execryptor1.53.txt

来自「masm 调试工具」· 文本 代码 · 共 56 行

/*
//////////////////////////////////////////////////
	EXECryptor1.53 OEP Finder v0.1  for 2k/xp 
	Author:	loveboom
	Email : [e-mail]
	OS    : Win2kADV sp2,OllyDbg 1.1b,OllyScript v0.62
	Date  : 2004-3-14
	Config: Check All Exception!
	Note  :Especially Tank tDasm.If you have one or more question 
		email me please,thank you!
//////////////////////////////////////////////////
*/
var addr
var haddr

run
mov [eip],#CC039090#
mov haddr,esp
add haddr,14
log haddr
bphws haddr,"r"
gpa "VirtualProtect","kernel32.dll"
mov addr,$RESULT
add addr,1
bphws addr,"x"
esto
eob lbl1
rtu

lbl1:
bphwc addr
mov addr,eip
add addr,7A
bphws addr,"x"
eob lbl2
run

lbl2:
bphwc addr
sti
sti
sti
sti
sti
mov addr,edx
bphws addr,"x"
eob lbl3
run

lbl3:
bphwc addr
bphwc haddr
cmt eip,"OEP Found!please dumped it!"
msg "Script by loveboom[DFCG],Thank you for using my Script!"
ret