exe stealth2.74.txt

700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.

/*
////////////////////////////////////////////
    ExE Stealth 2.74 OEP Finder v0.1
    
    Author:loveboom
    Email :[e-mail]
    OS    :Win2k ADV sp2、OllyDbg1.1B.OllyScript v0.61
    Date  :2004-3-9
    Config:Uncheck"Memory access violation" and
           "IsDebuggerPresent->Hide"
    Other :If you have one or more question 
           email me please,Thank you!
/////////////////////////////////////////////
*/
var csize
var cbase

gmi eip,CODEBASE
mov cbase,$RESULT
gmi eip,CODESIZE
mov csize,$RESULT
run

lbl1:
esto
eob lbl2
bprm cbase,csize
esto

lbl2:
bpmc
cmt eip,"OEP!Please dump it :>"
msg "Script by loveboom[DFCG],Thank you for using my script!"
ret