PDA

View Full Version : findcmd problem


Noxerus
April 20th, 2008, 17:25
I'm having a strange problem with findcmd in ODbgScript 1.64.
I want to find the closest appearance of a certain asm command after eip, so I use the following script:
Code:
findcmd eip, "push 100"
gref 1
msg $RESULT

The problem is that the result I get appears much before eip...
Investigating this problem, I opened the references window and found that Olly has searched for my command in a large block which has eip at its center. When I call "gref 1", instead of getting back the address of the first instance of "push 100" after eip, I get the first instance of "push 100" in the current memory block.
What can I do to fix this?

Thanks in advance.

Externalist
April 20th, 2008, 23:01
Try using ODbgScript 1.65.4, or use findop instead...?

Noxerus
April 21st, 2008, 12:35
Thank you for your suggestion, but it's still not working, even after upgrading to the latest version of ODbgScript... and findop is not a good solution (except for this specific case) because it does not really support approximate commands. Any other suggestions?
By the way, why aren't any versions newer than 1.64 uploaded to the official SourceForge site?

Epsylon3
December 22nd, 2008, 00:33
1.65.4 is a chinese version, and i dont have sources...