Log in

View Full Version : how to get string data reference


cracklion
June 13th, 2005, 06:33
i use ollydbg 1.10 to cracking TARGET NAME DELETED but there are no string data reference.

Admiral
June 13th, 2005, 11:14


There's no guarantee that a given app will reference (or even have) any string resources, but in this case given the very brief 'explanation' of the problem, I'd conjecture that you're just not looking in the right place.

You may want to try doing a full memory search (ASCII and Unicode) at WinMain break for a string you know that features in the program. If you can't think of any, a quick scan through the memory dump of the RSRC section should reveal if the app has any string resources.

Some functions to look out for are User32.LoadStringA and Kernel32.LoadResource, however a sure way to make sure a resource isn't being used is to put a memory access breakpoint on it. If that doesn't trigger, then your string is coming from somewhere else. If it does trigger, you're gonna have to play a little game of cat and mouse to see where the string is ultimately going.

seven
June 13th, 2005, 14:24
dump proggy

uze peditor to set text chart flag 2 E0000020

could help ,who knowz

Knight
June 13th, 2005, 23:21
I don't know what for u need that string, but if only your aim is to crack that program text string might be not necessary. I meen there are other techniques to crack program (look for such API functions like GetWindowTextA, GetDlgTextA... ). Also all important strings might be encrypted to get rid of such a crackers like u

saber
June 17th, 2005, 20:58
Quote:
[Originally Posted by Knight]I don't know what for u need that string, but if only your aim is to crack that program text string might be not necessary. I meen there are other techniques to crack program (look for such API functions like GetWindowTextA, GetDlgTextA... ). Also all important strings might be encrypted to get rid of such a crackers like u


Dude how can i put breakpoints like GetWindowTextA and freeEnvironmentstringsA in olly?? Since i am not conformtable with softice i would like to know if same work can be done by olly

blabberer
June 18th, 2005, 03:01
well ollydbg is more than sufficent to work on disassembling and debugging ring 3 application what ever softice can do in r3 olly can do it better and also you can run fifteen olly at the same time while you can run only one softice and also hear your favorite music while looking at all those 15 olly instance

it is incredibly easy to use all you need is your mouse having a facility to right click

get the help file open and read through it some two, three times while you have a simple application open in olly the best key to use in ollydbg is f7 noone can hide anything if you believe that f7 key of course you need to read read and read a lot to know what can happen if one sees a code like:

pushfd
or [esp],100
popfd
nop
jmp somewhere

and no one here willl be answering your prebasic questions in educational parlance your question ranks at pre kindergarden pre playschool level how to put a bp on GetWindowText ??

how about pressing ctrl+n and looking if it exists in your module and hitting f2 on all referance ??

or how about finding cmdbar plugin and type bp GetWindowText and hit enter ??(on nt systems)

how about giving the help file a through read and getting yourself familiarised with all those global shortcuts ??

how about actually trying it out on your own before asking how to put break point

how about ??
how about ??
how about ???

sight i some time feel JMI must be having headaches when he wakes up and have to type hey dude read faq google "ollydbg + breakpoint " of course without quotes :eek

JMI
June 18th, 2005, 03:29
Ah! Someone is beginning to understand.

Regards,

SiGiNT
June 18th, 2005, 13:36
I don't like to redirect people from this forum since this one is the best once you get to know your tools, BUT you may find a lot of info at this place -
http://ollydbg.win32asmcommunity.net/

SiGiNT

JMI
June 18th, 2005, 14:04
Gasp!

I am shocked to learn that there might be places which are actually devoted to the use and development of particular reversing tools. What a clever idea. What will they thing of next? And will anyone bother to check and see if they exist? .... Nah. That's way too hard.

Regards,