)You mean that only one byte is loaded in variable? Or in memory too? I was writing one script that decrypts Krypton0.5 pices of code that are encrypted. There I needed ROL and ROR opcodes, also that could work with bytes operands. I needed to decrypt byte-by-byte that pice of code. So what I need is:
- move one byte to variable
- ROL or ROR it
- place decrypted byte instead.
If you can make this working, that would be great. Maybe it can be done with present plugin, but that would be lot of working around.
Next thing that I would like to see. You know this:
gpa "SomeApiNameHere","SomeDllNameHere"
Can you make that script can read api and dll names from ASCII strings in exe? Like:
gpa x,y
where x and y would be addresses of ASCII strings terminated with zero, hardcoded in exe. I was unpacking beria and this would be usefull to rebuild thunks.
Thanks.
O yeah, I din't find manuall in your new plugin. Did I mised it? It would be nice to see new feature explained.