OD自己留用的,想要的可以下1.10

------------------------------- ODbgScript plugin by hnhuqiong From OllyScript plugin v0.92 by SHaG OllyScript plugin v1.47 by Epsylon3 ------------------------------- 1. About OllyScript 2. Status 2.1 What's new ? 3. Documentation 3.1 Language 3.1.1 Reserved variables 3.1.2 Commands 3.2 Labels 3.3 Comments 3.4 Menus 3.5 Script Window 4. Integration with other plugins 5. Contact me 6. License and source code 7. Thanks! ------------------------------ 1. About ODbgScript ------------------- ODbgScript is a plugin for OllyDbg, which is, in our opinion, the best application-mode debugger out there. One of the best features of this debugger is the plugin architecture which allows users to extend its functionality. ODbgScript is a plugin meant to let you automate OllyDbg by writing scripts in an assembly-like language. Many tasks involve a lot of repetitive work just to get to some point in the debugged application. By using my plugin you can write a script once and for all. ------------------------------ 2. Status ---------------------------- v1.0 OllyScript becomes ODbgScript with the new GUI Window v0.9 OllyScript has now been downloaded more then 10000 times! That means more then 2Gb of raw scripting power flowing down the optic cable veins of the Internet. Not bad if you ask me! The development of the plugin has been a bit slow, I've got a job programming xray systems which has taken a lot of time. Sorry about that. 2.1 What's new? --------------- TODO: "FOLLOW const" to see any dword data usage (log every command which use it) A DLL call function Known Problems: MRU FROM Main Menu is static, so updated only on OllyDbg Restart 1.47 (06 Feb 2006) * Fixed GPI command * GPI CURRENTDIR returns path of debugged app. if empty 1.46 (28 Jan 2006) * GMEMI,GMI,GPI constants were strings in last versions, no more string quotes needed 1.45 (22 Jan 2006) + Added BPHWCALL to clear all hardware breakpoints * Fixed problems with leading 0 on reversed integers data in find commands * GMEMI and GMI constants are now in case insensitive * ASK Cancel button now pauses the script (was abort before) 1.44 (21 Jan 2006) + Enhanced GCMT to retrieve automatic comments or comments from analysis + Added ITOA and ATOI commands + Added GPI (getprocessinfo) command (see docs for info) * GPA now uses LoadLibraryEx to fix a Comctl32 double load 1.43 (13 Jan 2006) + Added GCMT to retrieve comment at specified addr * Fixed LM function 1.42 (07 Jan 2006) + Script Auto Reset if debugged app is restarted * Better script uppercase support * Problem with strings containing brackets 1.41 (21 Dec 2005) + Support for Integer operands in Float Operations (first operand need to be a float) + Added Edit Variable dialog for Float vars # log default type (pointers) is set to DW, was Float in 1.40 # enhanced focus with Ollydbg breakpoints 1.40 (20 Dec 2005) + Added Float variables, registers st(0) <-> st(7), and "in line" operations (+-*/) Float operations must contain float operands only Float syntax : mov flt, 5.0 # enhanced script window focus # fixed progress window data if script reloaded is smaller than old one 1.39 (20 Dec 2005) # Fixed Ask memory alloc problem # Always Re-focus to Script windows on "Step" from script. # Fixed cursor on ret/abort 1.38 (19 Dec 2005) + Added optional LOG command parameter to set log prefix, "" to disable + Log windows Auto Scroll + Added LC to clear main log window # LCLR command clears now the script log only # Script cursor is now normal # The Log Window is no more called with Script Window from main menu # Fixed bugs in mov command with pointers and buffers # Fixed bug with hex buffer variables containing bytes < 0x10 (no pb with constants) # (internal) added backup system for sources in post-link batch 1.35 (12 Dec 2005) + Added maxsize optional third parameter to mov Command + Added Clear Log Command + Enhanced Support of "dump" variables # fixed some log problems 1.34 (06 Dec 2005) + Added Mark for pointers in values column + Added Icons to Windows + Added Script Log Window # Fixed Manual Command when no debugged app or no script loaded. # Modified Load into Run in main and Disasm Menu # Added Version ressource, and cleaned source architecture 1.33 (06 Dec 2005) (Quick Fix version) # Some fixes # Added some constants in code # Fixed a big bug with string operands containing dword operator 1.32 (05 Dec 2005) + Execute Script Command Manually is now possible + LCLR command to clear log window # LOG is now highlighted and displays also message in OllyDbg Status bar # Updated this Documentation and added a neutral sample script # Abort Command enhancement 1.31 (05 Dec 2005) + Added support of operators in pointers ex: [eax+1] + Added support of operator + for strings + Decimal values are now supported, with the point (ex: 102.) + Variables Menu in Script Window to show/edit variables + Edit Script Command in Script Window Context Menu # Modified script window hotkeys, and added Pause # SCMPI & SCMP now compares only strings 1.30 (04 Dec 2005) + Added support of reg8 & reg16 registers (al,ah...dl,dh,ax,bx,cx,dx,bp,sp,si,di) + Added support of operators (+-*/&|^><), operators don't have priority, it's made from left to right ">" and "<" are shr and shl, "^" for xor, "&" for and, "|" for or. + Variables are now also declared by the destination of mov, if they don't exist + Added Result column + Value column keeps history of values + Enhanced Style of Script Window (current line, jumps, labels, same values) + Added KEY to send custom key shorcut to ollydbg (global KEY_DOWN) + Added TC to close and delete runtrace # Fix MRU when a filename contains a comma or { } 1.29 (03 Dec 2005) + Added LEN to get string length + Added REV to reverse dword bytes + Added HANDLE to find a window handle (like "Edit" Boxes) in debugged application # Script is kept on debugged program restart/change # Fixed FIND commands to search dwords variables # MRU on DISASM window is now the real one 1.28 (26 Nov 2005) + Added "Load Script" in DISASM Context Menu + Added "ALLOC size" and "FREE addr, size" to (un)allocate memory page # Modified Run Script to Load in Main MRU # MRU is no more showing full path of scripts # ASK now returns string len in $RESULT_1 1.27 (25 Nov 2005) + Added REF to get References to selected command + Added OPCODE command to get command bytes, text and size at specified address # Better comments handling # Better #inc handling (using also current script path) # PREOP now works in memory block, not only in code block 1.26 (24 Nov 2005) + Added Optionnal Start Address to "FINDMEM what [, StartAddr]" (to continue global search) + Added PREOP command to get previous command address before specified address 1.25 (22 Nov 2005) + Added FINDMEM to search into the whole memory + Added WRT (write a file) and WRTA (append) commands: WRT file, data + Added GMEMI function (Memory Block Informations) # GPA now returns 0 and continue if the API is not found, $RESULT_2 set to Proc name if found. # fixed OllyDbg focus problem # fixed path of created files when full path given # fixed FIND binary wildcards, broken in 1.24 1.24 (19 Nov 2005) + FIND and FINDOP supports strings and string vars arguments + MSG and MSGYN have now Cancel button to pause script (MSGYN returns 2 if canceled) # Script will now pause instead of stop when error is returned from commands + Script Breakpoints (to "debug" a script) + Added Real "Load Script" to start paused (script window) + Added Step/Resume and Hotkeys (script window) 1.23 (14 Nov 2005) + Enhanced String by Address support for commands (ex: gpa [nAddr],"KERNEL32.DLL") + lm, load Dump file to mem: lm, 0x401000, 0x100, "test.bin" (MetaCore) # fix the dm, lm, dmp, dpe 's