Ricardo Narvaja
January 25th, 2005, 22:59
I donīt know if ollyscript continue or not, but is the more important plugin of ollydbg for me, and for this reason i suggest to the author this very useful commands.
examples
004013A9 E8 EA9F0600 CALL dump2.0046B398
004013AE 5A POP EDX
COMMANDS
1)NEXT
NEXT 4013A9
$RESULT=4013AE
return the adress of the next instruction
2)DIS
DIS 4013AE
$RESULT="POP EDX"
return the text of the assembly line
3)change of view from olyscript
GEXPL 401000
similar to GOTO EXPRESSION IN CPU LIST = 401000
GEXPD 401000
similar to GOTO EXPRESSION IN THE DUMP=401000
VIEWLOG
similar to VIEW LOG
VIEW MEMORY (EXECUTABLES-TRACE INTO etc)
change the view in OLLYDBG this are useful when the program ask you with a MSGYN, for make a desicion and you need view some value in the dump or in the cpu list, or in a different view and if you can change from the script is perfect.
FINDTO 401000 500000 #FF#
other find but limited from 401000 to 500000 for example, there are tasks with the FIND searching in all memory, the script crash for look in not necesary memory sections.
The posibility of mov, compare and work with bytes and words, not only dwords are very useful.
If the author read and think is possible add any command of this to ollyscript, will be a great help for us.
Ricardo Narvaja
examples
004013A9 E8 EA9F0600 CALL dump2.0046B398
004013AE 5A POP EDX
COMMANDS
1)NEXT
NEXT 4013A9
$RESULT=4013AE
return the adress of the next instruction
2)DIS
DIS 4013AE
$RESULT="POP EDX"
return the text of the assembly line
3)change of view from olyscript
GEXPL 401000
similar to GOTO EXPRESSION IN CPU LIST = 401000
GEXPD 401000
similar to GOTO EXPRESSION IN THE DUMP=401000
VIEWLOG
similar to VIEW LOG
VIEW MEMORY (EXECUTABLES-TRACE INTO etc)
change the view in OLLYDBG this are useful when the program ask you with a MSGYN, for make a desicion and you need view some value in the dump or in the cpu list, or in a different view and if you can change from the script is perfect.
FINDTO 401000 500000 #FF#
other find but limited from 401000 to 500000 for example, there are tasks with the FIND searching in all memory, the script crash for look in not necesary memory sections.
The posibility of mov, compare and work with bytes and words, not only dwords are very useful.
If the author read and think is possible add any command of this to ollyscript, will be a great help for us.
Ricardo Narvaja