Page 1 of 2 12 LastLast
Results 1 to 15 of 25

Thread: [plugin] OllyScript v0.6

  1. #1
    psyCK0
    Guest

    [plugin] OllyScript v0.6

    Hello everyone,

    OllyScript v0.6 is now available for download at
    http://ollyscript.apsvans.com

    Here is an except from the readme:

    2.1 What's new?
    ---------------
    The internal architecture of the plugin totally redone and object-oriented
    (its not perfect OO, but bear with it). Because of this rewrite, bugs are
    likely to appear. Please report them to me ASAP!
    Bugs with script processing are fixed, parts of code are redone etc.

    + New commands:
    BPCND, BC, BPMC, JA, JB, JAE, JBE, AI, AO, TI, TO
    + Conditional breakpoints
    + Breakpoint clearing (even memory)
    + Tracing and animation
    + More jumps
    + Stepping through script supported
    # BP behaviour fixed (it now SETS breakpoint, instead of TOGGLEING it).
    # Bugs in script processing fixed (thanks s0nkite).
    # LOG now logs things like strings that are referenced by the address,
    referenced function addresses etc. Try it, its cool!
    # "Thanks" section of readme updated. =)
    ------------------------------

    Hope you like it! =)
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    helloword
    Guest

    [plugin] OllyScript v0.6

    How the Stepping through script supported is working ?
    How to load the Logs window ?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    psyCK0
    Guest

    [plugin] OllyScript v0.6

    1. Use the Step command on the plugin menu to execute one script step at a time when script is paused.
    2. RTFM =) (or try looking at the top of the View menu)
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4
    loveboom
    Guest

    [plugin] OllyScript v0.6

    thanks
    Good
    psyCK0:
    new command:
    hedit addr,#HEX#?
    bp aadr,EAX==111,DO set ZF=0 ??
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  5. #5
    psyCK0
    Guest

    [plugin] OllyScript v0.6

    v0.61 uploaded (bugfix).

    loveboom
    1. This is already there, just use MOV [addr], #001234#.
    2. The DO is not necessary, you can use EOB. Setting flags is
    a nice idea, will come in 0.7.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  6. #6
    loveboom
    Guest

    [plugin] OllyScript v0.6

    idea:
    do this hide ring3 debug with ollyscript
    var eax
    var addr1
    mov eax,dword ptr fs:[30] //?here
    add eax,2
    mov addr1,eax
    mov eax,[eax]
    cmp al,1
    jne end
    mov [addr1],0
    end:
    or mov eax,dword ptr fs:[18] //?here
    thanks
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  7. #7
    loveboom
    Guest

    [plugin] OllyScript v0.6

    today i cann't open:http://ollyscript.apsvans.com (yestoday can do it).post a obsidium 1.0061 crack version unpack script:
    test:win2kadv、ollyscripts v0.6(only v0.6)
    /*
    ////////////////////////////////////////////////////////////////////// ////
    ★ Obsidium1.061 OEP Founder v0.1(for VB only) ★
    ★ Author: loveboom ★
    ★ Email : bmd2chen@tom.com
    ★ Date : 2004-2-17 ★
    ★ Note : If you have one or more question ★
    ★ email to bmd2chen@tom.com(china) thank you! ★
    ★ this script can help you found oep、Fix Import、patch OEP code. ★
    ★ Setting: ALT+O open option window,Exceptions->uncheck . ★
    ★ all Exception OPT! ★
    ////////////////////////////////////////////////////////////////////// ////
    */

    var cbase
    var csize
    var count
    var patchaddr
    var patchcode

    gmi eip,CODEBASE
    mov cbase,$RESULT
    gmi eip,CODESIZE
    mov csize,$RESULT

    mov count,11
    eoe lbl1
    eob lbl1
    run

    lbl1:
    cmp count,0
    je lbl2
    sub count,1
    esto
    jmp lbl1

    lbl2:
    eob lbl3
    gpa "LoadLibraryExA","kernel32.dll"
    bp $RESULT
    esto

    lbl3:
    eob lbl4
    bc $RESULT
    rtu

    lbl4:
    eob lbl5
    findop eip,#66F7062000#
    bphws $RESULT,"x"
    run

    lbl5:
    eoe lbl6
    bphwc $RESULT
    asm eip,"TEST WORD PTR [ESI],8"
    sto
    mov count,eip
    mov [count],#7546#
    findop eip,#7439#
    mov count,$RESULT
    mov [count],#7424#
    findop eip,#7417#
    mov count,$RESULT
    mov [count],#7402#
    mov count,3
    run

    lbl6:
    cmp count,0
    je lbl7
    sub count,1
    esto
    jmp lbl6

    lbl7:
    eob lbl8
    findop eip,#EB03#
    bp $RESULT
    esto

    lbl8:
    eoe lbl9
    log $RESULT
    bc $RESULT
    bprm cbase,csize
    run

    lbl9:
    bpmc
    mov patchaddr,eip
    sub patchaddr,4
    mov [patchaddr],[esp]
    sub patchaddr,1
    mov [patchaddr],#68#
    cmt patchaddr,"OEP!,patch oep pass.please dump->fixdump."
    msg "Thank you for using my script!Note:if imprec found Invalid API then Cut it!"
    ret
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  8. #8
    psyCK0
    Guest

    [plugin] OllyScript v0.6

    God damn, thats an impressive script! You truly used every feature OllyScript has to offer! =)
    Will put it on my site as soon as it's up (that's what happens
    when you choose the cheapest hosting provider =) ).

    loveboom: Your idea about debugger hiding... Do you mean you want a script command that would hide/unhide debugger from IsDebuggerPresent calls?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  9. #9
    loveboom
    Guest

    [plugin] OllyScript v0.6

    yes!
    v0.61 have a bug eob/bphwc,you can test my obs script(pass in v0.6),thank you !
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  10. #10
    psyCK0
    Guest

    [plugin] OllyScript v0.6

    loveboom: please tell me more about the bug. When does it occur? What happens? Maybe you could write a small script that illustrates the problem?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  11. #11
    loveboom
    Guest

    [plugin] OllyScript v0.6

    test:win2kadv+ollydbg 1.1b

    lbl5:
    eoe lbl6
    bphwc $RESULT //bphwc pass
    asm eip,"TEST WORD PTR [ESI],8" //v0.61 stop here
    sto
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  12. #12
    psyCK0
    Guest

    [plugin] OllyScript v0.6

    OllyScript v0.62 posted.

    * Breakpoint bug fixed (again).
    * EFLAGS can be changed.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  13. #13
    Anonymous
    Guest

    [plugin] OllyScript v0.6

    hi psycko

    i am new to ollydbg and ollyscript... i did put ollyscript files on ollydbg directory..

    my question is how to i use the ollyscript and the text samples u hav on ur great site...

    more power and regards
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  14. #14
    Anonymous
    Guest

    [plugin] OllyScript v0.6

    Anonymous: read the readme :-)
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  15. #15
    Anonymous
    Guest

    [plugin] OllyScript v0.6

    hi,

    i did read the readme. and still not know how to use ollyscript.. ;-(

    anyways thanks

    regards
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. [plugin] OllyScript v0.8
    By psyCK0 in forum OllyScript Plugin
    Replies: 13
    Last Post: October 27th, 2004, 10:16
  2. [plugin] OllyScript v0.92
    By psyCK0 in forum OllyScript Plugin
    Replies: 13
    Last Post: July 17th, 2004, 09:28
  3. [plugin] OllyScript v0.9
    By psyCK0 in forum OllyScript Plugin
    Replies: 11
    Last Post: July 13th, 2004, 11:31
  4. [plugin] OllyScript v0.85
    By psyCK0 in forum OllyScript Plugin
    Replies: 3
    Last Post: May 21st, 2004, 03:13
  5. [plugin] OllyScript v0.7
    By psyCK0 in forum OllyScript Plugin
    Replies: 5
    Last Post: April 18th, 2004, 11:32

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •