@@ -391,6 +391,7 @@ WriteStr duint address, String^ text, bool replace
391391 - note : if you set line number to 0 that mean step to next line.
392392 - note : in new version we can use ads lib like some commands which return true or false
393393 like ( ads.isInArray , ads.isAddrBelongSection ) WILL explain later
394+ - note : when use ads lib parameter type will be ignored so u set it as str.
394395 - in parameter 1 : we can make any compare with variables ( > < = != ) (?) just for string compare and should use
395396 one of the comapre string which is :
396397 strb : if string begin with
@@ -491,7 +492,7 @@ GetArraySize varArrName, varname
491492```
492493### 14- Write2File:
493494write2File path,over_append(false/true),data (Can be array )
494-
495+ note: you can write array directly to file by write the array name see sample
495496
496497this Function used to write data to file and can write array to file too .
497498write2File path,over_append(false/true),data
@@ -510,7 +511,7 @@ write2File path,over_append(false/true),data
510511 -varx array,x[2]
511512 setx $x[0],test
512513 setx $x[1],again
513- Write2File "D:\t.txt",0,$x this will write all x aary to t.txt file
514+ Write2File "D:\t.txt",0,$x this will write all x array to t.txt file
514515
515516```
516517### 15- InputBox:
@@ -576,10 +577,13 @@ GetdesCallJmp variable, address of call
576577```
577578////////////////////////////////////////////////////////////////////////////
578579## ads library:
579-
580+ ads. ____ /// ___ _ mean command
580581this library is used for fast get info like exebase or Sctionbase .....
581582ads.Command
582583commands Like : exebase , modulebase,SectionSize, exefolderpath,exename,SectionBegin,SectionEnd,
584+ note : don't use nested command with ads lib which have brackets ( it is not support yet ) .
585+ like : ads.____ (ads.____ (),____ ) this not allow
586+ but : ads.____ (ads.exebase,____ ) this no problem
583587form :
584588```
585589ads.exebase get exe base
@@ -592,6 +596,14 @@ ads.SectionEnd(address) get End of the section by address ( any address from t
592596ads.GetAPIName(address) get API name from address
593597ads.GetArraySize($arrayName) get the array size
594598ads.ReadStr(address) get string at address
599+ ads.GetdesCallJmp(address of Call) get the destination of call or Jmp :Like
600+ 0000000140EA4000 call 0x01F50304
601+ ads.GetdesCallJmp(0000000140EA4000) >> return 0x01F50304
602+ ads.isInArray(text , arrayName) used with if command it return true or false if the text exist in the array.
603+ ads.isInArray(GetProcAddress,$x) or ads.isInArray($z,$x)
604+
605+ ads.isAddrBelongSection((addr,any addr of the section) used with if command it return true or false if this command belong to this
606+ section,
595607
596608```
597609 -varx str,IATCall,"E8????????90" //search for all call xxxx nop in text section
0 commit comments