?? asprotect 2.0x log all highmem calls.txt
字號:
// Script for OllyScript plugin/*////////////////////////////////////////////////// it's been a hard time finding all the HIGHMEM calls 'n fixing themso, i took some time 'n made these scripts. hope it'll be helpfull forguys with ASProtect. 1. scripts are for ODBGScript 1.41 version2. at the beginning of the script source, define the values accordingly, before running the scripts3. when app is running 'n script has'nt shown SCRIPT FINISHED, abort the script manuallyFirst Script - my_asprotect_HIGHMEM.txt this script logs all the highmem calls in log-HIGHMEM-calls.txtlog-HIGHMEM-calls-BIN.txt contains the BYTES in reverse orderfor binary pasting in olly.there's a prob here in log-HIGHMEM-calls-BIN.txtsometimes addresses like 401204 will get reversed and log-HIGHMEM-calls-BIN.txt file will contain corresponding 41240 not 041240 ... so edit the BIN file manually b4 binarypasting and put an extra 0 before addresses like 41240Support with:ASProtect 2.0x////////////////////////////////////////////////// */ DEFINE_BEFORE_EXECUTION:mov code_section,401000mov code_section_size,33000SCRIPT_START:mov path1,".\log-HIGHMEM-calls.txt"mov path2,".\log-HIGHMEM-calls-BIN.txt"FIND_HIGHMEM_CALLS:lcmov counter,0runBINARY_SEARCH:find eip,#807B20000F85????00003C01#cmp $RESULT,0je NOT_FOUNDmov bp_addr,$RESULTbp bp_addrL1: eob LOGestojmp L1jmp NOT_FOUNDLOG: cmp ebp,code_sectionjb L1cmp ebp,code_section + code_section_sizeja L1add counter,1eval "{counter}. {ebp}"log $RESULT,""wrta path1, $RESULTwrta path1, "\r\n"rev ebpwrta path2, $RESULTwrta path2, "\r\n"eob LOGestojmp L1NOT_FOUND:ret
?? 快捷鍵說明
復制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -