Wrote a script for OllyDbg to unpack binaries. Unpacks the second layer (the one after upx).
How it works
1. Remove upx
2. Run the script
3. And now you have to work a little with your hands: after execution, press follow in dump the eax register and save it to a file. The file will be full of garbage (null bytes). Open the dump in any hex editor, delete garbage from the beginning of the file to the MZ sign.
The script works correctly with binaries that have a psycho-hallucinogenic icon
How it works
1. Remove upx
2. Run the script
3. And now you have to work a little with your hands: after execution, press follow in dump the eax register and save it to a file. The file will be full of garbage (null bytes). Open the dump in any hex editor, delete garbage from the beginning of the file to the MZ sign.
The script works correctly with binaries that have a psycho-hallucinogenic icon
You must reply before you can see the hidden data contained here.