View Single Post
  #10  
Old 07-13-2014, 02:35
Storm Shadow's Avatar
Storm Shadow Storm Shadow is offline
Family
 
Join Date: Jun 2014
Posts: 281
Rept. Given: 186
Rept. Rcvd 191 Times in 78 Posts
Thanks Given: 138
Thanks Rcvd at 245 Times in 97 Posts
Storm Shadow Reputation: 100-199 Storm Shadow Reputation: 100-199
Here you go @ahmadmansoor

PHP Code:
import idc
import idaapi

sEA 
0x0000000140001000
eEA 
sEA 0x1
ea 
GetEntryPoint(1)
ea2 MaxEA
idc
.LoadDebugger("windbg"1)
LoadDebugger("windbg"1)
AddBptEx(0x00000001400010000x1BPT_BRK)
SetDebuggerOptions(DOPT_BPT_MSGS)
path GetInputFilePath()
args ''
sdir ''
StartDebugger(pathargssdir)
enable_extlang_python(True)
MakeCode(0x0000000140001000)
PauseProcess()
enable_extlang_python(True)
StopDebugger()



print 
"##################################################\n" \
      
"        What just HAppend your asked ?            \n" \
      
"        While you blinked.                        \n" \
      
"       IDA Python did the work for you            \n" \
      
"                                                  \n" \
      
"         WinLicense Easy settings checker       \n" \
      
"#############################################\n" \
      
" Storm Shadow      \n" \
      
"#############################################\n"
print ("IAT = 0000000140001000")
print (
"WinLicense IAT is FOUND\n" \
      
"IMPORT Breakpoint Adress into X64 By Mr Exodia")
Jump(0x0000000140001000
Code proberly dosent show correct in the forum
if error get it here.(RAW)
http://pastie.org/9381756

check if it produces code correct, if correct. procced to ScullaHide
Winlicense testfile Easy settings TIGER64 (Red)

UnpackmeWLx64.zip

Last edited by Storm Shadow; 07-13-2014 at 02:43.
Reply With Quote
The Following 2 Users Gave Reputation+1 to Storm Shadow For This Useful Post:
ahmadmansoor (07-13-2014), DMichael (07-13-2014)
The Following User Says Thank You to Storm Shadow For This Useful Post:
Indigo (07-19-2019)