<span class="pediy"><span class="pediy">
直取OEP
代码:<hr>
<font color=green>//Script for yoda's Protector v1.01
<font color=green>//by cyclotron [BCG][DFCG][FCG][OCN]
<font color=green>//直取OEP
<font color=green>//━━━━━━━━━━━━━━━━━━━━━━━━━━━
gpa "Process32Next","kernel32.dll"
<font color=#0000FF>bp $RESULT
run <font color=green>//F9
bc $RESULT <font color=green>//clear bp
rtu <font color=green>//run to user code
find eip,#3BC374# <font color=green>//cmp eax,ebx
<font color=#000099>add $RESULT,2 <font color=green>//next instruction
<font color=#0000FF>bp $RESULT
run
bc $RESULT
<font color=#000099>mov !ZF,1 <font color=green>//置Z标志
<font color=green>//━━━━━━━━━━━━━━━━━━━━━━━━━━━
gpa "Process32Next","kernel32.dll"
<font color=#0000FF>bp $RESULT
run <font color=green>//F9
bc $RESULT <font color=green>//clear bp
rtu <font color=green>//run to user code
find eip,#3BC374# <font color=green>//cmp eax,ebx
<font color=#000099>add $RESULT,2 <font color=green>//next instruction
<font color=#0000FF>bp $RESULT
run
bc $RESULT
<font color=#000099>mov !ZF,1 <font color=green>//置Z标志
<font color=green>//━━━━━━━━━━━━━━━━━━━━━━━━━━━
gpa "Process32Next","kernel32.dll"
<font color=#0000FF>bp $RESULT
run <font color=green>//F9
bc $RESULT <font color=green>//clear bp
rtu <font color=green>//run to user code
find eip,#3BC374# <font color=green>//cmp eax,ebx
<font color=#000099>add $RESULT,2 <font color=green>//next instruction
<font color=#0000FF>bp $RESULT
run
bc $RESULT
<font color=#000099>mov !ZF,1 <font color=green>//置Z标志
<font color=green>//━━━━━━━━━━━━━━━━━━━━━━━━━━━
var cbase
gmi eip,CODEBASE
<font color=#000099>mov cbase,$RESULT
var csize
gmi eip,CODESIZE
<font color=#000099>mov csize,$RESULT
bprm cbase,csize <font color=green>//内存读断点
run
bpmc
pause
<hr>
注意：上传附件及图片大小不得大于30M。
⚠️ 版权声明：
本博客所有内容（含教程、源码、工具）仅供个人技术学习与研究交流使用，严禁商用、倒卖、二次分发及非法用途。
未经作者书面授权，任何组织或个人不得转载、复制或用于其他平台，违者将追究相关责任。
