View Single Post
  #10  
Old 07-13-2014, 02:35
Storm Shadow's Avatar
Storm Shadow Storm Shadow is offline
Family
 
Join Date: Jun 2014
Posts: 283
Rept. Given: 186
Rept. Rcvd 192 Times in 79 Posts
Thanks Given: 144
Thanks Rcvd at 255 Times in 98 Posts
Storm Shadow Reputation: 100-199 Storm Shadow Reputation: 100-199
Here you go @ahmadmansoor

PHP Code:
import idc
import idaapi

sEA 
= 0x0000000140001000
eEA 
= sEA + 0x1
ea 
= GetEntryPoint(1)
ea2 = MaxEA
idc
.LoadDebugger("windbg", 1)
LoadDebugger("windbg", 1)
AddBptEx(0x0000000140001000, 0x1, BPT_BRK)
SetDebuggerOptions(DOPT_BPT_MSGS)
path = GetInputFilePath()
args = ''
sdir = ''
StartDebugger(path, args, sdir)
enable_extlang_python(True)
MakeCode(0x0000000140001000)
PauseProcess()
enable_extlang_python(True)
StopDebugger()



print 
"##################################################\n" \
      
"        What just HAppend your asked ?            \n" \
      
"        While you blinked.                        \n" \
      
"       IDA Python did the work for you            \n" \
      
"                                                  \n" \
      
"         WinLicense Easy settings checker       \n" \
      
"#############################################\n" \
      
" Storm Shadow      \n" \
      
"#############################################\n"
print ("IAT = 0000000140001000")
print (
"WinLicense IAT is FOUND\n" \
      
"IMPORT Breakpoint Adress into X64 By Mr Exodia")
Jump(0x0000000140001000) 
Code proberly dosent show correct in the forum
if error get it here.(RAW)
http://pastie.org/9381756

check if it produces code correct, if correct. procced to ScullaHide
Winlicense testfile Easy settings TIGER64 (Red)

UnpackmeWLx64.zip

Last edited by Storm Shadow; 07-13-2014 at 02:43.
Reply With Quote
The Following 2 Users Gave Reputation+1 to Storm Shadow For This Useful Post:
ahmadmansoor (07-13-2014), DMichael (07-13-2014)
The Following User Says Thank You to Storm Shadow For This Useful Post: