Page 1 of 2 12 LastLast
Results 1 to 15 of 22

Thread: [plugin] OllyScript v0.5

  1. #1
    psyCK0
    Guest

    [plugin] OllyScript v0.5

    Ollyscript v0.5 can now be downloaded at:
    http://ollyscript.apsvans.com


    New features like API breakpoints, run-to-return, module info etc. are implemented.

    From readme.txt:
    + New commands:
    CMT, GMI, GPA, LBL, RTR, RTU
    + New example script - tElock 0.98 OEP finder.

    Comments please!!! =)
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2

    [plugin] OllyScript v0.5

    The plugins for 0.4 are compatibles in 0.5?

    Ricardo

  3. #3
    psyCK0
    Guest

    [plugin] OllyScript v0.5

    Yeah, everything is compatible and will be in the future. =)
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4

    [plugin] OllyScript v0.5

    If you can improve the next version with the BPMs

    BPM ON ACCESS

    and in more extension of FF bytes only

    BPM start, end

    for put BPM in sections or big blocks

    Ricardo

  5. #5

    [plugin] OllyScript v0.5

    You are making a good work, FELICITACIONES jeje (in spanish)

    Ricardo Narvaja

  6. #6
    psyCK0
    Guest

    [plugin] OllyScript v0.5

    Bugfixed v0.51 uploaded.



    Ricardo Narvaja: thx =)
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  7. #7

    [plugin] OllyScript v0.5

    i make a script with a cmp and next a jne, and the values of the comparation are not equal, but the jne never jump, is a bug?

    Ricardo Narvaja

  8. #8
    psyCK0
    Guest

    [plugin] OllyScript v0.5

    Ricardo Narvaja: could you please mail the script + url to the target to ollyscriptNOSPAM@apsvans.com (remove NOSPAM) so i can have a look?

    Just tested this and it works:

    var x
    var y
    mov x, 1
    mov y, 2
    cmp x, y
    jne NOT_EQUAL
    msg "x == y"
    ret

    NOT_EQUAL:
    msg "x != y"
    ret
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  9. #9

    [plugin] OllyScript v0.5

    Is not a useful script is only a try, use a upx packed program for example.

    var pirulo
    eoe Break
    msg "Please set a memory breakpoint on the section start on 401000 and then press the button of this message"
    run

    Break:
    GMI eip, CODEBASE
    mov pirulo,$RESULT
    log pirulo
    cmp pirulo, 401000
    jne siga
    msg "equals"
    ret

    siga:
    msg "not equals"
    run

    in the log pirulo=408000 and are different of 401000 but the msg say equals

    Supressing the msg the script only can stop in BPM execution of 401000 section and not in BPM r or w.
    Ricardo Narvaja

  10. #10
    psyCK0
    Guest

    [plugin] OllyScript v0.5

    Ricardo Narvaja: you were right, that was a bug... Fixed now.

    v0.52 uploaded.

    Supressing the msg the script only can stop in BPM execution of 401000 section and not in BPM r or w.
    Not sure what you mean??
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  11. #11

    [plugin] OllyScript v0.5

    Well is not useful jeje

    The idea is when unpack a program, the packer stops first in BPM READ or BPM WRITE when unpacking and when is unpacked jump to oep and stop in BPM on execution.
    The idea is when stop for bpm see the codebase of the current eip, and if is not 401000, is a bpm R-W, and run without stop, and when the codebase are 401000, you are on BPM X (on execution).
    This is the idea quittting the msgs, but is very slow for find oeps, but i put here for example of the bug only.

    Ricardo

  12. #12

    [plugin] OllyScript v0.5

    Spupresing the msgs "equals", and "not equals", the other msg is necesary

    Ricardo

  13. #13
    psyCK0
    Guest

    [plugin] OllyScript v0.5

    How do you mean? Is it still buggy???
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  14. #14

    [plugin] OllyScript v0.5

    Not, i only explain the script

    Ricardo

  15. #15
    psyCK0
    Guest

    [plugin] OllyScript v0.5

    A mailing list for the plugin is now available at:
    http://mail.apsvans.com/mailman/listinfo/ollyscript_apsvans.com


    New versions, bugfixes, general discussions, script sharing etc.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. [plugin] OllyScript v0.8
    By psyCK0 in forum OllyScript Plugin
    Replies: 13
    Last Post: October 27th, 2004, 10:16
  2. [plugin] OllyScript v0.92
    By psyCK0 in forum OllyScript Plugin
    Replies: 13
    Last Post: July 17th, 2004, 09:28
  3. [plugin] OllyScript v0.9
    By psyCK0 in forum OllyScript Plugin
    Replies: 11
    Last Post: July 13th, 2004, 11:31
  4. [plugin] OllyScript v0.7
    By psyCK0 in forum OllyScript Plugin
    Replies: 5
    Last Post: April 18th, 2004, 11:32
  5. [plugin] OllyScript v0.6
    By psyCK0 in forum OllyScript Plugin
    Replies: 24
    Last Post: March 10th, 2004, 17:41

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •