/////////////////////////////////////////////////////////////////////////////////////
//PECompact 2.64 OEP finder
//Author : 紫色缘[TFW][PCG][DFCG]
//Email : yufufen37@hotmail.com
//Homepage: http://www.cniso.org
//OS : WinXP ,OllyDbg ,OllyScript v1.0 Beta2
//Date : 2006-06-14
//Config : Exceptions:uncheck all. you don't need to hide the DeBugger,i'll do for u!
//Note : If you have one or more question, email me please,thank you!
//////////////////////////////////////////////////////////////////////////////////////

var ziseyuan
var addr
sto
sto
sto
mov addr,esp
bphws addr,"r"
run
run
run
sto
sti
an eip
log eip
cmt eip, "This is the OEP! Found by ZiSeYuAn"
MSG "Script by 紫色缘[TFW][PCG][DFCG],Thank you for using my Scripts!"
bphwc 12FFBC
ret

此壳虽然网上很多的脱壳机,但是从自己手上写出了脱壳脚本,那就是很舒心.呵呵.(千万别丢鸡蛋~~)

这个脚本只针对PECompact2.64版本。请各位试试，很希望各位大侠指导在下怎么来优化比较好 ,谢谢!

这个脚本未参照任何文章, 拜读过fly大侠的脚本.在此感谢fly大侠 同时用了loveboom的OllyScript v1.0 Beta2 ,感谢!

[课程]Linux pwn 探索篇！