peshield 0.25 oep finder v0.1.txt

来自「700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.」· 文本 代码 · 共 26 行

// PE-SHiELD V0.25 Oep Find v0.1
// This script will quickly put you at the OEP of an PE-SHiELD V0.25 EXE.
// Just run it!

msg "请设置OD异常设置除了错误的或者有特权的指令异常全部忽略，然后从菜单处继续运行脚本"
pause

var addr1

dbh  //隐藏调试器

run

esto

findop eip,#FFE0#    //特征指令
mov addr1,$RESULT         
bp addr1


esto
Bc addr1

sto

cmt eip,"OEP Or Next Shell To Get,Please dumped it,Enjoy!"