Skip to content
This repository was archived by the owner on Feb 28, 2022. It is now read-only.

Commit 2edd5ea

Browse files
authored
Update README.md
1 parent e983f95 commit 2edd5ea

File tree

1 file changed

+15
-3
lines changed

1 file changed

+15
-3
lines changed

README.md

Lines changed: 15 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -391,6 +391,7 @@ WriteStr duint address, String^ text, bool replace
391391
- note : if you set line number to 0 that mean step to next line.
392392
- note : in new version we can use ads lib like some commands which return true or false
393393
like ( ads.isInArray , ads.isAddrBelongSection ) WILL explain later
394+
- note : when use ads lib parameter type will be ignored so u set it as str.
394395
- in parameter 1 :we can make any compare with variables ( > < = != ) (?) just for string compare and should use
395396
one of the comapre string which is :
396397
strb : if string begin with
@@ -491,7 +492,7 @@ GetArraySize varArrName, varname
491492
```
492493
### 14- Write2File:
493494
write2File path,over_append(false/true),data (Can be array )
494-
495+
note: you can write array directly to file by write the array name see sample
495496

496497
this Function used to write data to file and can write array to file too .
497498
write2File path,over_append(false/true),data
@@ -510,7 +511,7 @@ write2File path,over_append(false/true),data
510511
-varx array,x[2]
511512
setx $x[0],test
512513
setx $x[1],again
513-
Write2File "D:\t.txt",0,$x this will write all x aary to t.txt file
514+
Write2File "D:\t.txt",0,$x this will write all x array to t.txt file
514515
515516
```
516517
### 15- InputBox:
@@ -576,10 +577,13 @@ GetdesCallJmp variable, address of call
576577
```
577578
////////////////////////////////////////////////////////////////////////////
578579
## ads library:
579-
580+
ads.____ /// ____ mean command
580581
this library is used for fast get info like exebase or Sctionbase .....
581582
ads.Command
582583
commands Like :exebase, modulebase,SectionSize, exefolderpath,exename,SectionBegin,SectionEnd,
584+
note : don't use nested command with ads lib which have brackets ( it is not support yet ) .
585+
like : ads.____ (ads.____(),____) this not allow
586+
but : ads.____(ads.exebase,____) this no problem
583587
form :
584588
```
585589
ads.exebase get exe base
@@ -592,6 +596,14 @@ ads.SectionEnd(address) get End of the section by address ( any address from t
592596
ads.GetAPIName(address) get API name from address
593597
ads.GetArraySize($arrayName) get the array size
594598
ads.ReadStr(address) get string at address
599+
ads.GetdesCallJmp(address of Call) get the destination of call or Jmp :Like
600+
0000000140EA4000 call 0x01F50304
601+
ads.GetdesCallJmp(0000000140EA4000) >> return 0x01F50304
602+
ads.isInArray(text , arrayName) used with if command it return true or false if the text exist in the array.
603+
ads.isInArray(GetProcAddress,$x) or ads.isInArray($z,$x)
604+
605+
ads.isAddrBelongSection((addr,any addr of the section) used with if command it return true or false if this command belong to this
606+
section,
595607
596608
```
597609
-varx str,IATCall,"E8????????90" //search for all call xxxx nop in text section

0 commit comments

Comments
 (0)