700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.

源代码在线查看: molebox 2.x.x fix iat+oep-finder 0.2.txt

软件大小: 643 K
上传用户: peterzhang1982
关键词: ollyscript Plugin 700 脚本
下载地址: 免注册下载 普通下载 VIP

相关代码

				/*
				//////////////////////////////////////////////////
					MoleBox 2.x.x  fix IAT+OEP Finder v0.2
					Author:	loveboom
					Email : bmd2chen@tom.com
					OS    : Win2kADV sp2,OllyDbg 1.1b,OllyScript v0.7
					Date  : 2004-3-29
					Config: N/A
					Note  : If you have one or more question, email me please,thank you!
				//////////////////////////////////////////////////
				*/
				var addr
				
				start:
				  gpa "LoadLibraryA","kernel32.dll"
				  bp $RESULT
				  cmp $RESULT,0
				  je lblabort
				  run
				
				lbl1:
				  bc $RESULT
				  rtu
				  rtu
				  rtu
				
				lbl2:
				  find eip,#05000083C408E9#
				  cmp $RESULT,0
				  je lblabort
				  mov addr,$RESULT
				  sub addr,2
				  go addr
				  eob lbl3
				  sti
				
				lbl3:
				  asm eip,"ret"
				  find eip,#FFE0#
				  cmp $RESULT,0
				  je lblabort
				  eob lbl4
				  bp $RESULT
				  run
				
				lbl4:
				  sto
				
				lblend:
				  cmt eip,"OEP found!please dumped it!"
				  msg "Script by loveboom[DFCG][FCG],Thank you for using my script!"
				  ret
				
				lblabort:
				  msg "Error,Script abort!maybe target is not packed by MoleBox 2.x.x."
				  ret			

相关资源