Friday, 27 April 2012

Pulling out precious Lost/ Disappeared/ Evaporated Breakpoints from udd file for immunity and ollydbg

So I came across this problem when I reloaded the app in Immunity and all my breakpoints were gone. I went into Immunity folder, backed up the udd and bak files and had a look at them in Hxd. Turn out that my breakpoints were still in the udd file but for some weird reason, Immunity refused to load it up. Hence I scripted the following python script to extract the breakpoints and notes for me out of the annoying udd files. Code only tested with my udd file so you may wanna modify it a bit to get it to work.
Well this is a simple python script I scripted up to extract the breakpoints out of udd files.


 import binascii  
 import sys  
 if(len(sys.argv) < 2):  
      print "ExtractBP.py <name of extracted binary bp file>"  
 else:  
      f = open(sys.argv[1],'r')  
      a = f.read()  
      b = a.split("\nUs6")  
      print "Addresses\t-->\tNote(If presented)"  
      for c in b[1:]:  
           if c!='':  
                print binascii.hexlify((c[4:6]+chr(ord(c[6])+64)+c[7:8])[::-1])+"\t-->\t"+c[8:-1]  

No comments:

Post a Comment