span>
  PD  <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">PDWord</span><span style="color: #000066;">;</span>
  I   <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
  NoIm<span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">Boolean</span><span style="color: #000066;">;</span>
  Name<span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">String</span><span style="color: #000066;">;</span>
  Size<span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
  Rva <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
&nbsp;
  <span style="color: #808080; font-style: italic;">// Fix an import thunk for ImmunityDebugger.exe ..</span>
  <span style="color: #000000; font-weight: bold;">Procedure</span> FixThunk<span style="color: #000066;">&#40;</span><span style="color: #000000; font-weight: bold;">Const</span> Thunk <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">Var</span>
    J <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">Begin</span>
    <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span>Thunk &gt; <span style="color: #0000ff;">0</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000000; font-weight: bold;">Begin</span>
      PD <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> Thunk<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000000; font-weight: bold;">If</span> IsBadReadPtr<span style="color: #000066;">&#40;</span>PD<span style="color: #000066;">,</span> <span style="color: #0000ff;">4</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Or</span> <span style="color: #000066;">&#40;</span>PD<span style="color: #000066;">^</span> <span style="color: #000066;">=</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000066;">Exit</span><span style="color: #000066;">;</span>
      <span style="color: #000000; font-weight: bold;">While</span> <span style="color: #000066;">&#40;</span>PD<span style="color: #000066;">^</span> &lt;&gt; <span style="color: #0000ff;">0</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Do</span> <span style="color: #000000; font-weight: bold;">Begin</span>
        <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span>PD<span style="color: #000066;">^</span> <span style="color: #000000; font-weight: bold;">And</span> <span style="color: #9ac;">$80000000</span> &lt;&gt; <span style="color: #0000ff;">0</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000000; font-weight: bold;">Begin</span>
          <span style="color: #808080; font-style: italic;">// Change old ordinal to new ordinal value ..</span>
          J <span style="color: #000066;">:</span><span style="color: #000066;">=</span> PD<span style="color: #000066;">^</span> <span style="color: #000000; font-weight: bold;">And</span> <span style="color: #9ac;">$0FFF</span><span style="color: #000066;">;</span>
          <span style="color: #000066;">WriteLn</span><span style="color: #000066;">&#40;</span><span style="color: #ff0000;">'    #'</span> <span style="color: #000066;">+</span> <span style="color: #000066;">IntToStr</span><span style="color: #000066;">&#40;</span>J<span style="color: #000066;">&#41;</span> <span style="color: #000066;">+</span> <span style="color: #ff0000;">' -&gt; #'</span> <span style="color: #000066;">+</span> <span style="color: #000066;">IntToStr</span><span style="color: #000066;">&#40;</span>ExportTable<span style="color: #000066;">&#91;</span>J<span style="color: #000066;">&#93;</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
          PD<span style="color: #000066;">^</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">&#40;</span>ExportTable<span style="color: #000066;">&#91;</span>J<span style="color: #000066;">&#93;</span> <span style="color: #000000; font-weight: bold;">Or</span> <span style="color: #9ac;">$80000000</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
          NoIm <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000000; font-weight: bold;">False</span><span style="color: #000066;">;</span>
        <span style="color: #000000; font-weight: bold;">End</span> <span style="color: #000000; font-weight: bold;">Else</span> <span style="color: #000000; font-weight: bold;">Begin</span>
          <span style="color: #808080; font-style: italic;">// Fix imported name string by skipping underscore in name ..</span>
          PC <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> PD<span style="color: #000066;">^</span> <span style="color: #000066;">+</span> <span style="color: #0000ff;">2</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
          <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span><span style="color: #000000; font-weight: bold;">Not</span> IsBadReadPtr<span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">,</span> <span style="color: #0000ff;">4</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">And</span> <span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">^</span> <span style="color: #000066;">=</span> <span style="color: #ff0000;">'_'</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000000; font-weight: bold;">Begin</span>
            <span style="color: #000066; font-weight: bold;">PWord</span><span style="color: #000066;">&#40;</span><span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> PD<span style="color: #000066;">^</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">^</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">;</span>
            <span style="color: #000066;">Write</span><span style="color: #000066;">&#40;</span><span style="color: #ff0000;">'    '</span> <span style="color: #000066;">+</span> PC <span style="color: #000066;">+</span> <span style="color: #ff0000;">' -&gt; '</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
            PC<span style="color: #000066;">^</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #ff0000;">#0</span><span style="color: #000066;">;</span>
            <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>PD<span style="color: #000066;">^</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
            NoIm <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000000; font-weight: bold;">False</span><span style="color: #000066;">;</span>
            <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
            <span style="color: #000066;">WriteLn</span><span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
          <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
        <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
        <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>PD<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Begin</span>
  <span style="color: #808080; font-style: italic;">// Load and map plugin dll as image ..</span>
  Dos <span style="color: #000066;">:</span><span style="color: #000066;">=</span> LoadFileAsImage<span style="color: #000066;">&#40;</span>Filename<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span>Dos &lt;&gt; <span style="color: #000000; font-weight: bold;">Nil</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000000; font-weight: bold;">Try</span>
    <span style="color: #000066;">WriteLn</span><span style="color: #000066;">&#40;</span><span style="color: #ff0000;">'Processing '</span> <span style="color: #000066;">+</span> Filename<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
&nbsp;
    <span style="color: #808080; font-style: italic;">// Find export names ..</span>
    NT <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> Dos<span style="color: #000066;">^</span><span style="color: #000066;">.</span>_lfanew<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    Ex <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">OptionalHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">DataDirectory</span><span style="color: #000066;">&#91;</span>IMAGE_DIRECTORY_ENTRY_EXPORT<span style="color: #000066;">&#93;</span><span style="color: #000066;">.</span><span style="color: #006600;">VirtualAddress</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    PD <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> Ex<span style="color: #000066;">.</span><span style="color: #006600;">RvaOfNames</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
&nbsp;
    <span style="color: #808080; font-style: italic;">// Find size of empty space needed to write new export strings ..</span>
    I <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">;</span>
    Rva <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">;</span>
    Size <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">While</span> <span style="color: #000066;">&#40;</span>I &lt; Ex<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">NumberOfNames</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Do</span> <span style="color: #000000; font-weight: bold;">Begin</span>
      PC <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> PD<span style="color: #000066;">^</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000000; font-weight: bold;">If</span> IsBadReadPtr<span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">,</span> <span style="color: #0000ff;">4</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000000; font-weight: bold;">Begin</span>
        <span style="color: #000066;">WriteLn</span><span style="color: #000066;">&#40;</span><span style="color: #ff0000;">'    Error reading export string!'</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
        <span style="color: #000066;">Exit</span><span style="color: #000066;">;</span>
      <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
      <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span><span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">^</span> <span style="color: #000066;">=</span> <span style="color: #ff0000;">'_'</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">And</span> <span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">&#91;</span><span style="color: #0000ff;">5</span><span style="color: #000066;">&#93;</span> <span style="color: #000066;">=</span> <span style="color: #ff0000;">'_'</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>Size<span style="color: #000066;">,</span> <span style="color: #0000ff;">3</span> <span style="color: #000066;">+</span> <span style="color: #000066;">StrLen</span><span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>I<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>PD<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
    <span style="color: #808080; font-style: italic;">// Fixup image for adding OllyDbg strings..</span>
    <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span>Size &gt; <span style="color: #0000ff;">0</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000000; font-weight: bold;">Begin</span>
      <span style="color: #000066;">Sec</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>NT<span style="color: #000066;">,</span> <span style="color: #0000ff;">4</span> <span style="color: #000066;">+</span> <span style="color: #000066;">SizeOf</span><span style="color: #000066;">&#40;</span>TImageFileHeader<span style="color: #000066;">&#41;</span> <span style="color: #000066;">+</span> NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">FileHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">SizeOfOptionalHeader</span> <span style="color: #000066;">+</span> <span style="color: #000066;">&#40;</span><span style="color: #000066;">&#40;</span>NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">FileHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">NumberOfSections</span> <span style="color: #000066;">-</span> <span style="color: #0000ff;">1</span><span style="color: #000066;">&#41;</span> <span style="color: #000066;">*</span> <span style="color: #000066;">SizeOf</span><span style="color: #000066;">&#40;</span>TImageSectionHeader<span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      Rva <span style="color: #000066;">:</span><span style="color: #000066;">=</span> Align_Up<span style="color: #000066;">&#40;</span><span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">VirtualRva</span> <span style="color: #000066;">+</span> <span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">RawSize</span><span style="color: #000066;">,</span> NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">OptionalHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">FileAlignment</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000000; font-weight: bold;">While</span> <span style="color: #000066;">&#40;</span><span style="color: #000066; font-weight: bold;">PDWord</span><span style="color: #000066;">&#40;</span><span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">&#41;</span> <span style="color: #000066;">+</span> Rva<span style="color: #000066;">&#41;</span><span style="color: #000066;">^</span> <span style="color: #000066;">=</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Do</span> <span style="color: #000066;">Dec</span><span style="color: #000066;">&#40;</span>Rva<span style="color: #000066;">,</span> <span style="color: #0000ff;">4</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      Rva <span style="color: #000066;">:</span><span style="color: #000066;">=</span> Align_Up<span style="color: #000066;">&#40;</span>Rva <span style="color: #000066;">+</span> <span style="color: #0000ff;">12</span><span style="color: #000066;">,</span> <span style="color: #0000ff;">16</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">RawSize</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> Align_Up<span style="color: #000066;">&#40;</span><span style="color: #000066;">&#40;</span>Rva <span style="color: #000066;">-</span> <span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">VirtualRva</span><span style="color: #000066;">&#41;</span> <span style="color: #000066;">+</span> Size <span style="color: #000066;">+</span> <span style="color: #000066;">StrLen</span><span style="color: #000066;">&#40;</span>ImmDbg<span style="color: #000066;">&#41;</span> <span style="color: #000066;">+</span> <span style="color: #0000ff;">1</span><span style="color: #000066;">,</span> NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">OptionalHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">FileAlignment</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">VirtualSize</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> Align_Up<span style="color: #000066;">&#40;</span><span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">RawSize</span><span style="color: #000066;">,</span> NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">OptionalHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">SectionAlignment</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">OptionalHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">SizeOfImage</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">VirtualRva</span> <span style="color: #000066;">+</span> <span style="color: #000066;">Sec</span><span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">VirtualSize</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
    <span style="color: #808080; font-style: italic;">// Fix exports ..</span>
    <span style="color: #000066;">WriteLn</span><span style="color: #000066;">&#40;</span><span style="color: #ff0000;">'  Fixing Exports'</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    PD <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> Ex<span style="color: #000066;">.</span><span style="color: #006600;">RvaOfNames</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    I <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">While</span> <span style="color: #000066;">&#40;</span>I &lt; Ex<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">NumberOfNames</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Do</span> <span style="color: #000000; font-weight: bold;">Begin</span>
      PC <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> PD<span style="color: #000066;">^</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span><span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">^</span> <span style="color: #000066;">=</span> <span style="color: #ff0000;">'_'</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">And</span> <span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">&#91;</span><span style="color: #0000ff;">1</span><span style="color: #000066;">&#93;</span> &lt;&gt; <span style="color: #ff0000;">'_'</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000000; font-weight: bold;">Begin</span>
        <span style="color: #000066;">Write</span><span style="color: #000066;">&#40;</span><span style="color: #ff0000;">'    '</span> <span style="color: #000066;">+</span> PC <span style="color: #000066;">+</span> <span style="color: #ff0000;">' -&gt; '</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
        <span style="color: #808080; font-style: italic;">// Check for Olly export ..</span>
        <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">&#91;</span><span style="color: #0000ff;">5</span><span style="color: #000066;">&#93;</span> <span style="color: #000066;">=</span> <span style="color: #ff0000;">'_'</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000000; font-weight: bold;">Begin</span>
          <span style="color: #808080; font-style: italic;">// Add new export string ..</span>
          PD<span style="color: #000066;">^</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> Rva<span style="color: #000066;">;</span>
          <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">,</span> <span style="color: #0000ff;">5</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
          <span style="color: #000066;">Move</span><span style="color: #000066;">&#40;</span><span style="color: #ff0000;">'IMMDBG'</span><span style="color: #000066;">,</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> Rva<span style="color: #000066;">&#41;</span><span style="color: #000066;">^</span><span style="color: #000066;">,</span> <span style="color: #0000ff;">6</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
          <span style="color: #000066;">Move</span><span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">^</span><span style="color: #000066;">,</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> Rva <span style="color: #000066;">+</span> <span style="color: #0000ff;">6</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">^</span><span style="color: #000066;">,</span> <span style="color: #000066;">StrLen</span><span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
          <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>Rva<span style="color: #000066;">,</span> <span style="color: #0000ff;">7</span> <span style="color: #000066;">+</span> <span style="color: #000066;">StrLen</span><span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
        <span style="color: #000000; font-weight: bold;">End</span> <span style="color: #000000; font-weight: bold;">Else</span>
          <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>PD<span style="color: #000066;">^</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>  <span style="color: #808080; font-style: italic;">// Fix for old ImmDbg is simpler .. :)</span>
        PC <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> PD<span style="color: #000066;">^</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
        <span style="color: #000066;">WriteLn</span><span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
      <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>I<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>PD<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
    <span style="color: #000066;">WriteLn</span><span style="color: #000066;">;</span>
&nbsp;
    <span style="color: #808080; font-style: italic;">// Fix imports ..</span>
    NoIm <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000000; font-weight: bold;">True</span><span style="color: #000066;">;</span>
    <span style="color: #000066;">WriteLn</span><span style="color: #000066;">&#40;</span><span style="color: #ff0000;">'  Fixing Imports'</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    Imp <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> NT<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">OptionalHeader</span><span style="color: #000066;">.</span><span style="color: #006600;">DataDirectory</span><span style="color: #000066;">&#91;</span>IMAGE_DIRECTORY_ENTRY_IMPORT<span style="color: #000066;">&#93;</span><span style="color: #000066;">.</span><span style="color: #006600;">VirtualAddress</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">While</span> <span style="color: #000066;">&#40;</span>Imp<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">Name</span> &lt;&gt; <span style="color: #0000ff;">0</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Do</span> <span style="color: #000000; font-weight: bold;">Begin</span>
      PC <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> Imp<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">Name</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000000; font-weight: bold;">If</span> IsBadReadPtr<span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">,</span> <span style="color: #000066;">Length</span><span style="color: #000066;">&#40;</span>ImmDbg<span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000000; font-weight: bold;">Begin</span>
        <span style="color: #000066;">WriteLn</span><span style="color: #000066;">&#40;</span><span style="color: #ff0000;">'    Error reading imported Dll string!'</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
        <span style="color: #000066;">Exit</span><span style="color: #000066;">;</span>
      <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
      <span style="color: #808080; font-style: italic;">// Importing from an EXE ?</span>
      <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span><span style="color: #000066;">Uppercase</span><span style="color: #000066;">&#40;</span><span style="color: #000066;">Copy</span><span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">,</span> <span style="color: #000066;">StrLen</span><span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">&#41;</span> <span style="color: #000066;">-</span> <span style="color: #0000ff;">3</span><span style="color: #000066;">,</span> <span style="color: #0000ff;">4</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span> <span style="color: #000066;">=</span> <span style="color: #ff0000;">'.EXE'</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000000; font-weight: bold;">Begin</span>
        <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span><span style="color: #000066;">Uppercase</span><span style="color: #000066;">&#40;</span><span style="color: #000066;">Copy</span><span style="color: #000066;">&#40;</span>PC<span style="color: #000066;">,</span> <span style="color: #0000ff;">1</span><span style="color: #000066;">,</span> <span style="color: #0000ff;">8</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span> &lt;&gt; <span style="color: #ff0000;">'IMMUNITY'</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000000; font-weight: bold;">Begin</span>
          <span style="color: #808080; font-style: italic;">// If OllyDbg then imported module name needs to be fixed to ImmunityDebugger.EXE ..</span>
          <span style="color: #000066;">Move</span><span style="color: #000066;">&#40;</span>ImmDbg<span style="color: #000066;">,</span> <span style="color: #000066;">Ptr</span><span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> Rva<span style="color: #000066;">&#41;</span><span style="color: #000066;">^</span><span style="color: #000066;">,</span> <span style="color: #000066;">Length</span><span style="color: #000066;">&#40;</span>ImmDbg<span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
          Imp<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">Name</span> <span style="color: #000066;">:</span><span style="color: #000066;">=</span> Rva<span style="color: #000066;">;</span>
        <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
        <span style="color: #808080; font-style: italic;">// Convert the import thunks ..</span>
        FixThunk<span style="color: #000066;">&#40;</span>Imp<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">OriginalFirstThunk</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
        FixThunk<span style="color: #000066;">&#40;</span>Imp<span style="color: #000066;">^</span><span style="color: #000066;">.</span><span style="color: #006600;">FirstThunk</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
      <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
      <span style="color: #000066;">Inc</span><span style="color: #000066;">&#40;</span>Imp<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">If</span> NoIm <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000066;">WriteLn</span><span style="color: #000066;">&#40;</span><span style="color: #ff0000;">'Warning: No Imports were processed!'</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000066;">WriteLn</span><span style="color: #000066;">;</span>
&nbsp;
    <span style="color: #808080; font-style: italic;">// Build new plugin raw file ..</span>
    I <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Length</span><span style="color: #000066;">&#40;</span>FileName<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000000; font-weight: bold;">While</span> <span style="color: #000066;">&#40;</span>FileName<span style="color: #000066;">&#91;</span>I<span style="color: #000066;">&#93;</span> &lt;&gt; <span style="color: #ff0000;">'.'</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Do</span> <span style="color: #000066;">Dec</span><span style="color: #000066;">&#40;</span>I<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    Name <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #000066;">Copy</span><span style="color: #000066;">&#40;</span>Filename<span style="color: #000066;">,</span> <span style="color: #0000ff;">1</span><span style="color: #000066;">,</span> I<span style="color: #000066;">-</span><span style="color: #0000ff;">1</span><span style="color: #000066;">&#41;</span> <span style="color: #000066;">+</span> <span style="color: #ff0000;">'_Fixed.DLL'</span><span style="color: #000066;">;</span>
    SaveModuleToRawFile<span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> Name<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000066;">WriteLn</span><span style="color: #000066;">&#40;</span><span style="color: #ff0000;">'Saved as '</span> <span style="color: #000066;">+</span> Name<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
&nbsp;
  <span style="color: #000000; font-weight: bold;">Finally</span>
    VirtualFree<span style="color: #000066;">&#40;</span>Dos<span style="color: #000066;">,</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">,</span> MEM_RELEASE<span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
    <span style="color: #000066;">WriteLn</span><span style="color: #000066;">;</span>
    <span style="color: #000066;">WriteLn</span><span style="color: #000066;">;</span>
  <span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
&nbsp;
<span style="color: #808080; font-style: italic;">//======================================================================================================================</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Procedure</span> Main<span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">Var</span>
  I <span style="color: #000066;">:</span> <span style="color: #000066; font-weight: bold;">DWord</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">Begin</span>
  <span style="color: #000000; font-weight: bold;">If</span> <span style="color: #000066;">&#40;</span><span style="color: #000066;">ParamCount</span> <span style="color: #000066;">=</span> <span style="color: #0000ff;">0</span><span style="color: #000066;">&#41;</span> <span style="color: #000000; font-weight: bold;">Then</span> <span style="color: #000066;">WriteLn</span><span style="color: #000066;">&#40;</span><span style="color: #ff0000;">'Usage: Drop one or more plugin DLLs onto this exe to fix them'</span><span style="color: #000066;">&#41;</span>
  <span style="color: #000000; font-weight: bold;">Else</span> <span style="color: #000000; font-weight: bold;">For</span> I <span style="color: #000066;">:</span><span style="color: #000066;">=</span> <span style="color: #0000ff;">1</span> <span style="color: #000000; font-weight: bold;">To</span> <span style="color: #000066;">ParamCount</span> <span style="color: #000000; font-weight: bold;">Do</span> FixPlugin<span style="color: #000066;">&#40;</span><span style="color: #000066;">ParamStr</span><span style="color: #000066;">&#40;</span>I<span style="color: #000066;">&#41;</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">;</span>
&nbsp;
&nbsp;
<span style="color: #808080; font-style: italic;">//======================================================================================================================</span>
&nbsp;
<span style="color: #000000; font-weight: bold;">Begin</span>
  <span style="color: #000066;">WriteLn</span><span style="color: #000066;">&#40;</span><span style="color: #ff0000;">'PluginFix v1.01'</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
  <span style="color: #000066;">WriteLn</span><span style="color: #000066;">&#40;</span><span style="color: #ff0000;">'Simple Tool to convert OllyDbg and ImmDbg plugins for use with ImmDbg v1.80'</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
  <span style="color: #000066;">WriteLn</span><span style="color: #000066;">&#40;</span><span style="color: #ff0000;">'By BoB -&gt; Team PEiD'</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
  <span style="color: #000066;">WriteLn</span><span style="color: #000066;">;</span>
&nbsp;
  Main<span style="color: #000066;">;</span>
&nbsp;
  <span style="color: #000066;">Write</span><span style="color: #000066;">&#40;</span><span style="color: #ff0000;">'Press ENTER'</span><span style="color: #000066;">&#41;</span><span style="color: #000066;">;</span>
  <span style="color: #000066;">ReadLn</span><span style="color: #000066;">;</span>
<span style="color: #000000; font-weight: bold;">End</span><span style="color: #000066;">.</span></pre></td></tr></table></div>

<h3>相关文章</h3>
<ul class="related_posts">
<li><a href="http://www.h4ck.org.cn/2010/01/lanhelper-1-83-cn-cracked/" title="局域网助手Lanhelper 1.83 中文破解版" rel="bookmark inlinks">局域网助手Lanhelper 1.83 中文破解版</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/04/happy-birthday-to-myself/" title="Happy Birthday To Myself!" rel="bookmark inlinks">Happy Birthday To Myself!</a><span class="count">( 2 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/06/fast-idb2sig-and-loadmap-pluginsida/" title="Fast IDB2Sig and LoadMap plugins(IDA)" rel="bookmark inlinks">Fast IDB2Sig and LoadMap plugins(IDA)</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/03/thunder-7-ad-killer/" title="迅雷7 通用去广告补丁" rel="bookmark inlinks">迅雷7 通用去广告补丁</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2010/01/lanhelper-1-93-cracked/" title="Lanhelper 1.93 【Cracked】破解版" rel="bookmark inlinks">Lanhelper 1.93 【Cracked】破解版</a><span class="count">( 2 )</span></li>
<li><a href="http://www.h4ck.org.cn/2010/09/cxjk/" title="程序监控专家 破解版" rel="bookmark inlinks">程序监控专家 破解版</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2010/10/keygener-assistant-v1-6/" title="Keygener Assistant V1.6" rel="bookmark inlinks">Keygener Assistant V1.6</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2009/12/trial-reset-v4-0-b1/" title="Trial Reset v4.0.b1 " rel="bookmark inlinks">Trial Reset v4.0.b1 </a><span class="count">( 0 )</span></li>
</ul>
]]></content:encoded>
			<wfw:commentRss>http://www.h4ck.org.cn/2011/02/pluginfix-v1-01by-bob-team-peid/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>OllyDbg皮肤插件</title>
		<link>http://www.h4ck.org.cn/2010/05/ollydbg-skins/</link>
		<comments>http://www.h4ck.org.cn/2010/05/ollydbg-skins/#comments</comments>
		<pubDate>Tue, 25 May 2010 08:10:06 +0000</pubDate>
		<dc:creator>obaby</dc:creator>
				<category><![CDATA[插件『IDA/OD Plugin』]]></category>
		<category><![CDATA[OD]]></category>
		<category><![CDATA[Plugin]]></category>

		<guid isPermaLink="false">http://www.h4ck.org.cn/?p=1650</guid>
		<description><![CDATA[下载解压后放到插件目录下即可。猛击此处下载！ 相关文章 OllyDbg v2.01 (alpha 3)( 1 ) OD Unicode String Format Convert v0.1( 0 ) 强大的修改版本OllyDbg:OllyDRX 1.0( 0 ) FullDisasm : plugin OllyDbg &#038; Immunity Debugger( 0 ) OllyDbg 2.01 intermediate alpha( 0 ) 破解必备工具OllyDBG有史以来所有插件+原始码( 2 ) 700+ OllyDbgScripts( 2 ) Ollydbg插件( 0 )]]></description>
			<content:encoded><![CDATA[<p><a rel="lightbox" href="http://www.h4ck.org.cn/wp-content/uploads//2010/05/od.png" title="od"><img title="od" src="http://www.h4ck.org.cn/wp-content/uploads//2010/05/od.png" alt="" width="586" height="460" /></a></p>
<p>下载解压后放到插件目录下即可。<a href="http://d.namipan.com/d/c6e2c38c920385b6dc5c7497abd68e195ad78e378da00e00" target="_blank">猛击此处下载！ </a><br />
<h3>相关文章</h3>
<ul class="related_posts">
<li><a href="http://www.h4ck.org.cn/2009/09/700-ollydbgscripts/" title="700+ OllyDbgScripts" rel="bookmark inlinks">700+ OllyDbgScripts</a><span class="count">( 2 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/04/ollydbg-v2-01-alpha-3/" title="OllyDbg v2.01 (alpha 3)" rel="bookmark inlinks">OllyDbg v2.01 (alpha 3)</a><span class="count">( 1 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/06/fast-idb2sig-and-loadmap-pluginsida/" title="Fast IDB2Sig and LoadMap plugins(IDA)" rel="bookmark inlinks">Fast IDB2Sig and LoadMap plugins(IDA)</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2009/08/ollydbg-plugins/" title="Ollydbg插件" rel="bookmark inlinks">Ollydbg插件</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/11/od-unicode-string-format-convert-v0-1/" title="OD Unicode String Format Convert v0.1" rel="bookmark inlinks">OD Unicode String Format Convert v0.1</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2009/10/mew-11-1-2-northfoxhcc/" title="MEW 11 1.2 -> NorthFox/HCC 脱壳脚本” rel=”bookmark inlinks”>MEW 11 1.2 -> NorthFox/HCC 脱壳脚本</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2010/11/ollydbg-2-01-intermediate-alpha/" title="OllyDbg 2.01 intermediate alpha" rel="bookmark inlinks">OllyDbg 2.01 intermediate alpha</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2009/08/ollydbg-2-0-beta-2-200j/" title=" OllyDbg 2.0 beta 2 (200j) " rel="bookmark inlinks"> OllyDbg 2.0 beta 2 (200j) </a><span class="count">( 0 )</span></li>
</ul>
]]></content:encoded>
			<wfw:commentRss>http://www.h4ck.org.cn/2010/05/ollydbg-skins/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>700+ OllyDbgScripts</title>
		<link>http://www.h4ck.org.cn/2009/09/700-ollydbgscripts/</link>
		<comments>http://www.h4ck.org.cn/2009/09/700-ollydbgscripts/#comments</comments>
		<pubDate>Tue, 29 Sep 2009 01:13:45 +0000</pubDate>
		<dc:creator>obaby</dc:creator>
				<category><![CDATA[脱壳『Unpack』]]></category>
		<category><![CDATA[软件共享『SoftWare』]]></category>
		<category><![CDATA[OD]]></category>
		<category><![CDATA[Plugin]]></category>

		<guid isPermaLink="false">http://www.h4ck.org.cn/?p=278</guid>
		<description><![CDATA[2008-04-05 20:47 220 32Lite 0.03a OEP Finder v0.1.txt
2006-01-15 00:00 218 32Lite 0.03a OEP V0.1.txt
2008-05-18 00:33 218 32LITE 0.03A OEP-FINDER V.0.1.txt
2004-11-14 19:55 218 32Lite 0.03a.txt
2008-05-18 00:33 2,490 ActiveMark 5.4x Level 2 EP Finder + Fix CRC.txt
2008-05-18 00:33 1,380 ActiveMark 5.4x Remove Selfchecks.txt
2008-05-18 00:33 474 ActiveMark 5.xx Level 2 EP Finder.txt
2006-01-15 00:00 801 ActiveMark Level 2 EP Finder.txt
2006-01-15 00:00 441 ActiveMark Patching Script.txt
2008-04-05 20:50 2,648 activemark54x.txt]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.h4ck.org.cn/soft/crack/Odscript.rar">猛击此处下载文件! </a> <img src='http://www.h4ck.org.cn/wp-content/plugins/smilies-themer/Julianus/20x20-big_smile.png' alt=':)' class='wp-smiley' /> :)</p>
<p>2008-04-05 20:47 220 32Lite 0.03a OEP Finder v0.1.txt<br />
2006-01-15 00:00 218 32Lite 0.03a OEP V0.1.txt<br />
2008-05-18 00:33 218 32LITE 0.03A OEP-FINDER V.0.1.txt<br />
2004-11-14 19:55 218 32Lite 0.03a.txt<br />
2008-05-18 00:33 2,490 ActiveMark 5.4x Level 2 EP Finder + Fix CRC.txt<br />
2008-05-18 00:33 1,380 ActiveMark 5.4x Remove Selfchecks.txt<br />
2008-05-18 00:33 474 ActiveMark 5.xx Level 2 EP Finder.txt<br />
2006-01-15 00:00 801 ActiveMark Level 2 EP Finder.txt<br />
2006-01-15 00:00 441 ActiveMark Patching Script.txt<br />
2008-04-05 20:50 2,648 activemark54x.txt<br />
2008-04-05 20:50 4,919 AddrEnc.txt<br />
2008-04-05 20:50 1,075 AHpack 0.1 OEP Finder .txt<br />
2008-04-05 20:50 1,017 AHTeam EP Protector 0.3a.txt<br />
2008-04-05 20:50 1,227 AHTeam EP Protector 0.3b.txt<br />
2006-01-15 00:00 3,515 Alex Protector 1.0 Beta 2 Fix IAT + Remove Junk Code v0.1.txt<br />
2008-04-05 20:50 3,515 ALEX PROTECTOR 1.0 BETA2 V0.1.txt<br />
2006-01-15 00:00 3,515 ALEX Protector1.0.txt<br />
2008-04-05 20:50 801 AM.level2.ep.finder.txt<br />
2008-04-05 20:51 396 AM.patching.script.txt<br />
<span id="more-278"></span><br />
2004-07-14 19:44 767 anti-debug_lastex.txt<br />
2004-06-10 12:10 7,207 Arm 3.7Std_release.txt<br />
2008-04-05 20:51 3,301 arm IAT Elimination.txt<br />
2008-04-05 20:51 540 ARM PROTECTOR 0.1 &#8211; EXE SHIELD 0.8 OEP FINDER.txt<br />
2006-01-15 00:00 540 ARM Protector 0.1 OEP Finder.txt<br />
2005-02-08 00:53 1,655 Arma-General.txt<br />
2004-07-14 19:44 7,194 arma37.txt<br />
2008-04-05 20:52 359 arma4.30a.txt<br />
2006-01-15 00:00 2,283 Armadillo 3.6x &#8211; 4.xx OEP Finder + Fix Magic Jumps.txt<br />
2006-09-10 12:30 7,194 Armadillo 3.70 Unpack.txt<br />
2006-01-15 00:00 4,010 Armadillo 3.xx &#8211; 4.00 Nanomites VA Finder v1.0.txt<br />
2006-09-10 12:31 3,001 Armadillo 3.xx DLL Unpack v0.1.txt<br />
2006-01-15 00:00 1,635 Armadillo 3.xx Unpack (Standard Protection) v0.1.txt<br />
2006-01-15 00:00 856 Armadillo 4.20 Public Builds OEP Finder (only for CopyMem2 + Debug Blocker).txt<br />
2008-04-05 20:52 1,820 Armadillo 4.30a &#8211; standard script.txt<br />
2006-09-10 12:31 1,715 Armadillo 4.30a Simple Unpacking Script.txt<br />
2008-04-05 20:53 3,009 Armadillo 4.42 CopyMem2 Decrypt Code Sections.txt<br />
2008-04-05 20:53 4,968 Armadillo 4.42 CopyMem2 Detach from Client + Fix Import Table Elimination.txt<br />
2006-09-10 12:31 3,752 Armadillo 4.xx CopyMem2 (Fix IAT).txt<br />
2006-01-15 00:00 853 Armadillo 4.xx OEP Finder.txt<br />
2008-04-05 20:53 319 Armadillo ArmVar.txt<br />
2008-04-05 20:53 6,357 Armadillo CheckFlags v2.txt<br />
2006-01-15 00:00 3,250 Armadillo Detach from Client + Unpack (Hipu 1000 Bytes Method).txt<br />
2006-01-15 00:00 7,272 Armadillo Detach from Client + Unpack (Ricardo 1000 Bytes Method) v0.1.txt<br />
2006-01-15 00:00 8,127 Armadillo Detach from Client + Unpack (Tenketsu 1000 Bytes Method) v0.1.txt<br />
2006-01-15 00:00 1,388 Armadillo Detach from Client.txt<br />
2006-01-15 00:00 941 Armadillo Detach.txt<br />
2006-01-15 00:00 1,018 Armadillo Detective (Debug Blocker or CopyMem2).txt<br />
2006-01-15 00:00 6,625 Armadillo Detective v1.00.txt<br />
2006-01-15 00:00 1,635 Armadillo Find Nag.txt<br />
2006-01-15 00:00 7,684 Armadillo IAT Destruction.txt<br />
2008-04-05 20:54 3,176 Armadillo IAT Eliminator.txt<br />
2008-04-05 20:54 461 Armadillo IAT Script v2.txt<br />
2008-04-05 20:54 274 Armadillo Magic Jump Finder.txt<br />
2008-04-05 20:54 3,870 Armadillo NanoTables v2.txt<br />
2006-01-15 00:00 921 Armadillo OEP Finder (CopyMem2).txt<br />
2006-01-15 00:00 3,083 Armadillo OEP Finder + Fix Magic Jumps + Fix Anti-Dump.txt<br />
2006-01-15 00:00 606 Armadillo OpenMutexA.txt<br />
2006-01-15 00:00 1,468 Armadillo Repair IAT Elimination.txt<br />
2006-01-15 00:00 1,500 Armadillo Standard (Pause).txt<br />
2006-01-15 00:00 1,655 Armadillo Standard Unpack (Specific).txt<br />
2006-01-15 00:00 1,994 Armadillo Standard Unpack + Strategic Code Splicing.txt<br />
2006-01-15 00:00 1,637 Armadillo Standard Unpack.txt<br />
2006-01-15 00:00 5,325 Armadillo V4.0-V4.4.Standard.Protection OEP Finder.txt<br />
2005-11-07 18:19 5,533 Armadillo V4.0-V4.4.Standard.Protection.osc<br />
2004-11-28 20:40 6,625 ARMADiLLO_Detective_v1.00_ollyscript.txt<br />
2003-12-30 03:51 6,625 ARMADiLLO_Detective_v1_ollyscript.txt<br />
2004-07-14 19:44 1,323 arma_detach.txt<br />
2004-07-14 19:44 3,109 arma_unpack.txt<br />
2008-04-05 20:55 921 armcopy2-1.txt<br />
2008-04-05 20:51 3,159 arm_3x_dll.txt<br />
2008-04-05 20:51 1,635 arm_3x_unpack.txt<br />
2008-04-05 20:51 856 arm_4x_debug_blocker_copymem_oep_finder.txt<br />
2008-04-05 20:51 815 arm_4x_oep_finder.txt<br />
2008-04-05 20:51 3,083 arm_anti_dump.txt<br />
2008-04-05 20:51 1,994 arm_code_splicing_unpack.txt<br />
2008-04-05 20:51 921 arm_copymem.txt<br />
2008-04-05 20:51 1,388 arm_detach.txt<br />
2008-04-05 20:51 3,250 arm_detach_1000_bytes_method.txt<br />
2008-04-05 20:51 6,636 arm_detective.txt<br />
2008-04-05 20:51 784 arm_getmodule.txt<br />
2008-04-05 20:51 2,285 arm_magic_jump.txt<br />
2008-04-05 20:51 7,684 arm_oep_finder.txt<br />
2008-04-05 20:51 606 arm_open_mutexa.txt<br />
2008-04-05 20:52 432 arm_script_rica.txt<br />
2008-04-05 20:52 1,655 arm_standard.txt<br />
2008-04-05 20:52 4,010 arm_va_finder.txt<br />
2008-04-05 20:55 219 asp2.1oep.txt<br />
2006-01-15 00:00 391 ASPack (a).txt<br />
2006-01-15 00:00 126 ASPack (b).txt<br />
2006-01-15 00:00 265 ASPack 1.08.02 OEP Finder.txt<br />
2008-04-05 20:55 243 ASPACK 1.X-2.X OEP FINDER V.0.1.txt<br />
2004-11-14 15:40 243 ASpack 1.x-2.x.txt<br />
2006-01-15 00:00 663 ASPack 2.11 OEP Finder.txt<br />
2006-01-15 00:00 1,730 ASPack 2.12 DLL Unpack Finder.txt<br />
2008-04-05 20:55 1,727 ASPACK 2.12 DLL UNPACK SCRIPT.txt<br />
2006-01-15 00:00 612 ASPack 2.12 OEP Finder #1.txt<br />
2006-01-15 00:00 950 ASPack 2.12 OEP Finder #2.txt<br />
2006-01-15 00:00 247 ASPack 2.12 OEP Finder #3.txt<br />
2008-05-18 00:33 948 ASPACK 2.12 [DeAtH HaS cOMe].txt<br />
2008-05-18 00:33 607 ASPACK 2.12 [dOsKey].txt<br />
2008-05-18 00:33 612 ASPACK 2.12 [hacnho[VCT2k4]].txt<br />
2008-05-18 00:33 242 ASPACK 2.12 [Reverend].txt<br />
2005-11-24 02:28 1,726 aspack.212.dll-unpack.txt<br />
2005-11-24 02:28 242 aspack.212.oep.txt<br />
2004-07-14 19:44 113 aspack.txt<br />
2008-04-05 20:55 1,838 ASPACKDLL.txt<br />
2004-07-14 19:44 252 aspack_1.08.02.txt<br />
2004-07-14 19:44 590 aspack_212.txt<br />
2008-04-05 20:55 911 aspoepgen.txt<br />
2004-01-23 19:16 132 ASPR 1.23RC4.txt<br />
2004-05-27 01:28 937 ASPR 1.23RC4findOEP.txt<br />
2006-08-07 15:44 33,902 Aspr2.XX_IATfixer_v2.2s.osc<br />
2007-01-15 09:52 128,069 Aspr2.XX_unpacker_v1.0SC.osc<br />
2008-02-18 15:09 133,459 Aspr2.XX_unpacker_v1.13SC.osc<br />
2004-07-14 19:44 158 asprbp.txt<br />
2008-04-05 20:56 6,536 Aspro2_AIP2.txt<br />
2006-01-15 00:00 182 ASProtect #1 Breakpoint Last Exception.txt<br />
2006-01-15 00:00 259 ASProtect #2 Find Stolen Bytes.txt<br />
2006-01-15 00:00 131 ASProtect #3 Last Exception.txt<br />
2006-01-15 00:00 934 ASProtect #4 OEP Finder.txt<br />
2006-01-15 00:00 822 ASProtect #5 Anti-Debug Last Exception.txt<br />
2008-04-05 20:56 1,167 ASProtect 1.0 OEP Finder.txt<br />
2008-04-05 20:56 1,237 ASPROTECT 1.0 UNPACKING SCRIPT 0.1.txt<br />
2008-04-05 20:56 673 ASPROTECT 1.2 &#8211; 1.2c OEP-FINDER.txt<br />
2008-04-05 20:56 301 ASPROTECT 1.2-1.2C OEP FINDER V.0.1.txt<br />
2004-11-22 13:55 301 ASProtect 1.2-1.2c.txt<br />
2006-01-15 00:00 674 ASProtect 1.20 &#8211; 1.20c OEP Finder.txt<br />
2006-01-15 00:00 1,044 ASProtect 1.22 &#8211; 1.23 Beta 21 &#8211; Find OEP and stolen bytes.txt<br />
2006-01-15 00:00 559 ASProtect 1.22 &#8211; 1.23 Beta 21 &#8211; Find target&#8217;s OEP.txt<br />
2008-04-05 20:56 1,044 ASProtect 1.22 &#8211; 1.23 Beta 21 OEP Finder and Stolen Bytes.txt<br />
2008-04-05 20:57 740 ASProtect 1.22 &#8211; 1.23 Beta 21 OEP Finder v0.1b.txt<br />
2008-04-05 20:57 559 ASProtect 1.22 &#8211; 1.23 Beta 21 OEP Finder.txt<br />
2008-05-18 00:33 568 ASPROTECT 1.22 &#8211; 1.23 BETA 21 [1].txt<br />
2008-05-18 00:33 1,045 ASPROTECT 1.22 &#8211; 1.23 BETA 21 [2].txt<br />
2004-11-22 15:34 794 ASPROTECT 1.22 &#8211; 1.23 BETA 21-RC1.txt<br />
2005-03-08 21:30 1,057 ASProtect 1.22 &#8211; 1.23 Beta 21.txt<br />
2008-04-05 20:57 767 Asprotect 1.23 RC4 Anti-Debug + Last Exception.txt<br />
2008-04-05 20:57 790 ASPROTECT 1.23 RC4 OEP-FINDER.txt<br />
2004-08-04 04:35 788 Asprotect 1.23 RC4.txt<br />
2008-04-05 20:57 1,159 ASProtect 1.2x &#8211; 1(1).txt<br />
2006-01-15 00:00 1,351 ASProtect 1.2x &#8211; 1.3x (Registered) OEP Finder &amp; Olly Hide.txt<br />
2008-05-18 00:33 1,324 ASPROTECT 1.2x &#8211; 1.3x [REGISTERED] 2.txt<br />
2005-04-17 20:29 1,270 ASPROTECT 1.2x &#8211; 1.3x [REGISTERED].txt<br />
2008-04-05 20:57 1,254 ASProtect 1.2x &#8211; 1.txt<br />
2008-04-05 20:57 458 ASProtect 1.3 Lite OEP Finder.txt<br />
2008-04-05 20:57 696 ASProtect 1.3 Repair Sto.txt<br />
2006-01-15 00:00 2,064 Asprotect 1.30b Import Recovery + OEP Finder (Delphi &amp; ImageBase 400000).txt<br />
2006-01-15 00:00 1,588 ASProtect 1.30b Stolen Code Finder v0.1.txt<br />
2008-05-18 00:33 1,924 ASPROTECT 1.30b [Mario555].txt<br />
2006-01-15 00:00 2,766 ASProtect 1.31b Import Recovery + OEP Finder (Delphi &amp; Imagebase 400000).txt<br />
2008-04-05 20:58 2,577 ASProtect 1.31b Import Recovery + OEP Finder (Delphi).txt<br />
2008-05-18 00:33 2,577 ASPROTECT 1.31b [Mario555].txt<br />
2008-04-05 20:58 1,588 ASPROTECT 1.3b STOLEN CODE FINDER.txt<br />
2008-04-05 20:58 17,964 ASProtect 1.3x &#8211; 2.xx IAT Repair Script v1.02.txt<br />
2008-04-05 20:58 2,297 ASProtect 1.3x &#8211; 2.xx OEP Finder v0.1.txt<br />
2006-01-15 00:00 1,343 ASProtect 1.3x OEP Finder #1.txt<br />
2006-01-15 00:00 1,322 ASProtect 1.3x OEP Finder #2.txt<br />
2006-01-15 00:00 2,374 ASProtect 1.3x OEP Finder #3.txt<br />
2008-04-05 20:58 4,706 ASProtect 1.3x OEP Finder + IAT Rebuilder (Call to Call).txt<br />
2008-04-05 20:59 3,799 ASProtect 1.3x OEP Finder + IAT Rebuilder (Call to JMP).txt<br />
2008-04-05 20:59 1,924 ASProtect 1.txt<br />
2008-04-05 20:59 5,623 ASProtect 1.xx Generic OEP Finder + IAT Recovery.txt<br />
2006-01-15 00:00 2,425 ASProtect 2.0 Clear Junk Code + Stop Stolen Code.txt<br />
2006-01-15 00:00 8,462 ASProtect 2.0 Import Recovery + Scrambled Code Recovery (Delphi &amp; Imagebase 400000).txt<br />
2006-01-15 00:00 885 ASProtect 2.0 OEP Finder.txt<br />
2008-04-05 20:59 897 ASPROTECT 2.0 OEP-FINDER .txt<br />
2008-04-05 20:59 2,313 ASProtect 2.0 Stop Stolen Code.txt<br />
2008-05-18 00:33 8,447 ASPROTECT 2.0 UNPACK SCRIPT [DELPHI].txt<br />
2004-12-14 22:19 8,460 ASProtect 2.0 Unpack.txt<br />
2005-01-09 02:11 854 Asprotect 2.00 OEP.txt<br />
2005-01-09 02:10 8,446 Asprotect 2.00 unpacker.txt<br />
2008-04-05 20:59 960 ASProtect 2.0x Automatic SHIFT+F9.txt<br />
2008-04-05 20:59 2,313 ASProtect 2.0x Clear Junk Code + Stop Stolen Code.txt<br />
2008-04-05 20:59 5,149 ASProtect 2.0x Fix IAT with Import Elimination Optimized.txt<br />
2008-04-05 20:59 2,986 ASProtect 2.0x Fix IAT.txt<br />
2008-04-05 20:59 1,670 ASProtect 2.0x Log all HIGHMEM Calls.txt<br />
2008-04-05 20:59 1,468 ASProtect 2.0x OEP Finder + Stolen Code Finder + Fix IAT Jumps.txt<br />
2008-04-05 20:59 2,078 ASProtect 2.0x Patch JMP or CALL.txt<br />
2008-04-05 20:59 3,214 ASProtect 2.0x Rebuild Thunks for VC++.txt<br />
2008-05-18 00:33 3,629 ASProtect 2.0x Resolve API&#8217;s To HIGHMEM Calls(1).txt<br />
2008-05-18 00:33 3,629 ASProtect 2.0x Resolve API&#8217;s to HIGHMEM Calls.txt<br />
2008-04-05 21:00 199 ASProtect 2.1 OEP Finder.txt<br />
2008-04-05 21:00 3,400 ASProtect 2.3 Build 04.26 OEP Finder v1.01.txt<br />
2008-04-05 21:00 8,022 ASProtect 2.txt<br />
2006-01-15 00:00 6,051 ASProtect 2.x Fix IAT with Import Elimination #1.txt<br />
2006-01-15 00:00 6,536 ASProtect 2.x Fix IAT with Import Elimination #2.txt<br />
2006-01-15 00:00 6,932 ASProtect 2.x Fix IAT with Import Elimination #3.txt<br />
2008-04-05 21:00 2,605 ASProtect 2.x Stop stolen code.txt<br />
2008-04-05 21:00 3,083 ASProtect 2.xx IAT Recovery.txt<br />
2008-04-05 21:00 1,503 ASProtect 2.xx Virtual Machine Jump Redirector.txt<br />
2008-04-05 21:00 36,512 ASProtect 2.xx Virtual Machine Rebuilder.txt<br />
2008-04-05 21:00 158 ASProtect BP.txt<br />
2006-01-15 00:00 5,962 ASProtect Generic OEP Finder and Import Recovery.txt<br />
2008-05-18 00:33 5,962 ASPROTECT GENERIC SCRIPT [Orion].txt<br />
2006-01-15 00:00 1,343 ASProtect Last Exception + OEP.txt<br />
2006-01-15 00:00 833 ASProtect OEP Finder (all versions).txt<br />
2006-01-15 00:00 935 ASProtect OEP Finder.txt<br />
2006-01-15 00:00 259 ASProtect Stolen Code Finder.txt<br />
2008-04-05 21:01 259 ASProtect Stolen Code.txt<br />
2008-04-05 21:01 2,425 ASPROTECT TEST SCRIPT V2.0.txt<br />
2005-11-24 02:29 673 asprotect.12.12c.oep.txt<br />
2008-04-05 21:01 8,470 ASProtect.v2.0.txt<br />
2006-01-15 00:00 1,237 Asprotect1.0.txt<br />
2004-11-18 12:28 694 Asprotect1.x.txt<br />
2004-07-14 19:44 1,485 asprotect_13b_stolen_code.txt<br />
2004-07-14 19:44 855 asprsoep.txt<br />
2004-07-14 19:44 223 asprsto.txt<br />
2005-11-24 02:29 1,045 aspr_1.22-1.23.oep.stolenbytes.txt<br />
2004-07-14 19:44 734 aspr_123_rc4.txt<br />
2004-07-14 19:44 1,924 aspr_130b.txt<br />
2004-07-14 19:44 2,577 aspr_131b.txt<br />
2005-11-24 02:30 897 aspr_2.0.oep.txt<br />
2005-11-24 02:30 8,447 aspr_2.0.unpack.txt<br />
2008-04-05 20:56 6,934 ASPr_API.txt<br />
2004-07-14 19:44 5,623 aspr_generic.txt<br />
2006-01-15 00:00 149 BamBam 0.01 OEP Finder.txt<br />
2008-04-05 21:01 2,282 Beria 0.07 &#8211; OEP Finder + Detach Process.txt<br />
2008-04-05 21:01 2,282 Beria 0.07 &#8211; OEP Finder.txt<br />
2008-04-05 21:01 1,398 Copy of arm_detach.txt<br />
2008-04-05 21:01 6,513 copymem.txt<br />
2006-01-15 00:00 265 Crunch 5.0.txt<br />
2006-01-15 00:00 333 Crunch v1.0 Heuristic.txt<br />
2004-11-22 11:04 333 Crunch v1.0.txt<br />
2008-04-05 21:01 337 CRUNCHPE HEURISTIC OEP FINDER V.0.1.txt<br />
2008-04-05 21:01 315 CrunchPE Heuristic OEP Finder v0.1.txt<br />
2004-11-26 19:17 337 CrunchPE Heuristic.txt<br />
2006-01-15 00:00 288 Crypt 1.0 OEP Finder &amp; Unpacker.txt<br />
2008-04-05 21:02 288 CRYPT 1.0 OEP-FINDER &amp; UNPACKER.txt<br />
2008-04-05 21:02 288 Crypt 1.txt<br />
2005-11-24 02:30 288 crypt.1.0.txt<br />
2006-01-15 00:00 1,419 DBPE 2.x OEP Finder v0.1.txt<br />
2006-01-15 00:00 2,732 DBPE 2.x OEP Finder v0.2.txt<br />
2006-01-15 00:00 1,779 DBPE 2.x OEP Finder v0.3.txt<br />
2006-01-15 00:00 2,828 DBPE 2.x OEP Finder v0.4.txt<br />
2008-05-18 00:33 2,604 DBPE 2.x OEP-FINDER 0.3 [loveboom].txt<br />
2008-05-18 00:33 2,828 DBPE 2.x OEP-FINDER 0.4 [loveboom].txt<br />
2008-04-05 21:02 1,361 DBPE 2.x Unpack v0.1.txt<br />
2008-04-05 21:02 1,361 DBPE 2.x Unpack.txt<br />
2008-05-18 00:33 1,779 DBPE 2.x [loveboom].txt<br />
2005-11-24 02:30 1,779 DBPE.2x.oep.txt<br />
2004-07-14 19:44 2,604 dbpe2x.txt<br />
2004-07-14 19:44 1,361 dbpe_2.x.txt<br />
2009-08-18 10:00 &lt;DIR&gt; Delphi &amp; VB事件断点查找脚本<br />
2008-04-05 21:02 7,272 DetachFarther_MethodRicardo_hipu_benina.txt<br />
2008-04-05 21:02 8,127 DetachFarther_MethodTenketsu_hipu_benina.txt<br />
2008-04-05 21:02 866 Duals eXe 1.0 OEP Finder.txt<br />
2008-04-05 21:02 214 Dxpack 0.86 OEP Finder v0.1.txt<br />
2006-01-15 00:00 227 DXPACK 0.86.txt<br />
2006-01-15 00:00 1,498 Encrypt PE 2003.5.18 OEP Finder v0.1.txt<br />
2008-04-05 21:02 1,498 ENCRYPTPE 2003.5.18 OEP FINDER 0.1.txt<br />
2009-02-13 11:47 &lt;DIR&gt; EncryptPE V2.2007.4.11.Service UnPacK脚本<br />
2008-04-05 21:02 2,908 Enigma 1.02 OEP Finder.txt<br />
2008-05-18 00:33 3,588 Enigma 1.txt<br />
2008-05-18 00:33 882 Escargot 0.1 OEP Finder.txt<br />
2008-05-18 00:33 479 EXE Shield 0.5 to 0.8 OEP Finder.txt<br />
2006-01-15 00:00 540 Exe Shield 0.8 OEP Finder.txt<br />
2004-11-19 23:32 1,434 EXE Stealth2.72.txt<br />
2004-03-14 19:39 710 EXE Stealth2.74.txt<br />
2006-01-15 00:00 476 Exe32Pack 1.3X OEP Finder.txt<br />
2004-11-24 12:49 476 EXE32Pack 1.3X.txt<br />
2006-01-15 00:00 630 Exe32Pack 1.42 OEP Finder &amp; Unpacker.txt<br />
2008-05-18 00:33 635 EXE32PACK 1.42 OEP FINDER.txt<br />
2006-01-15 00:00 698 Exe32Pack 1.43 OEP Finder &amp; Unpacker.txt<br />
2008-05-18 00:33 698 Exe32Pack 1.43 OEP Finder.txt<br />
2008-05-18 00:33 691 Exe32pack 1.43&#8230;, OEP Finder &amp; Unpacker.txt<br />
2008-05-18 00:33 630 Exe32Pack 1.txt<br />
2006-01-15 00:00 929 ExeCryptor 1.53 OEP Finder v0.1.txt<br />
2006-01-15 00:00 955 ExeCryptor 1.5x OEP Finder v0.1.txt<br />
2008-05-18 00:33 901 EXECRYPTOR 1.5x OEP-FINDER.txt<br />
2006-01-15 00:00 2,206 ExeCryptor 2.xx IAT Rebuilder v1.1.txt<br />
2008-05-18 00:33 876 ExeCryptor1.53 OEP Finder v0.1.txt<br />
2004-07-14 19:44 901 execryptor_1.5x.txt<br />
2008-04-17 10:31 9,849 Execryptor_IAT_Fixer_1.01&amp;amp<br />
2008-05-18 00:33 479 EXESHIELD 0.5 &#8211; 0.8 (ARM PROTECTOR 0.1).txt<br />
2006-01-15 00:00 499 ExeShield 0.5 to 0.8 OEP Finder.txt<br />
2008-05-18 00:33 513 ExeShield 0.8 OEP Finder.txt<br />
2004-07-14 19:44 479 exeshield_0x.txt<br />
2006-01-15 00:00 458 ExeStealth 2.7 OEP Finder v0.1.txt<br />
2008-05-18 00:33 406 EXESTEALTH 2.7 OEP-FINDER.txt<br />
2006-01-15 00:00 1,434 ExeStealth 2.72 OEP Finder &amp; Patch IAT v0.1.txt<br />
2006-01-15 00:00 682 ExeStealth 2.74 OEP Finder v0.1.txt<br />
2008-05-18 00:33 648 EXESTEALTH 2.74 OEP-FINDER.txt<br />
2006-01-15 00:00 1,053 ExeStealth 3.04 &amp; Morphine 2.7 OEP Finder.txt<br />
2008-05-18 00:33 1,037 EXESTEALTH 3.04 AND MORPHINE 2.7.txt<br />
2004-07-14 19:44 406 exestealth_2.7.txt<br />
2004-07-14 19:44 648 exestealth_2.74.txt<br />
2008-05-18 00:33 1,053 exestealth_3.04_morphie_2.7.txt<br />
2006-01-15 00:00 1,906 eXPressor 1.2 OEP Finder.txt<br />
2008-05-18 00:33 1,839 EXPRESSOR 1.2.0.1 OEP FINDER.txt<br />
2006-01-15 00:00 127 eXPressor 1.3.0.1 OEP Finder.txt<br />
2006-01-15 00:00 589 EZip 1.0 OEP Finder #1.txt<br />
2006-01-15 00:00 546 EZip 1.0 OEP Finder #2.txt<br />
2006-01-15 00:00 519 EZip 1.0 OEP Finder #3.txt<br />
2008-05-18 00:33 569 EZIP 1.0 OEP FINDER.txt<br />
2004-11-14 15:56 295 EZIP 1.0.txt<br />
2004-07-14 19:44 569 ezip_10.txt<br />
2008-04-05 21:02 291 E_ZIP 1.0 OEP-FINDER &amp; UNPACKER.txt<br />
2008-05-18 00:33 590 FatMike DLL Loader Script.txt<br />
2008-05-18 00:33 503 FatMike IAT Resolver Script.txt<br />
2006-01-15 00:00 2,379 Flexlm 7.2 Seedfinder v2.0.txt<br />
2008-05-18 00:33 2,379 FLEXLM 7.2+ SEEDFINDER SCRIPT.txt<br />
2005-11-24 02:31 2,379 flexlm.7.2+.txt<br />
2006-01-15 00:00 2,497 FOR GATHERING IAT INFORMATION.txt<br />
2008-05-18 00:33 177 FRENCH LAYOR 1.81 &#8211; OEP FINDER.txt<br />
2008-05-18 00:33 166 French Layor 1.81 OEP Finder.txt<br />
2008-05-18 00:33 220 FSG 1.0 OEP-FINDER.txt<br />
2006-01-15 00:00 220 FSG 1.00 OEP Finder #1.txt<br />
2006-01-15 00:00 852 FSG 1.00 OEP Finder #2.txt<br />
2008-05-18 00:33 207 FSG 1.00 OEP Finder.txt<br />
2008-05-18 00:33 833 FSG 1.33 OEP FINDER 0.2 [loveboom].txt<br />
2006-01-15 00:00 268 FSG 1.33 OEP Finder v0.1 #1.txt<br />
2006-01-15 00:00 649 FSG 1.33 OEP Finder v0.1 #3.txt<br />
2008-05-18 00:33 247 FSG 1.33 OEP Finder v0.1.txt<br />
2006-01-15 00:00 889 FSG 1.33 OEP Finder v0.2 #2.txt<br />
2008-05-18 00:33 833 FSG 1.33 OEP Finder v0.2.txt<br />
2008-05-18 00:33 223 FSG 2.0 OEP Finder.txt<br />
2008-05-18 00:33 239 FSG 2.0 OEP-FINDER.txt<br />
2006-01-15 00:00 223 FSG 2.00 OEP Finder #1.txt<br />
2006-01-15 00:00 622 FSG 2.00 OEP Finder #2.txt<br />
2006-01-15 00:00 722 FSG 2.00 OEP Finder #3.txt<br />
2006-01-15 00:00 666 FSG 2.00 OEP Finder #4.txt<br />
2006-01-15 00:00 227 FSG 2.00 OEP Finder #5.txt<br />
2008-05-18 00:33 757 FSG 2.00 OEP Finder v0.1.txt<br />
2008-05-18 00:33 213 FSG 2.00 OEP Finder.txt<br />
2004-11-17 13:58 278 fsg2.0.txt<br />
2004-07-14 19:44 247 fsg_1.33.txt<br />
2004-07-14 19:44 833 fsg_1.33_2.txt<br />
2004-07-14 19:44 223 fsg_2_0.txt<br />
2006-01-15 00:00 1,120 GameHouse Media Packer OEP Finder.txt<br />
2008-05-18 00:33 1,120 GAMEHOUSE MEDIA PACKER OEP-FINDER.txt<br />
2008-05-18 00:33 1,057 GameHouse Media Protector OEP Finder.txt<br />
2008-05-18 00:33 977 Generic VB OEP Finder.txt<br />
2008-05-18 00:33 5,167 Get Executable PE Information.txt<br />
2008-05-18 00:33 1,059 GHF Protector OEP Finder.txt<br />
2008-05-18 00:33 2,821 Hying PeLock 0.4.x OEP Finder v0.1.txt<br />
2008-05-18 00:33 4,989 Hying PeLock 0.7 OEP Finder v0.1.txt<br />
2006-01-15 00:00 2,979 Hying v0.4x.txt<br />
2006-01-15 00:00 5,295 Hying v0.7x.txt<br />
2008-05-18 00:33 2,979 HYING&#8217;PELOCK 0.4.X UNPACK SCRIPT 0.1.txt<br />
2008-05-18 00:33 5,295 HYING&#8217;PELOCK 0.7 UNPACK SCRIPT 0.1.txt<br />
2008-05-18 00:33 5,295 HYINGv0.7x.txt<br />
2008-05-18 00:33 1,426 IAT_ Elimination_2.txt<br />
2008-05-18 00:33 2,265 IAT_Elimination.txt<br />
2006-01-15 00:00 670 JDPack &#8211; JDProtect OEP Finder v0.1.txt<br />
2008-05-18 00:33 670 JDPACK &#8211; JDPROTECT OEP-FINDER.txt<br />
2008-05-18 00:33 1,237 JDPack 0.9 &#8211; 1.01 OEP Finder.txt<br />
2006-01-15 00:00 1,014 JDPack 1.01 OEP Finder v0.1.txt<br />
2008-05-18 00:33 1,063 JDPACK 1.01 OEP-FINDER.txt<br />
2004-11-14 18:16 238 JDPack 1.01.txt<br />
2008-05-18 00:33 846 Kagra Armadillo 4.XX oep finder.txt<br />
2008-05-18 00:33 899 KByS Packer 0.28 Beta OEP Finder.txt<br />
2006-01-15 00:00 695 Krypton 0.5 OEP Finder v0.1.txt<br />
2008-05-18 00:33 659 KRYPTON 0.5 OEP-FINDER.txt<br />
2004-06-10 12:22 700 Krypton0.5.txt<br />
2004-07-14 19:44 659 krypton_0.5.txt<br />
2008-05-18 00:33 871 LAMECRYPT 1.0 OEP-FINDER.txt<br />
2006-01-15 00:00 874 LameCrypt v1.0 OEP Finder.txt<br />
2004-07-14 19:44 114 lastex.txt<br />
2008-05-18 00:33 987 Magic Call BP for Delphi.txt<br />
2008-05-18 00:33 293 Magic Jump Finder Script.txt<br />
2008-05-18 00:33 501 MEW 1.0 OEP Finder.txt<br />
2008-05-18 00:33 501 MEW 10 EXE-CODER 1.0 OEP-FINDER.txt<br />
2006-01-15 00:00 501 MEW 10 SE v1.0 OEP Finder #1.txt<br />
2006-01-15 00:00 207 MEW 10 SE v1.0 OEP Finder #2.txt<br />
2008-05-18 00:33 472 MEW 10 SE v1.0 OEP Finder.txt<br />
2008-05-18 00:33 709 MEW 11 SE 1.1 OEP-FINDER.txt<br />
2008-05-18 00:33 231 MEW 11 SE 1.2 [Darus].txt<br />
2008-05-18 00:33 877 MEW 11 SE 1.2 [DeAtH HaS cOMe].txt<br />
2006-01-15 00:00 736 MEW 11 SE v1.1 OEP Finder.txt<br />
2006-01-15 00:00 877 MEW 11 SE v1.2 OEP Finder #1.txt<br />
2006-01-15 00:00 522 MEW 11 SE v1.2 OEP Finder #2.txt<br />
2008-05-18 00:33 215 MEW 11 SE v1.2b OEP Finder.txt<br />
2006-01-15 00:00 231 MEW 11 SE vb1.2 OEP Finder.txt<br />
2005-11-24 02:32 877 mew.1.2.txt<br />
2004-07-14 19:44 501 mew10_1_0.txt<br />
2006-01-15 00:00 1,233 MoleBox 2.3 Pro OEP Finder v0.1.txt<br />
2008-05-18 00:33 538 MoleBox 2.5.7 OEP Finder.txt<br />
2008-05-18 00:33 914 MoleBox 2.x.x Fix IAT + OEP Finder v0.11.txt<br />
2008-05-18 00:33 914 MOLEBOX 2.x.x FIX IAT+OEP-FINDER 0.11.txt<br />
2008-05-18 00:34 990 MOLEBOX 2.x.x FIX IAT+OEP-FINDER 0.2.txt<br />
2008-05-18 00:33 591 MOLEBOX 2.X.X.X OEP FINDER.txt<br />
2006-01-15 00:00 521 MoleBox 2.xx OEP Finder &amp; Patch IAT.txt<br />
2008-05-18 00:34 914 MoleBox 2.xx OEP Finder + Fix IAT v0.11.txt<br />
2008-05-18 00:33 935 MoleBox 2.xx OEP Finder + Fix IAT v0.2.txt<br />
2006-01-15 00:00 967 MoleBox 2.xx OEP Finder + Fix IATv0.11.txt<br />
2006-01-15 00:00 573 MoleBox 2.xx OEP Finder.txt<br />
2008-05-18 00:33 990 MoleBox2.TXT<br />
2004-11-17 19:19 521 MoleBox2.X 跳过IAT加密.TXT<br />
2004-07-14 19:45 914 molebox_2x.txt<br />
2006-01-15 00:00 743 Morphine 1.2 OEP Finder v0.1.txt<br />
2008-05-18 00:34 705 MORPHINE 1.2 OEP-FINDER.txt<br />
2006-01-15 00:00 685 Morphine 1.3 OEP Finder v0.1.txt<br />
2008-05-18 00:34 657 MORPHINE 1.3 OEP-FINDER.txt<br />
2004-07-14 19:45 705 morphine_1.2.txt<br />
2004-07-14 19:45 657 morphine_13.txt<br />
2008-05-18 00:34 2,732 MSLRH 0.31 OEP Finder v6.txt<br />
2008-05-18 00:33 1,730 MSLRH 0.31a OEP Finder v0.1.txt<br />
2006-01-15 00:00 1,823 MSLRH v0.31A Find OEP &amp; Fix IAT.txt<br />
2008-05-18 00:33 1,823 MSLRH v0.31A UNPACK SCRIPT v0.1.txt<br />
2008-05-18 00:33 1,823 MSLRH v0.31A.txt<br />
2008-05-18 00:33 2,950 MSLRH_0.31 UNPACKING SCRIPT.txt<br />
2004-11-17 14:07 273 Neolite 2.0 .txt<br />
2006-01-15 00:00 158 NeoLite 2.0 OEP Finder #1.txt<br />
2006-01-15 00:00 940 NeoLite 2.0 OEP Finder #2.txt<br />
2006-01-15 00:00 179 NeoLite 2.0 OEP Finder #3.txt<br />
2008-05-18 00:34 158 NEOLITE 2.0 [DarK_m00n[CiM]].txt<br />
2008-05-18 00:33 938 NEOLITE 2.0 [DeAtH HaS cOMe].txt<br />
2004-01-23 21:21 179 neolite 2.0.txt<br />
2004-07-14 19:45 98 neolite20.txt<br />
2008-05-18 00:34 1,118 nProtect GameGuard Script.txt<br />
2006-01-15 00:00 513 NsPack 1.3 OEP Finder #1.txt<br />
2006-01-15 00:00 250 NsPack 1.3 OEP Finder #2.txt<br />
2008-05-18 00:34 250 NSPACK 1.3 OEP FINDER V.0.1.txt<br />
2008-05-18 00:33 494 NsPack 1.3 OEP Finder.txt<br />
2004-11-14 15:03 250 NSpack 1.3.txt<br />
2006-01-15 00:00 698 NsPack 2.0 &#8211; 2.3 OEP Finder v0.1.txt<br />
2006-01-15 00:00 197 NsPack 2.4 &#8211; 2.6 OEP Finder.txt<br />
2006-01-15 00:00 520 NsPack 2.9 OEP Finder.txt<br />
2006-01-15 00:00 160 NsPack 3.4 OEP Finder.txt<br />
2008-05-18 00:34 1,119 NsPack 3.5 OEP Finder.txt<br />
2006-01-15 00:00 1,740 Obsidium 1.061 OEP Finder v0.1 (for VB only).txt<br />
2008-05-18 00:34 1,740 OBSIDIUM 1.061 VB ONLY [loveboom].txt<br />
2006-01-15 00:00 2,505 Obsidium 1.1.1.4 Unpack (not for VB).txt<br />
2008-05-18 00:34 2,588 OBSIDIUM 1.1.1.4.txt<br />
2008-05-18 00:34 2,806 Obsidium114.txt<br />
2004-07-14 19:45 1,638 obsidium_1_0061.txt<br />
2008-05-18 00:34 3,975 ohshit.txt<br />
2008-05-18 00:34 5,488 ohyeah.txt<br />
2008-05-18 00:34 359 Olls Script_Generic_OEP Finder_PECompact_2.xx_by_Max_Zero.txt<br />
2006-01-15 00:00 337 Packman 0.0.0.1 OEP Finder.txt<br />
2008-05-18 00:34 250 PC PESHRINKER 0.71 OEP-FINDER.txt<br />
2008-05-18 00:34 233 PC Shrinker 0.71 OEP Finder v0.1.txt<br />
2004-11-15 12:36 250 PC Shrinker 0.71.txt<br />
2006-01-15 00:00 250 PC Shrinker v0.71 OEP Finder.txt<br />
2006-01-15 00:00 934 PC-Guard 5.0 OEP and Patch IAT v0.1b.txt<br />
2008-05-18 00:34 1,267 PC-GUARD 5.0 OEP FINDER 0.1.txt<br />
2006-01-15 00:00 1,228 PC-Guard 5.0 OEP Finder v0.1.txt<br />
2008-05-18 00:34 1,166 PC-GUARD 5.0 OEP-FINDER.txt<br />
2004-11-22 21:24 934 PC-Guard 5.0.txt<br />
2004-07-14 19:45 1,166 pcguard_150.txt<br />
2008-05-18 00:34 1,267 PCGURAD5.TXT<br />
2008-05-18 00:34 509 Pe Compackt neuste version.txt<br />
2008-05-18 00:34 511 PE COMPACT 0.9x OEP-FINDER.txt<br />
2008-05-18 00:34 154 PE COMPACT 1.76 OEP-FINDER.txt<br />
2008-05-18 00:34 371 PE COMPACT 1.84 OEP-FINDER.txt<br />
2008-05-18 00:34 403 PE COMPACT 2.00-2.38 OEP FINDER.txt<br />
2008-05-18 00:34 442 PE COMPACT 2.40 OEP-FINDER.txt<br />
2008-05-18 00:34 668 PE COMPACT 2.xx OEP-FINDER [2].txt<br />
2008-05-18 00:34 924 PE COMPACT 2.xx OEP-FINDER.txt<br />
2006-01-15 00:00 200 PE Diminisher 0.1 OEP Finder #1.txt<br />
2006-01-15 00:00 323 PE Diminisher 0.1 OEP Finder #2.txt<br />
2008-05-18 00:34 185 PE Diminisher 0.1 OEP Finder.txt<br />
2006-01-15 00:00 628 PE Lock NT 2.04 OEP Finder.txt<br />
2008-05-18 00:34 200 PE-DIMINISHER 1.0 OEP-FINDER.txt<br />
2004-11-22 15:18 433 PE-SHiELD V0.25.txt<br />
2008-05-18 00:34 604 PEBUNDLE 2.0x &#8211; 2.4x OEP-FINDER.txt<br />
2006-01-15 00:00 604 PeBundle 2.0x to 2.4x OEP Finder.txt<br />
2008-05-18 00:34 565 PEBundle 2.0x.txt<br />
2006-01-15 00:00 781 PEbundle 2.3 OEP &amp; Patch IAT.txt<br />
2008-05-18 00:34 781 PEBUNDLE 2.3 OEP + PATCH IAT.txt<br />
2008-08-20 19:54 722 PeBundle 2.3 OEP Finder + Patch IAT.osc<br />
2008-05-18 00:34 735 PeBundle 2.3 OEP Finder + Patch IAT.txt<br />
2004-11-24 12:24 781 PEbundle V2.3 Oep+ Patch IAT.txt<br />
2005-01-09 02:48 581 pebundle_2x.txt<br />
2006-01-15 00:00 579 PeCompact 0.9x OEP Finder.txt<br />
2006-01-15 00:00 154 PeCompact 1.76 OEP Finder.txt<br />
2006-01-15 00:00 371 PeCompact 1.84 OEP Finder.txt<br />
2006-01-15 00:00 263 Pecompact 1.x OEP Finder v0.1.txt<br />
2004-11-14 15:40 263 Pecompact 1.x.txt<br />
2006-01-15 00:00 416 PeCompact 2.00 to 2.38 OEP Finder.txt<br />
2006-01-15 00:00 617 PECompact 2.01a OEP Finder.txt<br />
2008-05-18 00:34 441 PeCompact 2.40 OEP Finder v0.1.txt<br />
2005-01-08 22:26 357 PeCompact 2.40 OEP Finder.txt<br />
2006-01-15 00:00 672 PeCompact 2.64 OEP Finder.txt<br />
2008-05-18 00:34 1,049 PeCompact 2.78 OEP Finder.txt<br />
2004-11-17 15:24 668 PECompact 2.x.txt<br />
2006-01-15 00:00 951 PeCompact 2.xx OEP Finder #1.txt<br />
2006-01-15 00:00 668 PECompact 2.xx OEP finder v0.1 #2.txt<br />
2008-05-18 00:34 951 PeCompact 2.xx OEP Finder.txt<br />
2005-01-12 21:55 956 PECompact 2.xx.txt<br />
2006-01-15 00:00 906 PeCompact OEP Finder.txt<br />
2008-05-18 00:34 263 PECOMPACT V.1.X OEP FINDER.txt<br />
2006-01-15 00:00 1,002 Pecompact v2.08 OEP Finder.TXT<br />
2008-05-18 00:34 339 Pecompact.txt<br />
2005-01-09 02:48 540 pecompact2.02.txt<br />
2005-01-08 22:27 865 PeCompact2.xx.OEP.txt<br />
2008-05-18 00:34 1,002 pecompact208.TXT<br />
2004-07-14 19:45 133 pecompact_1_76.txt<br />
2004-07-14 19:45 338 pecompact_1_84.txt<br />
2005-01-04 19:14 883 PeCompact_2.08.txt<br />
2004-11-14 19:14 323 PEDiminishe 0.1.txt<br />
2004-07-14 19:45 185 pediminisher_1_0.txt<br />
2006-01-15 00:00 1,399 PeLock 1.06 Cracked version OEP Founder v1.0 for VB.txt<br />
2006-01-15 00:00 3,254 PeLock 1.06 OEP Finder + Stolen Code + Remove Junk JMP&#8217;s &amp; Code.txt<br />
2006-01-15 00:00 2,037 PeLock 1.0x Fix IAT + Junk Code + Stolen Code v0.1.txt<br />
2008-05-18 00:34 4,403 PeLock 1.0x Fix IAT + Junk Code + Stolen Code.txt<br />
2008-05-18 00:34 2,035 PELOCK 1.0x [loveboom].txt<br />
2008-05-18 00:34 3,028 PeLock 1.txt<br />
2008-05-18 00:34 628 PELOCK 2.04 OEP-FINDER.txt<br />
2004-06-10 12:23 1,399 PeLock1.06c.txt<br />
2008-05-18 00:34 2,163 PELock1.x.txt<br />
2004-07-14 19:45 598 pelock_204.txt<br />
2006-01-15 00:00 758 PEncrypt 4.0 Find Oep 0.1b.TXT<br />
2008-05-18 00:34 758 PENCRYPT 4.0 OEP FINDER 0.1B.txt<br />
2004-11-19 16:23 758 PEncrypt 4.0.TXT<br />
2006-01-15 00:00 253 PEPack 1.0 &#8211; ANAKiN OEP Finder #3.txt<br />
2006-01-15 00:00 906 PePack 1.0 OEP Finder #1.txt<br />
2006-01-15 00:00 144 PePack 1.0 OEP Finder #2.txt<br />
2008-05-18 00:34 873 PePack 1.0 OEP Finder v0.1.txt<br />
2008-05-18 00:34 131 PePack 1.0 OEP Finder.txt<br />
2008-05-18 00:34 144 PEPACK 1.0 OEP-FINDER II.txt<br />
2008-05-18 00:34 961 PEPACK 1.0 OEP-FINDER.txt<br />
2004-11-16 19:04 253 PEPack 1.0.txt<br />
2008-05-18 00:34 495 PePack1.0.txt<br />
2004-07-14 19:45 131 pepack10.txt<br />
2006-01-15 00:00 2,488 PeShield 0.25 OEP Finder #1.txt<br />
2006-01-15 00:00 433 PeShield 0.25 OEP Finder #2.txt<br />
2008-05-18 00:34 408 PeShield 0.25 OEP Finder v0.1.txt<br />
2008-05-18 00:34 2,379 PeShield 0.25 OEP Finder.txt<br />
2008-05-18 00:34 2,488 PESHIELD 0.25 OEP-FINDER.txt<br />
2008-05-18 00:34 433 PESHIELD 0.25 [2].txt<br />
2004-07-14 19:45 2,379 peshield.txt<br />
2008-05-18 00:34 665 PeSpin 0.0b &#8211; 0.3 OEP Finder.txt<br />
2006-01-15 00:00 1,008 PEspin 0.1 stolen OEP and Patch IAT v0.1.txt<br />
2008-05-18 00:34 957 PESPIN 0.3 &#8211; 1.0 STOLEN BYTES &amp; OEP FINDER.txt<br />
2008-05-18 00:34 1,713 PESPIN 0.3 AND 0.4 VB UNPACK SCRIPT.txt<br />
2006-01-15 00:00 965 PeSpin 0.3 Stolen Code Finder v0.1.txt<br />
2008-05-18 00:34 965 PESPIN 0.3 STOLEN CODE FINDER.txt<br />
2006-01-15 00:00 1,904 PeSpin 0.3 Unpacker.txt<br />
2006-01-15 00:00 1,713 PeSpin 0.3x to 0.4x Unpack v0.1 (for VB only).txt<br />
2006-01-15 00:00 1,023 PeSpin 0.7 OEP Finder #1.txt<br />
2006-01-15 00:00 1,284 PeSpin 0.7 OEP Finder #2.txt<br />
2008-05-18 00:34 978 PeSpin 0.7 OEP Finder.txt<br />
2008-05-18 00:34 1,282 PESPIN 0.7 OEP-FINDER.txt<br />
2006-01-15 00:00 4,176 PeSpin 0.7 Stolen Code Finder v0.1.txt<br />
2006-01-15 00:00 1,467 PeSpin 0.7 Unpacker.txt<br />
2008-05-18 00:34 1,023 PESPIN 0.7 [hacnho[VCT2k4]].txt<br />
2008-05-18 00:34 4,174 PESPIN 0.7 [loveboom].txt<br />
2008-05-18 00:34 706 PESPIN 0.b &#8211; 0.3 OEP FINDER.txt<br />
2006-01-15 00:00 1,863 PeSpin 1.0 &#8211; 1.3 Fix Code Redirection Table.txt<br />
2008-05-18 00:34 764 PESPIN 1.0 OEP FINDER.txt<br />
2006-01-15 00:00 2,582 PeSpin 1.0 Unpacker.txt<br />
2006-01-15 00:00 1,134 PeSpin 1.1 &#8211; 1.3 Find Encrypted Markers.txt<br />
2008-05-18 00:34 2,512 PESPIN 1.1 STOLEN CODE FINDER 0.1.txt<br />
2008-05-18 00:34 2,387 PeSpin 1.1 Stolen Code Finder v0.1.txt<br />
2006-01-15 00:00 3,054 PeSpin 1.1 Unpacker.txt<br />
2006-01-15 00:00 3,183 PeSpin 1.3 Beta 2 (Private) Debug.txt<br />
2006-01-15 00:00 3,889 PeSpin 1.3 Beta 2 (Private) Detach From Client + Fix Code + Fix Nanomites.txt<br />
2008-05-18 00:34 3,663 PeSpin 1.3 Beta2.txt<br />
2006-01-15 00:00 615 PeSpin 1.3 OEP + Stolen Code Finder.txt<br />
2008-05-18 00:34 2,574 PeSpin 1.3 OEP Finder + Stolen Code Finder + Fix IAT + Junk Code v0.1.txt<br />
2008-05-18 00:34 615 PeSpin 1.3 OEP Finder + Stolen Code Finder.txt<br />
2006-01-15 00:00 3,226 PeSpin 1.3 Unpacker.txt<br />
2008-05-18 00:34 1,281 PeSpin 1.304 &#8211; Rebuild Thunks for VC++.txt<br />
2008-05-18 00:34 1,407 PeSpin 1.txt<br />
2008-05-18 00:34 1,397 PeSpin 1.x &#8211; Code Redirection Fixer.txt<br />
2006-01-15 00:00 1,487 PeSpin 1.x Delphi &amp; VC++ IAT Repair.txt<br />
2006-01-15 00:00 677 PeSpin Fixed.txt<br />
2004-11-27 19:24 1,008 PESpin V0.1.txt<br />
2008-05-18 00:34 4,479 PESPIN v0.7.TXT<br />
2006-01-15 00:00 2,512 PESpin v1.1 Stolen Code Finder.txt<br />
2008-05-18 00:34 2,512 pespin v1.1.txt<br />
2008-05-18 00:34 2,600 PESpin v1.3 &#8211; unpacker.txt<br />
2008-05-18 00:34 1,472 PESpin0.3sc.TXT<br />
2004-07-14 19:45 921 pespin_0.3.txt<br />
2004-07-14 19:45 1,618 pespin_0304_vb.txt<br />
2004-07-14 19:45 978 pespin_07.txt<br />
2006-01-15 00:00 1,044 Petite 2.2 OEP finder &amp; Patch IAT.txt<br />
2006-01-15 00:00 427 Petite 2.2 OEP Finder.txt<br />
2008-05-18 00:34 427 PETITE 2.2 OEP-FINDER.txt<br />
2004-11-22 08:53 1,044 Petite 2.2 Patch IAT.txt<br />
2004-11-20 12:42 303 Petite 2.2.txt<br />
2008-05-18 00:34 324 PETITE 2.3 UNPACKING SCRIPT.txt<br />
2008-05-18 00:34 310 Petite 2.txt<br />
2008-05-18 00:34 1,152 PETITE2.2.txt<br />
2004-07-14 19:45 395 petite22.txt<br />
2006-01-15 00:00 516 PeX 0.99 OEP Finder.txt<br />
2008-05-18 00:34 516 PEX 0.99 OEP-FINDER.txt<br />
2004-07-14 19:45 479 pex_0_99.txt<br />
2006-01-15 00:00 218 PKLite32 1.1 OEP Finder #1.txt<br />
2006-01-15 00:00 180 PKLite32 1.1 OEP Finder #2.txt<br />
2008-05-18 00:34 168 PKLite32 1.1 OEP Finder v0.1.txt<br />
2008-05-18 00:34 205 PKLite32 1.1 OEP Finder.txt<br />
2008-05-18 00:34 180 PKLITE32 1.1 OEP-FINDER [2].txt<br />
2008-05-18 00:34 218 PKLITE32 1.1 OEP-FINDER.txt<br />
2004-11-14 19:51 180 PKLITE32 1.1.txt<br />
2004-07-14 19:45 205 pklite32_1.1.txt<br />
2008-05-18 00:34 541 Pokiemagic_ASPR2_OEP.txt<br />
2008-05-18 00:34 1,343 PolyCrypt OEP Finder.txt<br />
2006-01-15 00:00 357 Protection Plus 4.xx OEP Finder + Import Fixer.txt<br />
2006-01-15 00:00 351 Protection Plus OEP Finder.txt<br />
2008-05-18 00:34 351 PROTECTION PLUS OEP-FINDER.txt<br />
2004-07-14 19:45 319 protection_plus_oep.txt<br />
2005-03-18 21:52 10,001 README.TXT<br />
2008-05-18 00:34 6,312 SDProtect 1.12 OEP Finder.txt<br />
2006-02-03 16:22 6,304 sdprotect.1.12.txt<br />
2008-05-18 00:34 1,132 SecuROM 4.xx &#8211; 4.84.75+ (Main Executables) OEP Finder v1.1.txt<br />
2008-05-18 00:34 1,106 SecuROM 4.xx &#8211; 4.84.75+ (Other Executable) OEP Finder v1.1.txt<br />
2008-05-18 00:34 1,004 SECUROM CODE SECTION BP SETTER.txt<br />
2008-05-18 00:34 1,184 SECUROM OEP SCRIPT 1.1 [MAIN EXE].txt<br />
2008-05-18 00:34 1,155 SECUROM OEP SCRIPT 1.1 [NOT MAIN EXE].txt<br />
2006-01-15 00:00 720 SLVc0deProtector 0.61 OEP Finder.txt<br />
2008-05-18 00:34 901 SOFTSENTRY 3.0 OEP FINDER 0.1.txt<br />
2006-01-15 00:00 901 SoftSentry 3.0 OEP Finder v0.1.txt<br />
2008-05-18 00:34 901 SoftSentry3.txt<br />
2004-06-10 12:24 261 stolen bytes.txt<br />
2004-06-10 12:24 1,590 Stolen code Finder.txt<br />
2006-01-15 00:00 885 Stone Pe-ExeEncrypter 1.13 OEP Finder.txt<br />
2008-05-18 00:34 790 STONE&#8217;S PE ENCRYPTER 1.13 OEP FINDER 0.1.txt<br />
2008-05-18 00:34 2,769 SVK PROTECTOR 1.3x SCRIPT [loveboom].txt<br />
2008-05-18 00:34 609 SVK PROTECTOR OEP-FINDER.txt<br />
2008-05-18 00:34 3,054 svk1.32.TXT<br />
2006-01-15 00:00 2,827 SVKP 1.3x Fix Imports + OEP + Stolen Code v0.2.txt<br />
2008-05-18 00:34 2,642 SVKP 1.3x Stolen Code Finder v0.2.txt<br />
2006-01-15 00:00 609 SVKP 1.4x Stolen Code + OEP Finder.txt<br />
2006-01-15 00:00 981 SVKP IAT Fix.txt<br />
2008-05-18 00:34 542 SVKP OEP Finder.txt<br />
2006-01-15 00:00 609 SVKP Stolen Code + OEP Finder.txt<br />
2004-07-14 19:45 542 svkpoep.txt<br />
2004-07-14 19:45 2,642 svkp_13x.txt<br />
2008-05-18 00:34 949 TELOCK 0.9 &#8211; 1.0 (PRIVATE) OEP-FINDER.txt<br />
2006-01-15 00:00 949 tElock 0.9 to 1.0 (private) OEP Finder v0.1.txt<br />
2004-06-10 12:24 999 tElock 0.9-1.0 OEP Finder.txt<br />
2008-05-18 00:34 969 TELOCK 0.9.TXT<br />
2006-01-15 00:00 526 tElock 0.98 OEP Finder v1.0 #1.txt<br />
2006-01-15 00:00 742 tElock 0.98 OEP Finder v1.0 #4.txt<br />
2008-05-18 00:34 526 tElock 0.98 OEP Finder v1.0.txt<br />
2006-01-15 00:00 585 tElock 0.98 OEP Finder v1.1 #2.txt<br />
2008-05-18 00:34 534 tElock 0.98 OEP Finder v1.1.txt<br />
2006-01-15 00:00 609 tElock 0.98 OEP Finder v1.2 #3.txt<br />
2008-05-18 00:34 557 tElock 0.98 OEP Finder v1.2.txt<br />
2008-05-18 00:34 609 TELOCK 0.98 OEP-FINDER 1.2 [SHaG].txt<br />
2005-10-15 00:57 7,877 tELock V0.8X-V0.9X.osc<br />
2006-01-15 00:00 988 telock-forgot.txt<br />
2004-11-20 13:05 742 Telock0.98x.txt<br />
2004-07-18 22:19 609 telock098.osc<br />
2004-07-18 22:19 557 telock098.txt<br />
2004-07-14 19:45 908 telock_0.9.txt<br />
2008-05-18 00:34 276 THE AMAZING UPX OEP-FINDER V2.txt<br />
2006-01-15 00:00 1,120 Thinstall 2.521 OEP Finder.txt<br />
2008-05-18 00:34 2,083 Thinstall.2.521.txt<br />
2008-05-18 00:34 1,120 Thinstall_v2_521.txt<br />
2008-01-23 10:55 27,345 TMDScript-1.9.1+_private_0.7.txt<br />
2005-02-23 20:32 760 ultraprot1_def.txt<br />
2008-05-18 00:34 799 ULTRAPROTECT 1.x &#8211; ACPROTECT 1.22 OEP.txt<br />
2008-05-18 00:34 1,171 ULTRAPROTECT 1.x &#8211; ACPROTECT 1.22 VB.txt<br />
2006-01-15 00:00 799 UltraProtect 1.xx ACProtect 1.22 OEP Finder (none Delphi).txt<br />
2006-01-15 00:00 1,171 UltraProtect 1.xx ACProtect 1.22 OEP Finder (VB only).txt<br />
2004-07-14 19:45 760 uprot1_def.txt<br />
2004-07-14 19:45 1,112 uprot1_vb.txt<br />
2006-01-15 00:00 902 UPX &amp; UPX Scrambler OEP Finder v0.1.txt<br />
2008-05-18 00:34 902 UPX &amp; UPX-SCRAMBLER OEP FINDER 0.1.txt<br />
2006-01-15 00:00 475 UPX &amp; UPXShit 0.6 OEP Finder.txt<br />
2008-05-18 00:34 344 UPX 1.txt<br />
2004-11-14 14:48 297 Upx 1.x.txt<br />
2006-01-15 00:00 374 UPX 1.xx &amp; UPX Protector 1.0 OEP Finder v0.1.txt<br />
2008-05-18 00:34 374 UPX 1.xx &amp; UPX PROTECTOR 1.0 OEP-FINDER.txt<br />
2006-01-15 00:00 805 UPX Find OEP &amp; Dump.TXT<br />
2008-05-18 00:34 1,045 UPX Lock 1.0 OEP Finder.txt<br />
2006-01-15 00:00 276 UPX OEP Finder v2.0.txt<br />
2008-05-18 00:34 628 UPX OEP Finder.txt<br />
2006-01-15 00:00 534 UPX Protector 1.0x OEP Finder.txt<br />
2008-05-18 00:34 534 UPX PROTECTOR 1.0x OEP-FINDER.txt<br />
2006-01-15 00:00 277 UPX Scrambler RC1.x OEP Finder #1.txt<br />
2008-05-18 00:34 265 UPX Scrambler RC1.x OEP Finder.txt<br />
2008-05-18 00:34 277 UPX SCRAMBLER RC1.x OEP-FINDER.txt<br />
2006-01-15 00:00 268 UPX-Scrambler RC1.x OEP finder v0.1b #2.txt<br />
2004-11-19 12:19 268 UPX-Scrambler RC1.x.txt<br />
2004-01-26 02:52 276 UPX.osc<br />
2004-07-14 19:45 262 UPX.txt<br />
2004-07-14 19:45 511 upxprotector_10x.txt<br />
2004-07-14 19:45 265 upxscr_rc1.txt<br />
2008-05-18 00:34 475 UPXSHIT 0.06 AND UPX OEP-FINDER.txt<br />
2006-01-15 00:00 475 UPXShit 0.6 OEP Finder.txt<br />
2006-01-15 00:00 198 UPXShit 0.x OEP Finder.txt<br />
2004-11-19 11:59 198 UPXShit 0.x.txt<br />
2008-05-18 00:34 475 upxshit.txt<br />
2004-07-14 19:45 444 upxshit006.txt<br />
2004-07-14 19:45 344 upx_upxprot.txt<br />
2008-05-18 00:34 3,950 VAFinder.txt<br />
2008-05-18 00:34 1,611 VCasm Junk Code Removers.txt<br />
2008-05-18 00:34 1,698 VCASM SCRIPT.txt<br />
2006-01-15 00:00 1,698 VCASM.txt<br />
2008-05-18 00:34 912 VGCRYPT 0.75 BETA &#8211; OEP FINDER 0.1.txt<br />
2006-01-15 00:00 539 VGCrypt PE Encryptor 0.75 OEP Finder #1.txt<br />
2006-01-15 00:00 347 VGCrypt PE Encryptor 0.75 OEP Finder #2.txt<br />
2006-01-15 00:00 915 VGCrypt PE Encryptor 0.75 OEP Finder #3.txt<br />
2008-05-18 00:34 908 VGCrypt PE Encryptor 0.75 OEP Finder v0.1.txt<br />
2004-11-20 12:54 347 VGCrypt PE Encryptor V0.75.txt<br />
2008-05-18 00:34 508 Virogen Crypt 0.75 OEP Finder.txt<br />
2008-05-18 00:34 539 VIROGEN CRYPT 0.75 OEP-FINDER.txt<br />
2004-07-14 19:45 508 virogen_075.txt<br />
2008-05-18 00:34 784 WINKRIPT 1.0 OEP FINDER 0.1.txt<br />
2006-01-15 00:00 877 WinKripT 1.0 OEP Finder v0.1.txt<br />
2008-05-18 00:34 2,566 WinKripT 1.0 OEP Finder.txt<br />
2006-01-15 00:00 320 WinUpack 0.30 OEP Finder.txt<br />
2006-01-15 00:00 465 WinUpack 0.31 &#8211; 0.32 OEP Finder.txt<br />
2006-01-15 00:00 328 WinUpack 0.38 OEP Finder.txt<br />
2006-01-15 00:00 971 WWPack32 1.20 Demo OEP Finder v0.1.txt<br />
2008-05-18 00:34 969 WWPACK32 1.20 DEMO OEP-FINDER.txt<br />
2008-05-18 00:34 971 WWPack32 1.20 OEP Finder v0.1.txt<br />
2006-01-15 00:00 179 WWPack32 1.20 OEP Finder.txt<br />
2008-05-18 00:34 179 WWPACK32 1.20 OEP-FINDER.txt<br />
2008-05-18 00:34 495 WWPACK32 1.x OEP-FINDER V.0.1B.txt<br />
2004-11-22 10:39 495 WWPack32 1.x.txt<br />
2006-01-15 00:00 495 WWPack32 1.xx OEP Finder.txt<br />
2004-07-14 19:45 449 y0da_crypter_1.2.txt<br />
2008-05-18 00:34 507 YODA&#8217;S CRYPTER 1.2 OEP-FINDER.txt<br />
2008-05-18 00:34 665 YODA&#8217;S CRYPTER 1.3 OEP-FINDER.txt<br />
2008-05-18 00:34 1,808 YODA&#8217;S CRYPTER V.1.2-1.3.txt<br />
2008-05-18 00:34 1,502 YODA&#8217;S CRYPTER V.1.X MODIFIED.txt<br />
2004-11-20 18:56 1,808 yoda&#8217;s Crypter V1.2-1.3.txt<br />
2004-11-20 20:12 1,502 yoda&#8217;s cryptor 1.x modified.txt<br />
2008-05-18 00:34 645 YODA&#8217;S PROTECTOR 1.02 OEP FINDER.txt<br />
2008-05-18 00:34 562 YODA&#8217;S PROTECTOR 1.0b OEP-FINDER.txt<br />
2007-08-12 19:38 3,592 yoda&#8217;s Protector V1.03.X.osc<br />
2008-05-18 00:34 1,715 Yodas Crypter 1.2 OEP + Patch IAT v0.1.txt<br />
2006-01-15 00:00 1,808 Yodas Crypter 1.2 OEP and Patch IAT v0.1.txt<br />
2006-01-15 00:00 507 Yodas Crypter 1.2 OEP Finder v0.1.txt<br />
2006-01-15 00:00 668 Yodas Crypter 1.3 OEP Finder.txt<br />
2008-05-18 00:34 1,421 Yodas Crypter 1.x (Modified) OEP Finder + Patch IAT v0.1b.txt<br />
2006-01-15 00:00 1,502 Yodas cryptor 1.x modified OEP and Patch IAT v0.1b.txt<br />
2006-01-15 00:00 649 Yodas Protector 1.02 OEP Finder.txt<br />
2006-01-15 00:00 2,090 Yodas Protector 1.03.x Unpack.txt<br />
2006-01-15 00:00 475 Yodas Protector 1.0b OEP Finder.txt<br />
2006-01-15 00:00 3,243 _Call Magicas Delphi.txt<br />
2006-01-15 00:00 2,020 _Punto magico VC++.txt<br />
2004-02-25 13:59 11,843 中文ReadMe.txt<br />
2004-02-25 00:55 247 变形fsg1.33.txt<br />
2004-02-25 14:12 996 普通fsg1.33.txt<br />
2004-11-17 13:55 649 普通变形 fsg1.33.txt<br />
<h3>相关文章</h3>
<ul class="related_posts">
<li><a href="http://www.h4ck.org.cn/2009/10/mew-11-1-2-northfoxhcc/" title="MEW 11 1.2 -> NorthFox/HCC 脱壳脚本” rel=”bookmark inlinks”>MEW 11 1.2 -> NorthFox/HCC 脱壳脚本</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2010/11/ollydbg-2-01-intermediate-alpha/" title="OllyDbg 2.01 intermediate alpha" rel="bookmark inlinks">OllyDbg 2.01 intermediate alpha</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/04/ollydbg-v2-01-alpha-3/" title="OllyDbg v2.01 (alpha 3)" rel="bookmark inlinks">OllyDbg v2.01 (alpha 3)</a><span class="count">( 1 )</span></li>
<li><a href="http://www.h4ck.org.cn/2009/08/od-break-points/" title="OD常用断点 ^_^ 很全很全" rel="bookmark inlinks">OD常用断点 ^_^ 很全很全</a><span class="count">( 1 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/06/fast-idb2sig-and-loadmap-pluginsida/" title="Fast IDB2Sig and LoadMap plugins(IDA)" rel="bookmark inlinks">Fast IDB2Sig and LoadMap plugins(IDA)</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2010/01/cracklb-sun-dvd-2010/" title="CRACKL@B SUN DVD 2010" rel="bookmark inlinks">CRACKL@B SUN DVD 2010</a><span class="count">( 5 )</span></li>
<li><a href="http://www.h4ck.org.cn/2010/05/ollydbg-skins/" title="OllyDbg皮肤插件" rel="bookmark inlinks">OllyDbg皮肤插件</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2009/08/ollydbg-plugins/" title="Ollydbg插件" rel="bookmark inlinks">Ollydbg插件</a><span class="count">( 0 )</span></li>
</ul>
]]></content:encoded>
			<wfw:commentRss>http://www.h4ck.org.cn/2009/09/700-ollydbgscripts/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>破解必备工具OllyDBG有史以来所有插件+原始码</title>
		<link>http://www.h4ck.org.cn/2009/08/od-plugin-source-code/</link>
		<comments>http://www.h4ck.org.cn/2009/08/od-plugin-source-code/#comments</comments>
		<pubDate>Sun, 16 Aug 2009 01:51:40 +0000</pubDate>
		<dc:creator>obaby</dc:creator>
				<category><![CDATA[插件『IDA/OD Plugin』]]></category>
		<category><![CDATA[软件共享『SoftWare』]]></category>
		<category><![CDATA[OD]]></category>
		<category><![CDATA[Plugin]]></category>

		<guid isPermaLink="false">http://www.h4ck.org.cn/?p=49</guid>
		<description><![CDATA[详细介绍:破解必备工具OllyDBG所有插件+原始码(SRC)(图) 

addr2fileoffset
AdvancedOlly 1.12
AdvancedOlly v1.25
AdvancedOlly v1.26 beta 10]]></description>
			<content:encoded><![CDATA[<p>详细介绍:破解必备工具OllyDBG所有插件+原始码(SRC)(图)</p>
<p>addr2fileoffset<br />
AdvancedOlly 1.12<br />
AdvancedOlly v1.25<br />
AdvancedOlly v1.26 beta 10<br />
AdvancedOlly v1.26 beta 12<br />
<span id="more-49"></span><br />
AdvancedOlly v1.26 beta 8<br />
AdvancedOlly v1.26 beta 9<br />
Analyze This v0.1<br />
AntiAsprotect v1.2x<br />
AntiDetectOlly v2.2.4<br />
APIBreak<br />
ApiBreak Nonameo<br />
APIFinder v0.2<br />
Apihlp<br />
aRC-Olly Admin v1.01<br />
aRC-Olly_Admin_1_0<br />
Asm2Clipboard<br />
AutoPath v0.1<br />
Bin CPU Initialization Patch 2008<br />
Catcha! v1.0<br />
CheatUtility<br />
CheatUtility by.sunsjw<br />
CheatUtility_CHS<br />
CleanUpex v1.12<br />
CmdBar v1.08.02<br />
CmdBar v3.201.10<br />
cmdlin plugin mod<br />
cmdline_plugin_modified__date 24 4 2007<br />
cmdline_plugin_modified__date1672006<br />
Code Ripper v1.3<br />
Conditional_Branch_Logger_v1.0<br />
Crypto Scanner 0.5b<br />
DataRipper v1.2<br />
DebugPlugin v1.0<br />
Dejunk v0.12<br />
Delphi Library Call Importer v1.0<br />
disasm.zip<br />
DLL Rebaser<br />
DLLBreakEx v1.2<br />
excounter v0.1b<br />
ExtraCopy v0.9<br />
ExtraCopy v1.0<br />
Extreme Debugger Detector 0.50<br />
FullDisasm<br />
fulldisasm 1.7<br />
Games Invader v.2.1<br />
Games Invader v2.0<br />
GoDup v1.2<br />
HanOlly1.1<br />
Hash Sniffer v2.0<br />
HideCapt v1.00<br />
HideDebugger v1.01<br />
HideDebugger v1.23<br />
HideDebugger v1.24<br />
hideod 0.17<br />
HideOD v0.181<br />
HitTrace v0.1<br />
HZI Helper<br />
IDAFicator V1.0.8<br />
IDAFicator v1.2.0.3<br />
IDAFicator v1.2.12<br />
IDAFIcator Ver1.0.7.8<br />
IDA_Sigs v1.0 Beta3<br />
ILLY V.01 BETA 1<br />
ILLY v0.1 Beta 3<br />
ImmCScan 0.5b<br />
IsDebuggerPresent v1.4<br />
Kernel Disassembler v1.0<br />
Labeler v1.32<br />
Labeler v1.33<br />
Labelmaster<br />
LCB Plugin v0.10<br />
LoadDLL 1.1<br />
Loadsome2<br />
MapConv v1.4<br />
Mem Dump v0.9<br />
MemoryDump v0.1<br />
MemoryManage<br />
MemoryWatch.1.0<br />
MemoryWatch.1.0.Ollydbg.Plugin.tool_SND<br />
Nonawrite v1.1<br />
NonaWrite v1.2<br />
NotePad Topmost 1.1<br />
NtGlobalFlagPlugin v1.0<br />
ODbgScrip 1.53 Release<br />
ODbgScrip V1.65 Release CHinese<br />
odbgscript 1.47.vc6<br />
ODbgScript 1.48<br />
ODbgScript 1.50.3.VC6<br />
ODbgScript 1.51<br />
ODbgScript 1.52 ENG<br />
odbgscript 1.53 eng<br />
ODbgScript 1.54.3.VC6<br />
ODbgScript 1.6.3<br />
ODbgScript 1.60.3.VC6<br />
ODbgScript 1.64.3.VC6<br />
ODbgScript 1.65.1<br />
ODbgScript 1.65.2<br />
Olly BP Mannager<br />
Olly Heap Vis<br />
Olly Hittrace<br />
Olly Invisible v0.9.0.6<br />
Olly Module bpx<br />
olly polymorphic breakpoint-2<br />
Olly Script Editor v2.0<br />
olly vb helper<br />
OllyBone v0.1<br />
ollybone-0.1<br />
OllyCallTrace v1.0<br />
OllyCScan 0.5b<br />
ollydbg disassembler for delphi<br />
OllyDbg PE Dumper v3.01<br />
OllyDbg PE Dumper v3.03<br />
OllyDbg_167_Plugins_2008-05-24.rar<br />
Ollydbg_Plugin PLUS Masm Source<br />
OllyDump v2.20.108<br />
OllyDump v2.21b<br />
OllyDump v3.001.10<br />
OllyFlow 0.71<br />
OllyGhost<br />
ollygraph v0.1<br />
OllyGuard v0.1<br />
OllyGuard v0.1.2<br />
ollymodulebpx<br />
OllyPad v1.1<br />
OllyPython v0.01 (Vesa)<br />
OllyPython v0.12 (Wushi)<br />
ollypython0.12<br />
OllySafe v0.1<br />
OllyScript 0.93.VC7<br />
OllyScript 0.94<br />
OllyScript 1.48 CH<br />
OllyScript V 0.92<br />
OllyScript v0.93_x86_build<br />
OllySkin V0.1a<br />
OllySSEH &#8211; SafeSEH Module Scanner v0.1<br />
OllySSEH v0.1<br />
OllyStepNSearch 0.5.0<br />
OllyStepNSearch v0.6.1<br />
OllyStepNSearch_V0_6_1<br />
PhantOm 1.0.4 for EXECryptor 2.4.1 &#8211; Kioresk<br />
PhantOm 1.1.5 mod for ec2.4.1<br />
PhantOm Plugin.1.00<br />
PhantOm.plugin.0.53<br />
phantom.plugin.0.55<br />
PhantOm.plugin.0.57<br />
PhantOm.plugin.1.03<br />
PhantOm.plugin.1.04<br />
PhantOm.plugin.1.20<br />
PhantOm.plugin.1.25<br />
PhantOm.plugin.1.26<br />
Point Events in Delphi Executables v1.0<br />
poison<br />
Robin v0.01<br />
SehSpy<br />
SkyPatch v1.0<br />
StayOnTop v1.0<br />
StollyStructs v1.0<br />
StrongOD v0.13<br />
StrongOD v0.2<br />
TransOlly v1.0<br />
Uhooker v1.2<br />
Universal Hooker v1.1<br />
Virtual2Physical v0.1<br />
Watchman v1.00<br />
Windowinfos<br />
WindowJuggler v0.06<br />
WinMax</p>
<p><a href="http://snet1.3800hk.com/200908/090815pojie.rar">猛击此处下载1 </a></p>
<p><a href="http://stel1.3800hk.com/200908/090815pojie.rar">猛击此处下载2 </a><br />
<h3>相关文章</h3>
<ul class="related_posts">
<li><a href="http://www.h4ck.org.cn/2009/10/mew-11-1-2-northfoxhcc/" title="MEW 11 1.2 -> NorthFox/HCC 脱壳脚本” rel=”bookmark inlinks”>MEW 11 1.2 -> NorthFox/HCC 脱壳脚本</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2010/05/ollydbg-skins/" title="OllyDbg皮肤插件" rel="bookmark inlinks">OllyDbg皮肤插件</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2009/08/od-break-points/" title="OD常用断点 ^_^ 很全很全" rel="bookmark inlinks">OD常用断点 ^_^ 很全很全</a><span class="count">( 1 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/02/pluginfix-v1-01by-bob-team-peid/" title="PluginFix v1.01[By BoB / Team PEiD]" rel="bookmark inlinks">PluginFix v1.01[By BoB / Team PEiD]</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2009/09/%e5%bc%ba%e5%a4%a7%e7%9a%84%e4%bf%ae%e6%94%b9%e7%89%88%e6%9c%acollydbgollydrx-1-0/" title="强大的修改版本OllyDbg:OllyDRX 1.0" rel="bookmark inlinks">强大的修改版本OllyDbg:OllyDRX 1.0</a><span class="count">( 0 )</span></li>
<li><a href="http://www.h4ck.org.cn/2009/09/700-ollydbgscripts/" title="700+ OllyDbgScripts" rel="bookmark inlinks">700+ OllyDbgScripts</a><span class="count">( 2 )</span></li>
<li><a href="http://www.h4ck.org.cn/2011/04/ollydbg-v2-01-alpha-3/" title="OllyDbg v2.01 (alpha 3)" rel="bookmark inlinks">OllyDbg v2.01 (alpha 3)</a><span class="count">( 1 )</span></li>
<li><a href="http://www.h4ck.org.cn/2009/08/ollydbg-2-0-beta-2-200j/" title=" OllyDbg 2.0 beta 2 (200j) " rel="bookmark inlinks"> OllyDbg 2.0 beta 2 (200j) </a><span class="count">( 0 )</span></li>
</ul>
]]></content:encoded>
			<wfw:commentRss>http://www.h4ck.org.cn/2009/08/od-plugin-source-code/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>

