PDA

View Full Version : OLLYSCRYPT COMMAND SUGGESTIONS


Ricardo Narvaja
January 25th, 2005, 22:59
I donīt know if ollyscript continue or not, but is the more important plugin of ollydbg for me, and for this reason i suggest to the author this very useful commands.

examples

004013A9 E8 EA9F0600 CALL dump2.0046B398
004013AE 5A POP EDX

COMMANDS

1)NEXT


NEXT 4013A9

$RESULT=4013AE

return the adress of the next instruction

2)DIS

DIS 4013AE

$RESULT="POP EDX"

return the text of the assembly line


3)change of view from olyscript

GEXPL 401000

similar to GOTO EXPRESSION IN CPU LIST = 401000

GEXPD 401000

similar to GOTO EXPRESSION IN THE DUMP=401000

VIEWLOG

similar to VIEW LOG

VIEW MEMORY (EXECUTABLES-TRACE INTO etc)

change the view in OLLYDBG this are useful when the program ask you with a MSGYN, for make a desicion and you need view some value in the dump or in the cpu list, or in a different view and if you can change from the script is perfect.

FINDTO 401000 500000 #FF#

other find but limited from 401000 to 500000 for example, there are tasks with the FIND searching in all memory, the script crash for look in not necesary memory sections.

The posibility of mov, compare and work with bytes and words, not only dwords are very useful.

If the author read and think is possible add any command of this to ollyscript, will be a great help for us.

Ricardo Narvaja

Ricardo Narvaja
January 25th, 2005, 23:01
ah i remember

the possibility of use [ ] in all commands

mov [ebp-4],eax

cmp [ebp-4],eax

there are commands than accept but others not.

Ricardo Narvaja

psyCK0
March 8th, 2005, 11:30
If any of you wonder... I haven't died yet. =)
There WILL be a new version of OSC ... eventually. Then the requested feature will be added.

Ricardo Narvaja
March 9th, 2005, 04:04
jeje thanks, vey good you not die.

Regards
Ricardo Narvaja