吾爱破解 - 52pojie.cn

 找回密码
 注册[Register]

QQ登录

只需一步,快速开始

查看: 4539|回复: 1
收起左侧

[Scripts] ActiveMark level 2 entry point finder

[复制链接]
mycsy 发表于 2009-8-9 01:22
/*
ActiveMark level 2 entry point finder
Made by: GaBoR {RES}
Thanks to CONDZERO for the good tuts on Activemark!
Instructions:
-use RE-Pair 0.6 & HideDebugger 1.2.3f to hide OllyDbg;
-make sure you tick 'Break on new module(DLL)' in 'Options->Debugging Options->Events before running script';
-run the script after you arrive at program entry point;
*/
var v
gpa "CreateThread","kernel32.dll"
mov v,$RESULT
bphws v,"x"
run
msg "Script will pause, press F9 until Olly breaks at CreateThread,press F9 3 times then resume script!"
pause
bphwc v
gpa "GetVersion","kernel32.dll"
mov v,$RESULT
bphws v,"x"
run
bphwc v
rtu
mov v,eip
sub v,5B
find v,#558BEC6AFF#
bphws $RESULT,"x"
cmt $RESULT,"Dump here & fix IAT"
msg "Restart the program, dump at breakpoint & fix IAT!"
ret

发帖前要善用论坛搜索功能,那里可能会有你要找的答案或者已经有人发布过相同内容了,请勿重复发帖。

头像被屏蔽
震汝陶 发表于 2010-5-23 13:46
提示: 作者被禁止或删除 内容自动屏蔽
您需要登录后才可以回帖 登录 | 注册[Register]

本版积分规则

返回列表

RSS订阅|小黑屋|处罚记录|联系我们|吾爱破解 - LCG - LSG ( 京ICP备16042023号 | 京公网安备 11010502030087号 )

GMT+8, 2024-11-23 10:41

Powered by Discuz!

Copyright © 2001-2020, Tencent Cloud.

快速回复 返回顶部 返回列表