TitanScript

[SmilingWolf]

I have seen the commit before ScyllaHide was released hehe

I think I'll have another go at porting my script tomorrow

Edited April 12, 2014 by SmilingWolf

[BangGun]

Hi everyone,

 

Thank you for all nice app. I tried to Debug everything OK but seem that it not patch the original xxx.exe !

 

How I can get a xxx.exe after running TitanScriptGui ?

 

If TitanScript can be a plugins for x64dbg like OllyDbg and OllyScripts ?

 

Thank you for your help.

[mrexodia]

@BangGun: I have no clue what you're talking about with the patch thing.

But to answer to your x64_dbg question: x64_dbg has it's own scripting language. See the script tab. If you have command requests, feel free to add them in http://issues.x64dbg.com. We will implement them as soon as possible. If you have questions about commands that the help (http://help.x64dbg.com) cannot answer, feel free to create a topic in the x64_dbg forum here or send me a pm.

Greetings

[GIV]

Fixed up some bugs with exec command that caused following BPs not to be hit. and some other things. Attached rar includes TS v004

 

attached is a working script for unpacking/dumping/auto-fixing Armadillo 8.60 + DebugBlocker. (no nanomites, no iat elim, no code-splicing. )

Tested on Win7 32bit & XP 32bit

 

This is more complex test and you should see how easy it is to fix up your own scripts to work with TS without the need to run them in Olly.

Uses EXEC/ENDE, BP, BPRM, CALL, EVAL...., and special commands PastePEHeader to paste original PE Header and DNF to dump + autofix. These two commands are the only things that were added. Without, this script is 100% the same as it runs in Olly

I think the script does not work as it should...

 The OEP is wrong.

From your script result (RVA):

000073AC

The corect one is:

0000739D

A nice feature will be a wider box because the text is crowded and a step by step execution button or key would be nice also.

yyyyy.rar