Olly vs CE

shitboi · 04/12/2012, 00:00

This is probably the 3rd o 4th post i have started on olly.

For some unknown reason i still have problems with olly. I alway find it behaving abnormally and i can't describe the anomaly. Thus i switched to CE.

After some debugging on CE, i realized that i can remove the height check to allow wall jump. However when i edited the assembly on CE, the change only lasts for as long as this instance of Conquer.exe lasts. The moment the instance is destroyed, the change is reverted. So i figured out i will still need Olly to save a copy of the changed exe. Here is where the problem comes into play.

I can't find in olly the instruction that I have found in CE.
For this current patch, CE->memory view-> goto address 639407, and change jne to jmp will allow wall jump. But i can't find an address639407 in olly.

Any positive advice will be appreciated

~~m7mdxlife~~ · 04/12/2012, 00:22

I know this post is completely useless but i won't call this " Olly vs CE "

Didn't try to work with CE for Co before but perhaps when you search for the address in the memory view you'll find something else to look for in Olly that falls under the same address.

InfamousNoone · 04/12/2012, 00:31

I only use CE to perform searches pertaining to the memory, for debugging purposes I stick to Olly 1.10

~~I don't have a username~~ · 04/12/2012, 00:42

It's 2 programs with 2 different goals.

shitboi · 04/12/2012, 00:57

i can't even debug on olly1.1
I have been seeing so many posts on ppl doing fantastic stuffs with olly. But it refuse to work for me. -.-

I do not know what is the problem, I run win7x46, and i suppose most of you do.
here is a picture

EDIT:
In response to m7mdxlife
I did what you suggested, and hence i started this thread, because when i attempt to search for the address that i have found in CE, it is not even available in olly. I am completely bewildered.

Due to the problems i suffer with olly, debugging is completely out of the scope. With CE, i can at least place BP and do something in game and how how these BP are triggered. And i am not even saying CE is suitable for this cause, I want to have olly working for me. I have reformatted my comp a couple times hoping it would work for me, but all my efforts were in vain

~~m7mdxlife~~ · 04/12/2012, 05:45

When you load Conquer.exe to Olly or any other application Olly pauses that application right after its fully loaded, there is nothing wrong with ur Olly.
About using CE for placing BP's, you can place BP's with Olly as well, just double click an address thats all.

What i mean with my 1st post was, look at your screenshot at the very 1st address ( or whatever the hell that is on the top left side ) 77B10194 something similar to that can be found in CE i suppose "Memory View", you mentioned that you change jne to jmp to allow wall jump. there is a column in Olly that shows that code, find out what its called " function? " and search for it in Olly.

shitboi · 04/12/2012, 06:10

@m7mdxlife

Whenever i see the addresses 77B10194, i can't find anything in my search. Eg. searching for constants in stRes.ini yields no results at all. I remember i had to hit the play/run button for olly to start analyzing Conquer.exe. When olly paused at a state in which i can see 00xxxxxx or 0xxxxxxx for address, then i know i can scroll to the very top and perform a search.

As for adding BPs, how did you trigger the BPs, I think attaching to process doesn't work. So i resorted to loading the exe into olly. But when i clicked the run/play button, i do see a instance of Conquer.exe running in the taskmanager, but i don't see the program showing up. Thus i can't really do anything after I have placed the BP.

do you have time to release a sequence of instructions to get it to work?

donn · 04/12/2012, 07:23

Quote:

Originally Posted by shitboi

i can't even debug on olly1.1
I have been seeing so many posts on ppl doing fantastic stuffs with olly. But it refuse to work for me. -.-

I do not know what is the problem, I run win7x46, and i suppose most of you do.
here is a picture

You need Stealth64 plugin for Olly if you use it in Win 7 X64.

shitboi · 04/12/2012, 07:27

i actually had it in olly, i am just not sure what settings i should use. this is my settings atm.

and all the problems i have described above exists with the settings shown in the picture

I just went through angelius' video on ollydbg, I realized on his system, when he dragged his CO into olly, it loads fine and directly pause at program entry point. For me it has never happened before. It is always a couple exceptions that i need to step over before i can hit the program entry point, that is if i am lucky.

donn · 04/12/2012, 07:38

Quote:

Originally Posted by shitboi

i actually had it in olly, i am just not sure what settings i should use. this is my settings atm.
and all the problems i have described above exists with the settings shown in the picture

Leave all unchecked.
And delete all .udd files from Olly folder.

shitboi · 04/12/2012, 08:03

still got a access violation

got a fresh copy of olly, dumped the stealth64.dll into olly folder, loaded conquer.exe

still one of the same problems

Access violation when executing [00000000]

still got a access violation

got a fresh copy of olly, dumped the stealth64.dll into olly folder, loaded conquer.exe

still one of the same problems

Access violation when executing [00000000]

donn · 04/12/2012, 08:22

Then you resort to only one solution: install WinXP on a separate partition or in a VM, and use it in there.

shitboi · 04/12/2012, 09:04

lol... resorting to that ... installed XP on a old but decent laptop Dell latitude D530, but the drivers on official site doesn't work for this model (system crashed after installing chipset drivers, lol) what a pain in the rear.

Fck that piece of dell ****.

I got it running in Ubuntu -> virtualbox (winxp sp3)
at least it looks like it is running.

Seems that virtual box isn't strong enough to run CO, i guess i'll have to get a winxp installed on a physical box to test it out.

~~IAmHawtness~~ · 04/12/2012, 12:52

Quote:

Originally Posted by shitboi

still got a access violation

got a fresh copy of olly, dumped the stealth64.dll into olly folder, loaded conquer.exe

still one of the same problems

Access violation when executing [00000000]

still got a access violation

got a fresh copy of olly, dumped the stealth64.dll into olly folder, loaded conquer.exe

still one of the same problems

Access violation when executing [00000000]

Do you actually need to debug Conquer.exe while it's starting? I mean, you could always just attach to an already running Conquer.exe.
What I did was just to add the EXCEPTION_ACCESS_VIOLATION (0xC0000005) to olly's exception ignore list (Options -> Debugging options -> Exceptions) and now it works fine.

shitboi · 04/12/2012, 14:21

@hawtness

I have not really gotten that exception before, what i am getting the most frequently is

the following

It takes place be it I start conquer.exe (with blacknull as parameter) from olly, or if i attempt to attach conquer.exe with olly. And i did it in windows XP.
The only difference i noticed in XP as compared to my win7x64 is that XP takes me to program entry without giving any other problems.

Can you give me any advice as to how to get rid of this 00000000 error?

Some addition info: i ignored the entire range of errors, but the 00000000 error is still showing up. And if i forcefully get over it by shift+f9, then the result in the op code window would be completely different, as shown in my picture in one of my previous