morphine 1.2 oep finder v0.1.txt

来自「700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.」· 文本 代码 · 共 39 行

/* 
////////////////////////////////////////////////// 
morphine 1.2 OEP Finder v0.1 
Author: loveboom 
Email : [e-mail] 
OS : Win2kADV sp2,OllyDbg 1.1b,OllyScript v0.62 
Date : 2004-3-26 
Config: N/A 
Note :If you have one or more question 
email me please,thank you! 
////////////////////////////////////////////////// 
*/ 
gpa "LoadLibraryA","kernel32.dll" 
bp $RESULT 
run 

lbl1: 
bc $RESULT 
rtu 
eob lbl2 
findop eip,#FFD7# 
bphws $RESULT,"x" 
run 

lbl2: 
bphwc $RESULT 
sti 
cmt eip,"OEP foun!Please dumped it!" 
msg "Scrtipt by loveboom[DFCG],Thank you for using my script!" 
ret 

to psyCK0: 
idea. 
var addr 
var value 
xxx 
xxx 
cmt eip,string &&addr // here 
msg string&&value //here