700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.

源代码在线查看: pe compact 2.xx oep-finder [2].txt

软件大小: 643 K
上传用户: peterzhang1982
关键词: ollyscript Plugin 700 脚本
下载地址: 免注册下载 普通下载 VIP

相关代码

				// Mr.David PECompact 2.x OEP finder v0.1
				// This script will quickly put you at the OEP of an PECompact 2.x EXE.
				// Just run it!
				
				msg "请设置OD异常设置忽略了内存异常,然后从菜单处继续运行脚本"
				pause
				
				var addr
				
				gpa "VirtualFree","kernel32.dll"
				mov addr,$RESULT                    //捷径 API断点VirtualFree
				bp addr
				run
				
				bc addr     //Clear break point  //取消断点
				rtu        //Alt+F9
				rtr       //Ctrl+F9
				sto      //单步
				
				findop eip,#FFE0#    //特征指令
				mov addr,$RESULT 
				bp addr            //下断
				run               //运行
				bc addr          //清断
				sto             //单步
				           
				cmt eip,"OEP Or Next Shell To Get,Please dumped it,Enjoy!"
				
							

相关资源