Log in

View Full Version : Stupid question, how to remove stuff?


RonSijm
September 22nd, 2005, 12:10
Hi,

Im newb with ollydebug, and i cant find some things...

like, when im editting a .exe file of a game, and i want to remove the hackdetection, i already found what part it is, but i dont know how to remove it or something? Can i just set a breakpoint or something?

And, how can i like Save my file when im done?

tnx

blabberer
September 22nd, 2005, 12:22
yeah you can always do something provided you know what to do
a debugger is designed to be able to set a break point
so ollydbg can set them too and that too in innumerable ways you could ever think of just try hitting f2 for a start then keep right clicking
you will find a breakpoints menu choosing that should open a pandora box
of option for you select and break

as far as saving the modification is considered
right click --> copy to executable --> all modification OR selection
ok--> in the new window that pops up right click --> should see save to executable give a new name and hit ok

RonSijm
September 22nd, 2005, 13:00
Yes, well.. im also new to debugging, not just ollydbg.

But, when i set a breakpoint, i cant run it anymore...



how should i remove stuff from it?

sgdt
September 23rd, 2005, 11:04
When you set a break point, at least temporarily, it is modifing the code (for the int 3 instruction). It sounds like it is checking for modifications. If you place a hardware read break point on where you set the software breakpoint, you should get a hit at where it's doing the CRC (or what ever method they are using). NOP the final failure, and put a hardware break there, and see if someone is checking the checker.

xcracx
September 23rd, 2005, 15:01
1st of all there is nothing like Removing in Debugging because the complier read the code and translate it to Assembler which work with
CPU-Memory-I/O
Inside the CPU you got the process counter(PC) that reads each the memory from 0000- to the end

so you can't just delete some line it works like READ and done
but you can use some command called nop that tells "Do nothing"

"Removing"

Right click > Binary Edit(or something alike) > Fill with NOP's
or Fill with zeros (for certain things)

Saving

Right click > copy to executable > ........(whatever needed)

xcracx