exestealth 2.74 oep-finder.txt

700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.

/* 
//////////////////////////////////////////// 
ExE Stealth 2.74 OEP Finder v0.1 

Author:loveboom 
Email :[e-mail] 
OS :Win2k ADV sp2?OllyDbg1.1B.OllyScript v0.61 
Date :2004-3-9 
Config:Uncheck"Memory access violation" and 
"IsDebuggerPresent->Hide" 
Other :If you have one or more question 
email me please,Thank you! 
///////////////////////////////////////////// 
*/ 
var csize 
var cbase 

gmi eip,CODEBASE 
mov cbase,$RESULT 
gmi eip,CODESIZE 
mov csize,$RESULT 
run 

lbl1: 
esto 
eob lbl2 
bprm cbase,csize 
esto 

lbl2: 
bpmc 
cmt eip,"OEP!Please dump it :>" 
msg "Script by loveboom[DFCG],Thank you for using my script!" 
ret