| # taken from https://gist.github.com/deeso/44e6dc40ea7a4d77fc458742eb96f4c1 | |
| from x64dbgpy import pluginsdk | |
| import x64dbgpy.pluginsdk._scriptapi as script | |
| def loadBytes(va, count): | |
| return list(script.Read(va, count)) | |
| def disasm_at(addr): |
This Python script is designed to handle JMP deobfuscation.
It will sqash unneeded unconditional jmps and create new blocks, relocates blocks of code, adjusts relative addresses, and aligns blocks with padding.
Inspired by http://hooked-on-mnemonics.blogspot.com/2012/10/simple-deobfuscation-of-code.html
| #!/usr/bin/env python | |
| import socket, getopt, sys, os.path | |
| SMTP_PORT = 25 | |
| BUFFER_SIZE = 1024 | |
| OK_STATUS = 252 | |
| APP_NAME = "smtpenum" | |
| VERSION = "1.0.0" |
| #include <stdio.h> | |
| #include <stdint.h> | |
| #include <Windows.h> | |
| #include <iostream> | |
| void __cdecl PrintNumber(int i) | |
| { | |
| printf("%d ", i); | |
| } |
| export CFLAGS="-I/usr/local/ssl/include -L/usr/local/ssl/lib -Wl,-rpath=/usr/local/ssl/lib" | |
| CFLAGS="$CFLAGS" CXXFLAGS="$CFLAGS" ./configure \ | |
| --pkg-config=pkg-config \ | |
| --prefix=$PWD/../ffmpeg-win32-sdk \ | |
| --enable-static \ | |
| --enable-shared \ | |
| --enable-small \ | |
| --disable-symver \ | |
| --disable-debug \ | |
| --disable-doc \ |
| #include "plugin.h" | |
| #include "common.h" | |
| #include "CTimer.h" | |
| #include "InputManager.h" | |
| #include "CAnimManager.h" | |
| using namespace plugin; | |
| class GTA3Animation { | |
| public: |
| DEFINE OBJECTS 204 | |
| DEFINE OBJECT (noname) | |
| DEFINE OBJECT DTN_STADDOORA // Object number -1 | |
| DEFINE OBJECT DTN_STADDOORB // Object number -2 | |
| DEFINE OBJECT DTHOTRING_A // Object number -3 | |
| DEFINE OBJECT BRIBE // Object number -4 | |
| DEFINE OBJECT CI_GATESCLOSED // Object number -5 | |
| DEFINE OBJECT CI_BACKGATECLOSE // Object number -6 | |
| DEFINE OBJECT INFO // Object number -7 |
| bool CClientGame::GetLocalPlayerTaskNames(SString& strConcatenatedTaskNames, bool bPrimary) | |
| { | |
| CClientPed* pLocalPlayer = static_cast<CClientPed*>(GetLocalPlayer()); | |
| if (pLocalPlayer) | |
| { | |
| int cTaskTypes = bPrimary ? 5 : 6; | |
| for (int iTaskType = 0; iTaskType < cTaskTypes; iTaskType++) | |
| { | |
| std::vector<SString> taskHierarchy; | |
| if (CStaticFunctionDefinitions::GetPedTask(*pLocalPlayer, bPrimary, iTaskType, taskHierarchy)) |
| // GTA_test.cpp : Defines the entry point for the console application. | |
| // | |
| #include "stdafx.h" | |
| #include <cstdio> | |
| #include <cstdint> | |
| class Player | |
| { | |
| public: |
| #include "stdafx.h" | |
| #include <cstdio> | |
| #include <cstdint> | |
| int main() | |
| { | |
| int amount = 9000; | |
| std::printf("Address of amount: %p\nValue of amount in decimal: %d\nValue of amount in hexadecimal: %#.8x\n", &amount, amount, amount); | |
| std::uint8_t* amountAddress = reinterpret_cast<std::uint8_t*> (&amount); |