700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.

源代码在线查看: molebox 2.xx oep finder + fix iatv0.11.txt

软件大小: 643 K
上传用户: peterzhang1982
关键词: ollyscript Plugin 700 脚本
下载地址: 免注册下载 普通下载 VIP

相关代码

				/* 
				////////////////////////////////////////////////// 
				MoleBox 2.x.x fix IAT+OEP Finder v0.11 
				Author: loveboom 
				Email : bmd2chen@tom.com 
				OS : Win2kADV sp2,OllyDbg 1.1b,OllyScript v0.7 
				Date : 2004-3-29 
				Config: N/A 
				Note : Thank David!If you have one or more question, email me please,thank you! 
				////////////////////////////////////////////////// 
				*/ 
				var addr 
				
				start: 
				gpa "LoadLibraryA","kernel32.dll" 
				bp $RESULT 
				cmp $RESULT,0 
				je lblabort 
				run 
				
				lbl1: 
				bc $RESULT 
				rtu 
				
				lbl2: 
				find eip,#05000083C408E9# 
				cmp $RESULT,0 
				je lblabort 
				mov addr,$RESULT 
				sub addr,2 
				go addr 
				eob lbl3 
				sti 
				
				lbl3: 
				asm eip,"ret" 
				find eip,#FFE0# 
				cmp $RESULT,0 
				je lblabort 
				eob lbl4 
				bp $RESULT 
				run 
				
				lbl4: 
				sto 
				
				lblend: 
				cmt eip,"OEP found!please dumped it!" 
				msg "Script by loveboom[DFCG][FCG],Thank you for using my script!" 
				ret 
				
				lblabort: 
				msg "Error,maybe target is not packed by MoleBox 2.x.x.Script abort!" 
				ret 			

相关资源