PDA

View Full Version : script under asprotect


Anonymous
August 1st, 2004, 03:02
ollyscript can't find the correct byte sequence under asprotect 131, can't log $RESULT, and incorrect display of the indirect value--> log [eip].

psyCK0
August 2nd, 2004, 00:36
Please mail me more info about the problem and I will check if it's a OSC bug.

britedream
August 2nd, 2004, 10:55
hi psyCk0,
please try this in any target:

set bp and run the following script:
run
eob fx

fx:
bc eip
exec
mov eax, dword ptr ss:[esp-18]
ende
ret

it will loop for ever.

now for byte sequence just find a target protected by latest asprotect and try to find some opcode inside asprotect, in olly you will find it but not by olly script, if you try to display the opcode under eip by logging, you will get the wrong one.

thanks psyck0

psyCK0
August 4th, 2004, 02:14
Will check ASAP.
Much at work atm...

britedream
August 25th, 2004, 02:04
Thanks psycko!

I did solve the problem of looping when exec is used.

regards.