Log in

View Full Version : Altering ASCII text string


briankai
May 9th, 2004, 18:05
Hi guys, new to the board and the program, and I'm having a bit of a problem.

I need to change one of the text strings I found, but I have no idea how to do so. I attempted to convert the hex value, but it doesn't seem to be working.

This is what I've got:

00402438 BF FC9B4000 MOV EDI,eyes.00409BFC ; ASCII "VOICE\"

Binary value: BF FC 9B 40 00

I need to change this so that the ASCII will be "\VOICE\"

Is this possible, and what do I need to do it?

Kai

ShadowDark
May 9th, 2004, 22:38
to change the string u can follow in dump the string and change in it... to save the changes if the dump adress is...

00403220 47 6F 6F 64 20 57 6F 72 Good Wor
00403228 6B k

and if u want for example change it to other string like this other...

00403220 42 61 64 20 57 6F 72 6B Bad Work
00403228 20

to save it u need to go at 403220 adreess pushing CTRL + G (search adress ¬¬...) and enter 403220...

0040321F 0042 61 ADD BYTE PTR DS:[EDX+61],AL
00403222 64:2057 6F AND BYTE PTR FS:[EDI+6F],DL
00403226 72 6B JB SHORT ByteKeyg.00403293
00403228 2000 AND BYTE PTR DS:[EAX],AL

look the bytes... 42 61 64 20 57 6F [...] It's THE STRING!!, and select the red lines and right button - copy to executable - selection (or all modifications if ollydbg permit this).
Bytes...

P.D: i don't know if u will be able to understand me... because my english is bad xD... ...

psyCK0
May 9th, 2004, 23:15
Umm... CTRL-G in disassembler? You surely dont need the string disassembled as commands?

I can see you've found your string. Now click in the dump window to activate it and then press ctrl-g . then enter the address and you will be there. Now select the bytes of the string and press ctrl-e to edit it. Enter whatever you like. thats it!

ShadowDark
May 10th, 2004, 06:22
ohhh xD, sorry... i was found it on OllyDBG 1.10c... the subject from this forum is OllyDBG (i think...), on a dissasembler u need to catch the adress from the string and substract the imagebase... when u have this result go on a HexEditor and search this adress to change the bytes... to know the ASCII code only take the ALT + [...] code & pass it to decimal...

for example, A = 61 (ALT + 61), and u need to convert it to hexadecimal for get the byte than u need to change the string... 61 = 0x41...
Bytes...

P.D: but in OllyDBG it's more easy...

briankai
May 11th, 2004, 15:36
Thanks for the help guys, I did manage to change the string... although it didn't have the desired effect that I wanted. =(

Not sure about how this falls in the rules of the forum, but I am trying to alter a game exe to run it's voice files from CD. This isn't a crack, as the game allows itself to be run from the harddrive without the voice files, but I just thought it would be nice to not have to dig out the CD just to use all the games features. If an alteration like this would be ok to discuss here, I could sure use some help with it. Of course, if I'm out of line let me know.

Kai