MEW 11 1.2 -> NorthFox/HCC 脱壳脚本

//////////////////////////////////////////////////
//  FileName    :  MEW 11 V1.0-V1.2.osc
//  Comment     :  MEW 11 V1.0-V1.2 OEP Find
//  Environment :  WinXP SP2,OllyDbg V1.10,OllyScript V0.92
//  Author      :  fly
//  WebSite     :  http://www.unpack.cn
//  Date        :  2005-10-03 20:30
//////////////////////////////////////////////////
#log

MSGYN "Plz Clear All BreakPoints  And  Set Debugging Option Ignore All Excepions Options  !"
cmp $RESULT, 0
je TryAgain

//GameStart――――――――――――――――――――――――――――――――

sti
find eip, #C30000#
cmp $RESULT, 0
je NoFind
eob Break
bp $RESULT
log $RESULT

esto
GoOn:
esto

Break:
cmp eip,$RESULT
jne GoOn
bc $RESULT
sto

//GameOver――――――――――――――――――――――――――――――――

log eip
cmt eip, "This is the OEP! Found By: fly"
MSG "Just : OEP !  Dump and Fix IAT.  Good Luck  "
ret

NoFind:
MSG "Error! Maybe It's not MEW 11 V1.0-V1.2 ! "
ret

TryAgain:
MSG " Please  Try  Again   !   "
ret

700+ OllyDbgScripts

猛击此处下载文件!https://cloud.189.cn/t/jmemA3a6fqIj (访问码:lf58) smile smile

2008-04-05 20:47 220 32Lite 0.03a OEP Finder v0.1.txt
2006-01-15 00:00 218 32Lite 0.03a OEP V0.1.txt
2008-05-18 00:33 218 32LITE 0.03A OEP-FINDER V.0.1.txt
2004-11-14 19:55 218 32Lite 0.03a.txt
2008-05-18 00:33 2,490 ActiveMark 5.4x Level 2 EP Finder + Fix CRC.txt
2008-05-18 00:33 1,380 ActiveMark 5.4x Remove Selfchecks.txt
2008-05-18 00:33 474 ActiveMark 5.xx Level 2 EP Finder.txt
2006-01-15 00:00 801 ActiveMark Level 2 EP Finder.txt
2006-01-15 00:00 441 ActiveMark Patching Script.txt
2008-04-05 20:50 2,648 activemark54x.txt
2008-04-05 20:50 4,919 AddrEnc.txt
2008-04-05 20:50 1,075 AHpack 0.1 OEP Finder .txt
2008-04-05 20:50 1,017 AHTeam EP Protector 0.3a.txt
2008-04-05 20:50 1,227 AHTeam EP Protector 0.3b.txt
2006-01-15 00:00 3,515 Alex Protector 1.0 Beta 2 Fix IAT + Remove Junk Code v0.1.txt
2008-04-05 20:50 3,515 ALEX PROTECTOR 1.0 BETA2 V0.1.txt
2006-01-15 00:00 3,515 ALEX Protector1.0.txt
2008-04-05 20:50 801 AM.level2.ep.finder.txt
2008-04-05 20:51 396 AM.patching.script.txt

Continue Reading

查壳利器:Peid最新完整特征库:UpKPEiDSign.V20090826.By.fly

详细介绍:01.增加新的PEiDSign,请不要调整特征库内Sign的排列次序
02.UpKPEiDSign.V20090826.By.fly[CUG].rAr PassWord:UpK
03.请不要把UpKPEiDSign与其他特征库合并,发现某些人拿到特征库后进行修改合并操作然后再打包散发
04.收录的几百条PEiDSign绝大部分都是fly亲手制作并验证的
05.由于伪装壳和其他原因,无法保证所有的Sign都可准确识别出目标壳信息
06.fly提醒您:PEiD侦壳信息仅仅提供参考作用,尽信书则不如无书
07.UpKPEiDSign使用方法:把userdb.txt释放于PEiD主程序目录下即可
08.欢迎大家自由转载UpKPEiDSign,但是请保持压缩包的完整性并注明出处
09.欢迎大家多来UpK论坛参与讨论交流,谢谢
猛击此处下载!

Continue Reading

ExeInfo PE ver. 0.0.2.4 by A.S.L ( c ) 2006.03 – 2009.xx

ImageHost.org
___________________________________________________________________________

ExeInfo PE ver. 0.0.2.4 by A.S.L ( c ) 2006.03 – 2009.xx

freeware version for Windows XP

Windows 32 PE executable file checker , compilators, exe packers ….

with solve hint for unpack / internal exe tools / rippers

___________________________________________________________________________
猛击此处下载!

Continue Reading