Want to Join Us ?

you'll be able to discuss, share and send private messages.

Python WinLicense Easy settings IAT script

Discussion in 'Scripts' started by storm shadow, Jul 12, 2014.

Share This Page

  1. storm shadow

    Techbliss Owner Admin Ida Pro Expert Developer

    Code (Python):
    import idc
    import idaapi
     
    sEA = 0x0000000140001000
    eEA = sEA + 0x1
    ea = GetEntryPoint(1)
    ea2 = MaxEA
    idc.LoadDebugger("windbg", 1)
    LoadDebugger("windbg", 1)
    AddBptEx(0x0000000140001000, 0x1, BPT_BRK)
    SetDebuggerOptions(DOPT_BPT_MSGS)
    path = GetInputFilePath()
    args = ''
    sdir = ''
    StartDebugger(path, args, sdir)
    enable_extlang_python(True)
    MakeCode(0x0000000140001000)
    PauseProcess()
    enable_extlang_python(True)
    analyze_area(sEA, eEA)
    StopDebugger()
     
     
     
    print "##################################################\n" \
          "     What just HAppend your asked ?          \n" \
          "     While you blinked.                      \n" \
          "    IDA Python did the work for you          \n" \
          "                                               \n" \
          "      WinLicense Easy settings checker      \n" \
          "#############################################\n" \
          " Storm Shadow      \n" \
          "#############################################\n"
    print ("IAT = 0000000140001000")
    print ("WinLicense IAT is FOUND\n" \
          "IMPORT Breakpoint Adress into X64 By Mr Exodia")
    Jump(0x0000000140001000)
     


    Winlicense testfile Easy settings TIGER64 (Red)
    testfile attached
     

    Attached Files:

    roocoon and Rip Cord like this.
  2. roocoon

    Active Member

    Not many WL threads around so forgive me if I ask here.

    Winlicense 2.3.7 x64: Is it compatible with Win 10 and if not, can it be made to be?

    Protected plugins work fine in Win 7 SP1 and they even work fine in some Win 10 computers (Pro versions mostly).
    But in a number of computers they don't (Win 10 Home, Anniversary or Pro).

    It doesn't seem to be an antivirus problem (the program that runs the Winlicensed DLL is excluded).
    Probably Win 10 doesn't like some of the PE modifications WL does but no matter what I change or disable, makes no difference.

    Any idea if some set of options makes it compatible or am I wasting time looking for a solution?
    Thanks.
     
Top