 |
| 스카이림 스페셜 에디션 |
 |
| 모드 적용하지 않은 상태의 'New Game' 메시지 |
 |
| 모드 적용한 상태의 'New Game' 메시지 |
 |
| 모드 적용 시 도전 과제 달성 불가 메시지 |
 |
| 모드 적용한 상태의 'New Game' 메시지 출력 코드 |
 |
| 모드 적용하지 않은 상태의 'New Game' 메시지 출력 코드 |
 |
| skyrimse.7FF63A489019 |
 |
| skyrimse.7FF63A6C1800 |
; skyrimse.7FF63A6C1800 00007FF63A6C1800 | PUSH RDI | 00007FF63A6C1802 | PUSH R14 | 00007FF63A6C1804 | SUB RSP, 28 | 00007FF63A6C1808 | XOR DIL, DIL | 00007FF63A6C180B | MOV R14, RCX | 00007FF63A6C180E | TEST DL, DL | 00007FF63A6C1810 | JE skyrimse.7FF63A6C1836 | 00007FF63A6C1812 | MOV RAX, QWORD PTR DS:[7FF63DDB4CB8] | 00007FF63A6C1819 | MOVZX EDI, BYTE PTR DS:[RAX+BD5] | 00007FF63A6C1820 | SHR DIL, 3 | 00007FF63A6C1824 | AND DIL, 1 | 00007FF63A6C1828 | JE skyrimse.7FF63A6C1836 | 00007FF63A6C182A | MOVZX EAX, DIL | 00007FF63A6C182E | ADD RSP, 28 | 00007FF63A6C1832 | POP R14 | 00007FF63A6C1834 | POP RDI | 00007FF63A6C1835 | RET | 00007FF63A6C1836 | MOV QWORD PTR SS:[RSP+40], RBX | 00007FF63A6C183B | MOV QWORD PTR SS:[RSP+48], RBP | 00007FF63A6C1840 | MOV EBP, DWORD PTR DS:[RCX+D70] | 00007FF63A6C1846 | MOV QWORD PTR SS:[RSP+20], R15 | 00007FF63A6C184B | MOV R15D, 1 | 00007FF63A6C1851 | MOV EBX, R15D | 00007FF63A6C1854 | CMP EBP, EBX | 00007FF63A6C1856 | JBE skyrimse.7FF63A6C18C6 | 00007FF63A6C1858 | MOV QWORD PTR SS:[RSP+50], RSI | 00007FF63A6C185D | NOP DWORD PTR DS:[RAX] | 00007FF63A6C1860 | TEST DIL, DIL | 00007FF63A6C1863 | JNE skyrimse.7FF63A6C18A6 | 00007FF63A6C1865 | TEST EBX, EBX | 00007FF63A6C1867 | JS skyrimse.7FF63A6C18A0 | 00007FF63A6C1869 | CMP EBX, FE | 00007FF63A6C186F | JA skyrimse.7FF63A6C18A0 | 00007FF63A6C1871 | MOVSXD RAX, EBX | 00007FF63A6C1874 | MOV RSI, QWORD PTR DS:[R14+RAX*8+D78] | 00007FF63A6C187C | TEST RSI, RSI | 00007FF63A6C187F | JE skyrimse.7FF63A6C18A0 | 00007FF63A6C1881 | MOV RCX, RSI | 00007FF63A6C1884 | CALL skyrimse.7FF63A46639D | 00007FF63A6C1889 | CMP AL, FF | 00007FF63A6C188B | JE skyrimse.7FF63A6C18A0 | 00007FF63A6C188D | LEA RCX, QWORD PTR DS:[RSI+58] | 00007FF63A6C1891 | CALL skyrimse.7FF63A4BCFF9 | 00007FF63A6C1896 | TEST AL, AL | 00007FF63A6C1898 | MOVZX EDI, DIL | 00007FF63A6C189C | CMOVE EDI, R15D | 00007FF63A6C18A0 | INC EBX | 00007FF63A6C18A2 | CMP EBX, EBP | 00007FF63A6C18A4 | JB skyrimse.7FF63A6C1860 | 00007FF63A6C18A6 | MOV RSI, QWORD PTR SS:[RSP+50] | 00007FF63A6C18AB | MOVZX EAX, DIL | 00007FF63A6C18AF | MOV RBP, QWORD PTR SS:[RSP+48] | 00007FF63A6C18B4 | MOV RBX, QWORD PTR SS:[RSP+40] | 00007FF63A6C18B9 | MOV R15, QWORD PTR SS:[RSP+20] | 00007FF63A6C18BE | ADD RSP, 28 | 00007FF63A6C18C2 | POP R14 | 00007FF63A6C18C4 | POP RDI | 00007FF63A6C18C5 | RET | 00007FF63A6C18C6 | MOVZX EAX, DIL | 00007FF63A6C18CA | JMP skyrimse.7FF63A6C18AF | 00007FF63A6C18CC | INT3 | 00007FF63A6C18CD | INT3 | 00007FF63A6C18CE | INT3 | 00007FF63A6C18CF | INT3 |
 |
| 모드 파일 이름 비교 대상 |
 |
| skyrimse.7FF63A6C1800 코드 조작 |
 |
| 모드 적용 한 상태에서 '도전 과제' 달성 |
 |
| 플러그인의 메뉴 |
#include "pluginsdk\_plugins.h" #ifdef _WIN64 #pragma comment(lib, "pluginsdk\\x64dbg.lib") #pragma comment(lib, "pluginsdk\\x64bridge.lib") // 추가 #else #pragma comment(lib, "pluginsdk\\x32dbg.lib") #pragma comment(lib, "pluginsdk\\x32bridge.lib") // 추가 #endif //_WIN64
#define MENU_TEST1 0
#define MENU_TEST2 1
#define MENU_DISASM_TEST1 2
#define MENU_DISASM_TEST2 3
#define MENU_DUMP_TEST1 4
#define MENU_DUMP_TEST2 5
#define MENU_STACK_TEST1 6
#define MENU_STACK_TEST2 7
//-------------------------------------------------------------------
extern "C" __declspec(dllexport) void CBMENUENTRY(CBTYPE cbType, PLUG_CB_MENUENTRY* info);
//-------------------------------------------------------------------
extern "C" __declspec(dllexport) void CBMENUENTRY(CBTYPE cbType, PLUG_CB_MENUENTRY* info)
{
switch (info->hEntry)
{
case MENU_TEST1:
break;
case MENU_TEST2:
break;
case MENU_DISASM_TEST1:
break;
case MENU_DISASM_TEST2:
break;
case MENU_DUMP_TEST1:
break;
case MENU_DUMP_TEST2:
break;
case MENU_STACK_TEST1:
break;
case MENU_STACK_TEST2:
break;
}
}
//-------------------------------------------------------------------
extern "C" __declspec(dllexport) void CBMENUENTRY(CBTYPE cbType, PLUG_CB_MENUENTRY* info)
{
SELECTIONDATA sel;
BASIC_INSTRUCTION_INFO basicinfo;
duint uiAddr = 0;
switch (info->hEntry)
{
case MENU_TEST1:
MessageBox(g_hwndDlg, L"Menu Test 1", L"BasicPlugin", MB_ICONINFORMATION | MB_OK);
break;
case MENU_TEST2:
if (DbgIsDebugging())
MessageBox(g_hwndDlg, L"Menu Test 2\r\n\r\n[ DbgIsDebugging() -> true ]", L"BasicPlugin", MB_ICONINFORMATION | MB_OK);
else
MessageBox(g_hwndDlg, L"Menu Test 2\r\n\r\n[ DbgIsDebugging() -> false ]", L"BasicPlugin", MB_ICONINFORMATION | MB_OK);
break;
case MENU_DISASM_TEST1:
GuiSelectionGet(GUI_DISASSEMBLY, &sel);
_plugin_logprintf("[BasicPlugin] Disasm [ START : 0x%p - END : 0x%p ]\n", sel.start, sel.end);
break;
case MENU_DISASM_TEST2:
GuiSelectionGet(GUI_DISASSEMBLY, &sel);
uiAddr = sel.start;
while (uiAddr <= sel.end) {
DbgDisasmFastAt(uiAddr, &basicinfo);
_plugin_logprintf("[BasicPlugin] [0x%p] : %s\n", uiAddr, basicinfo.instruction);
uiAddr += basicinfo.size;
}
break;
case MENU_DUMP_TEST1:
GuiSelectionGet(GUI_DUMP, &sel);
_plugin_logprintf("[BasicPlugin] Dump [ START : 0x%p - END : 0x%p ]\n", sel.start, sel.end);
break;
case MENU_DUMP_TEST2:
GuiSelectionGet(GUI_DUMP, &sel);
_plugin_logprintf("[BasicPlugin] Dump : ");
uiAddr = sel.start;
while (uiAddr <= sel.end) {
_plugin_logprintf("%02X", *(BYTE*)uiAddr);
uiAddr++;
}
_plugin_logprintf("\n");
break;
case MENU_STACK_TEST1:
case MENU_STACK_TEST2:
GuiSelectionGet(GUI_STACK, &sel);
_plugin_logprintf("[BasicPlugin] Stack [ START : 0x%p - END : 0x%p ]\n", sel.start, sel.end);
break;
}
}
| bool DbgIsDebugging(); |
| 현재 디버거가 디버깅 중인지 확인하는 함수. 디버깅 중일 땐 true 를 리턴, 아닐 땐 false 를 리턴. |
 |
| 디버깅 중이 아닐 때... false |
 |
| 디버깅 중일 때... true |
| bool GuiSelectionGet(int hWindow, SELECTIONDATA *selection); |
| 선택된 영역에 대한 주소 정보(시작 주소, 끝 주소)를 가져오는 함수 hWindow : 정보를 가져올 대상 창 지정 - GUI_DISASSEMBLY : Disasm 창 - GUI_DUMP : Dump 창 - GUI_STACK : Stack 창 selection : 주소 정보를 담을 구조체 - start 에 시작 주소, end 에 끝 주소가 담긴다. |
typedef struct
{
duint start;
duint end;
} SELECTIONDATA;
 |
| Disasm 창 팝업 메뉴의 'MENU_DISASM_TEST1' |
 |
| Disasm 창 팝업 메뉴의 'MENU_DISASM_TEST1' 실행 결과 |
| void DbgDisasmFastAt(duint addr, BASIC_INSTRUCTION_INFO *basicinfo); |
| 지정한 주소에 대한 디스어셈블 정보를 구하는 함수 addr : 디스어셈블 정보를 구할 주소 basicinfo : 디스어셈블 정보를 담을 구조체 |
typedef struct
{
DWORD type; //value|memory|addr
VALUE_INFO value; //immediat
MEMORY_INFO memory;
duint addr; //addrvalue (jumps + calls)
bool branch; //jumps/calls
bool call; //instruction is a call
int size;
char instruction[MAX_MNEMONIC_SIZE * 4];
} BASIC_INSTRUCTION_INFO;
 |
| Disasm 창 팝업 메뉴의 'MENU_DISASM_TEST2' |
 |
| Disasm 창 팝업 메뉴의 'MENU_DISASM_TEST2' 실행 결과 |
#include "pluginsdk\_plugins.h" #ifdef _WIN64 #pragma comment(lib, "pluginsdk\\x64dbg.lib") #else #pragma comment(lib, "pluginsdk\\x32dbg.lib") #endif //_WIN64
 |
| 프로젝트 속성 '출력 디렉터리, 중간디렉터리' 변경 |
 |
| '플랫폼'이 하위폴더가 되도록 변경 |
 |
| Win32, x64 프로젝트 동시에 빌드 |
 |
| Release 폴더가 생성됨 |
 |
| Release 폴더 안에 Win32, x64 폴더가 생성됨 |
@echo off copy .\Release\Win32\x64dbg_basic_plugin.dll C:\MyTools\x64dbg\release\x32\plugins\basic_plugin.dp32 copy .\Release\x64\x64dbg_basic_plugin.dll C:\MyTools\x64dbg\release\x64\plugins\basic_plugin.dp64 pause
HWND g_hwndDlg;
int g_hMenu;
int g_hMenuDisasm;
int g_hMenuDump;
int g_hMenuStack;
//-------------------------------------------------------------------
.
.
extern "C" __declspec(dllexport) void plugsetup(PLUG_SETUPSTRUCT* setupStruct);
.
.
//-------------------------------------------------------------------
__declspec(dllexport) void plugsetup(PLUG_SETUPSTRUCT* setupStruct)
{
g_hwndDlg = setupStruct->hwndDlg; // x64dbg 윈도우 핸들
g_hMenu = setupStruct->hMenu; // x64dbg 메인 메뉴 핸들
g_hMenuDisasm = setupStruct->hMenuDisasm; // x64dbg Disasm 창의 팝업메뉴 핸들
g_hMenuDump = setupStruct->hMenuDump; // x64dbg Dump 창의 팝업메뉴 핸들
g_hMenuStack = setupStruct->hMenuStack; // x64dbg Stack 창의 팝업메뉴 핸들
}
 |
| x64dbg UI 구성 |
| bool _plugin_menuaddentry(int hMenu, int hEntry, const char *title); |
| - hMenu : 플러그인 메뉴를 추가할 대상의 핸들 - hEntry : 플러그인 메뉴 ID 값 (이후 메뉴에 대한 실행코드 작성 시 사용됨) - title : 화면에 보여지는 메뉴 텍스트 |
.
.
#define MENU_TEST1 0
#define MENU_TEST2 1
#define MENU_DISASM_TEST1 2
#define MENU_DISASM_TEST2 3
#define MENU_DUMP_TEST1 4
#define MENU_DUMP_TEST2 5
#define MENU_STACK_TEST1 6
#define MENU_STACK_TEST2 7
.
.
__declspec(dllexport) void plugsetup(PLUG_SETUPSTRUCT* setupStruct)
{
.
.
.
// 메인 메뉴
_plugin_menuaddentry(g_hMenu, MENU_TEST1, "Menu Test 1");
_plugin_menuaddseparator(g_hMenu); // 메뉴 분리선
_plugin_menuaddentry(g_hMenu, MENU_TEST2, "Menu Test 2");
// 디스어셈블 창 메뉴
_plugin_menuaddentry(g_hMenuDisasm, MENU_DISASM_TEST1, "Menu Disasm Test 1");
_plugin_menuaddseparator(g_hMenuDisasm); // 메뉴 분리선
_plugin_menuaddentry(g_hMenuDisasm, MENU_DISASM_TEST2, "Menu Disasm Test 2");
// 덤프 창 메뉴
_plugin_menuaddentry(g_hMenuDump, MENU_DUMP_TEST1, "Menu Dump Test 1");
_plugin_menuaddentry(g_hMenuDump, MENU_DUMP_TEST2, "Menu Dump Test 2");
// 스택 창 메뉴
_plugin_menuaddentry(g_hMenuStack, MENU_STACK_TEST1, "Menu Stack Test 1");
_plugin_menuaddentry(g_hMenuStack, MENU_STACK_TEST2, "Menu Stack Test 2");
}
//-------------------------------------------------------------------
.
.
extern "C" __declspec(dllexport) bool plugstop(void);
.
.
//-------------------------------------------------------------------
__declspec(dllexport) bool plugstop(void)
{
// 메뉴에 설정한 내용들 정리
_plugin_menuclear(g_hMenu);
_plugin_menuclear(g_hMenuDisasm);
_plugin_menuclear(g_hMenuDump);
_plugin_menuclear(g_hMenuStack);
return true;
}
// plugin.cpp
//
//-------------------------------------------------------------------
// basic plugin [ x64dbg plugin ]
//-------------------------------------------------------------------
#include <Windows.h>
#include "pluginsdk\_plugins.h"
#ifdef _WIN64
#pragma comment(lib, "pluginsdk\\x64dbg.lib")
#else
#pragma comment(lib, "pluginsdk\\x32dbg.lib")
#endif //_WIN64
//-------------------------------------------------------------------
#define plugin_name "BasicPlugin"
#define plugin_version 1
#define MENU_TEST1 0
#define MENU_TEST2 1
#define MENU_DISASM_TEST1 2
#define MENU_DISASM_TEST2 3
#define MENU_DUMP_TEST1 4
#define MENU_DUMP_TEST2 5
#define MENU_STACK_TEST1 6
#define MENU_STACK_TEST2 7
int g_iPluginHandle;
HWND g_hwndDlg;
int g_hMenu;
int g_hMenuDisasm;
int g_hMenuDump;
int g_hMenuStack;
//-------------------------------------------------------------------
extern "C" __declspec(dllexport) bool pluginit(PLUG_INITSTRUCT* initStruct);
extern "C" __declspec(dllexport) void plugsetup(PLUG_SETUPSTRUCT* setupStruct);
extern "C" __declspec(dllexport) bool plugstop(void);
//-------------------------------------------------------------------
__declspec(dllexport) bool pluginit(PLUG_INITSTRUCT* initStruct)
{
initStruct->sdkVersion = PLUG_SDKVERSION;
initStruct->pluginVersion = plugin_version;
strcpy_s(initStruct->pluginName, 256, plugin_name);
g_iPluginHandle = initStruct->pluginHandle;
_plugin_logprintf("[BasicPlugin] pluginHandle : %d\n", g_iPluginHandle);
return true;
}
__declspec(dllexport) void plugsetup(PLUG_SETUPSTRUCT* setupStruct)
{
g_hwndDlg = setupStruct->hwndDlg;
g_hMenu = setupStruct->hMenu;
g_hMenuDisasm = setupStruct->hMenuDisasm;
g_hMenuDump = setupStruct->hMenuDump;
g_hMenuStack = setupStruct->hMenuStack;
// 메인 메뉴
_plugin_menuaddentry(g_hMenu, MENU_TEST1, "Menu Test 1");
_plugin_menuaddseparator(g_hMenu);
_plugin_menuaddentry(g_hMenu, MENU_TEST2, "Menu Test 2");
// 디스어셈블 창 메뉴
_plugin_menuaddentry(g_hMenuDisasm, MENU_DISASM_TEST1, "Menu Disasm Test 1");
_plugin_menuaddseparator(g_hMenuDisasm);
_plugin_menuaddentry(g_hMenuDisasm, MENU_DISASM_TEST2, "Menu Disasm Test 2");
// 덤프 창 메뉴
_plugin_menuaddentry(g_hMenuDump, MENU_DUMP_TEST1, "Menu Dump Test 1");
_plugin_menuaddentry(g_hMenuDump, MENU_DUMP_TEST2, "Menu Dump Test 2");
// 스택 창 메뉴
_plugin_menuaddentry(g_hMenuStack, MENU_STACK_TEST1, "Menu Stack Test 1");
_plugin_menuaddentry(g_hMenuStack, MENU_STACK_TEST2, "Menu Stack Test 2");
}
__declspec(dllexport) bool plugstop(void)
{
_plugin_menuclear(g_hMenu);
_plugin_menuclear(g_hMenuDisasm);
_plugin_menuclear(g_hMenuDump);
_plugin_menuclear(g_hMenuStack);
return true;
}
//-------------------------------------------------------------------
// DllMain
//-------------------------------------------------------------------
BOOL WINAPI DllMain(HINSTANCE hInst, DWORD dwReason, LPVOID lpReserved)
{
return TRUE;
}
 |
| '메인 메뉴' 의 플러그인 메뉴 |
 |
| 'Disasm 창 팝업 메뉴' 의 플러그인 메뉴 |
 |
| 'Dump 창 팝업 메뉴' 의 플러그인 메뉴 |
 |
| 'Stack 창 팝업 메뉴' 의 플러그인 메뉴 |
 |
| Delphi / C++ Builder STARTER EDTION 무료 프로모션 |
on 오후 2:12 in 델파이, 무료, 스타터 에디션, C++ 빌더, C++ Builder, Delphi, programming, STARTER EDITION
 |
| Visual Studio 프로젝트 생성 단계 #1 |
 |
| Visual Studio 프로젝트 생성 단계 #2 |
 |
| Visual Studio 프로젝트 생성 단계 #3 |
 |
| XP 지원하도록 프로젝트 속성 변경 |
 |
| x64dbg 압축파일의 플러그인 SDK 폴더 |
 |
| 프로젝트 폴더에 플러그인 SDK 폴더 복사 |
 |
| 플러그인 소스파일 작성 |
// plugin.cpp
//
//-------------------------------------------------------------------
// basic plugin [ x64dbg plugin ]
//-------------------------------------------------------------------
#include <Windows.h>
//-------------------------------------------------------------------
// DllMain
//-------------------------------------------------------------------
BOOL WINAPI DllMain(HINSTANCE hInst, DWORD dwReason, LPVOID lpReserved)
{
return TRUE;
}
#include "pluginsdk\_plugins.h" #pragma comment(lib, "pluginsdk\\x32dbg.lib")
//------------------------------------------------------------------- #define plugin_name "BasicPlugin" #define plugin_version 1
int g_iPluginHandle;
//-------------------------------------------------------------------
extern "C" __declspec(dllexport) bool pluginit(PLUG_INITSTRUCT* initStruct);
//-------------------------------------------------------------------
__declspec(dllexport) bool pluginit(PLUG_INITSTRUCT* initStruct)
{
initStruct->sdkVersion = PLUG_SDKVERSION;
initStruct->pluginVersion = plugin_version;
strcpy_s(initStruct->pluginName, 256, plugin_name);
g_iPluginHandle = initStruct->pluginHandle;
return true;
}
// plugin.cpp
//
//-------------------------------------------------------------------
// basic plugin [ x64dbg plugin ]
//-------------------------------------------------------------------
#include <Windows.h>
#include "pluginsdk\_plugins.h"
#pragma comment(lib, "pluginsdk\\x32dbg.lib")
//-------------------------------------------------------------------
#define plugin_name "BasicPlugin"
#define plugin_version 1
int g_iPluginHandle;
//-------------------------------------------------------------------
extern "C" __declspec(dllexport) bool pluginit(PLUG_INITSTRUCT* initStruct);
//-------------------------------------------------------------------
__declspec(dllexport) bool pluginit(PLUG_INITSTRUCT* initStruct)
{
initStruct->sdkVersion = PLUG_SDKVERSION;
initStruct->pluginVersion = plugin_version;
strcpy_s(initStruct->pluginName, 256, plugin_name);
g_iPluginHandle = initStruct->pluginHandle;
return true;
}
//-------------------------------------------------------------------
// DllMain
//-------------------------------------------------------------------
BOOL WINAPI DllMain(HINSTANCE hInst, DWORD dwReason, LPVOID lpReserved)
{
return TRUE;
}
 |
| 플러그인이 로딩되었다는 로그 |
