fatmike dll loader script.txt

来自「700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.」· 文本 代码 · 共 44 行

/*
FatMike DLL loader script
********************
nick_name
TEAM RESSURRECTiON
********************
*/

mov saved_eip,eip
alloc 100
mov alloc_addr,$RESULT

gpa "LoadLibraryA","kernel32.dll"
mov LoadLibraryA,$RESULT

LOOP:
ask "DLL name ??"
mov dllname,$RESULT
cmp $RESULT,""
je FIN

mov tmp,alloc_addr
add tmp,50
fill tmp, 50, 00
mov [tmp],dllname

eval "push {tmp}"
asm alloc_addr,$RESULT
mov eip,alloc_addr
sto
fill alloc_addr,50,00

eval "call {LoadLibraryA}"
asm alloc_addr,$RESULT
mov eip,alloc_addr
sto
fill alloc_addr,50,00

mov eip,saved_eip
jmp LOOP

FIN:
ret
=====================