700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.

源代码在线查看: pecompact 2.01a oep finder.txt

软件大小: 643 K
上传用户: peterzhang1982
关键词: ollyscript Plugin 700 脚本
下载地址: 免注册下载 普通下载 VIP

相关代码

				/* 
				
				PECompact 2.01a (27-04-04 release) OEP Finder by Scarabee 
				
				Make sure you Select NO on 'Compressed code message' when loading application in Olly. 
				When at OEP, just dump and fix with IMPREC. 
				
				*/ 
				
				var cbase 
				var csize 
				var lbl2 
				var lbl1 
				var oki 
				
				sto 
				findop eax, #c3# 
				bp $RESULT 
				esto 
				esto 
				GMI eip, CODEBASE 
				mov cbase, $RESULT 
				GMI eip, CODESIZE 
				mov csize, $RESULT 
				bpwm cbase, csize 
				esto 
				sto 
				bpmc 
				findop eip, #FFE0# 
				mov oki, $RESULT 
				bp $RESULT 
				esto 
				
				lbl2: 
				cmp eip, oki 
				jne lbl1 
				sto 
				MSG "This is OEP, now dump and fix!" 
				ret 
				
				lbl1: 
				esto 
				jmp lbl2			

相关资源