-
-
ID Application Protector 1.2 带试用限制脱壳脚本
-
发表于: 2007-4-16 09:31
-
ID Application Protector 1.2 带试用限制脱壳脚本
学习脚本编写实战篇,
/*
Script written by ~icy~学习班
Script : ID Application Protector 1.2_unpacker
Date : 2007-04-16
Test Environment : OllyDbg 1.1, ODBGScript 1.51, Winxp Win2003
*/
var addr
find eip,#743789EA#
go $RESULT
repl eip, #743789EA#, #753789EA#,1F
find eip,#0F858500000089E9#
go $RESULT
repl eip, #0F858500000089E9#, #0F848500000089E9#,1F
find eip,#C390EB01#
go $RESULT
STO
cmt eip,"Script finished! You are on the OEP!"
eval "Please Dump & fix IAT!"
msg $RESULT
ret
学习脚本编写实战篇,
/*
Script written by ~icy~学习班
Script : ID Application Protector 1.2_unpacker
Date : 2007-04-16
Test Environment : OllyDbg 1.1, ODBGScript 1.51, Winxp Win2003
*/
var addr
find eip,#743789EA#
go $RESULT
repl eip, #743789EA#, #753789EA#,1F
find eip,#0F858500000089E9#
go $RESULT
repl eip, #0F858500000089E9#, #0F848500000089E9#,1F
find eip,#C390EB01#
go $RESULT
STO
cmt eip,"Script finished! You are on the OEP!"
eval "Please Dump & fix IAT!"
msg $RESULT
ret
