[HELP] Ollydbg code.

*JayKay* · 11/27/2011, 17:13

hello everyone, I have a problem to add this code in OllyDbg when I try to put the code I get an error, which is marked in the image. please someone help solve this problem.

cod: MOV EAX,DWORD PTR DS:[EDX*4+ADCE94]

Image:

Thanks all.

[DEV]DorianGray · 11/27/2011, 19:08

enter it in binary (strg +e )

8B049594CEAD00

this will work

*JayKay* · 11/27/2011, 21:03

Quote:

Originally Posted by [DEV]DorianGray

enter it in binary (strg +e )

8B049594CEAD00

this will work

thanks for replying. could explain better how to act?

[DEV]DorianGray · 11/27/2011, 22:48

Quote:

Originally Posted by *JayKay*

thanks for replying. could explain better how to act?

Sure

Go to the Offset where you wanna add the Code and
Press STRG and E .

Then just enter the Code (not the Command !!) in "Hex+00" (like in the picture)
and press enter

The Signs in ASCII and UNICODE appear automatically if you enter anything in Hex+00

Uploaded with

*JayKay* · 11/28/2011, 01:09

Thanks!!!!!

[DEV]DorianGray · 11/28/2011, 01:25

no problem

i add the most codes like this

For me it s faster than adding the commands

and with the most codes it works

~~DekaronSo~~ · 11/28/2011, 13:29

Quote:

Originally Posted by [DEV]DorianGray

no problem i add the most codes like this

For me it s faster than adding the commands
and with the most codes it works

could u fix itemoptionupgrade system?

HellSpider · 11/28/2011, 20:14

Your problem is that OllyDbg interprets your address as some symbolic name.

When you are referencing hex addresses, always append a 0 before the first character of the address in case it's non numeral.

Correct instruction:

MOV EAX,DWORD PTR DS:[EDX*4+0ADCE94]

[DEV]DorianGray · 11/28/2011, 20:41

Quote:

Originally Posted by DekaronSo

could u fix itemoptionupgrade system?

I don´t think that im PRO enough for that

I just started with the whole exe stuff a few weeks ago...........

When i have success in exe editing,it s more Luck than knowledge

I just try and try and try till it works

*JayKay* · 11/29/2011, 02:21

Quote:

Originally Posted by HellSpider

Your problem is that OllyDbg interprets your address as some symbolic name.

When you are referencing hex addresses, always append a 0 before the first character of the address in case it's non numeral.

Correct instruction:

MOV EAX,DWORD PTR DS:[EDX*4+0ADCE94]

I have another doubt, I would crumble up and put the correct code so I've changed the two aloken call it was in the sequence and put the two new characters. my doubt is the placement would be correct codes? I would get this wrong you correct me. Thanks

reference for: game_tpack and game_mesh.

PHP Code:


			
0099B55F  /$ B8 209AAD00    MOV EAX,Dekaron_.00AD9A20                ;  ASCII "ALO"

0099B564  |. 80FA 06        CMP DL,6

0099B567  |. 74 0A          JE SHORT Dekaron_.0099B573

0099B569  |. 8B0495 94CEAD0>MOV EAX,DWORD PTR DS:[EDX*4+ADCE94]

0099B570  |. C2 0400        RETN 4

0099B573  |> B8 BEB79900    MOV EAX,Dekaron_.0099B7BE                ;  ASCII "CON"

0099B578  |. 80FA 0A        CMP DL,0A

0099B57B  |. 74 0A          JE SHORT Dekaron_.0099B587

0099B57D  |. 8B0495 94CEAD0>MOV EAX,DWORD PTR DS:[EDX*4+ADCE94]

0099B584  |. C2 0400        RETN 4

0099B587  |> B8 C3B79900    MOV EAX,Dekaron_.0099B7C3                ;  ASCII "RIP"

0099B58C  |. 80FA 0B        CMP DL,0B

0099B58F  |. 74 07          JE SHORT Dekaron_.0099B598

0099B591  |. 8B0495 94CEAD0>MOV EAX,DWORD PTR DS:[EDX*4+ADCE94]

0099B598  \> C3             RETN

thanks for patience.

[DEV]DorianGray · 11/29/2011, 06:27

Quote:

Originally Posted by *JayKay*

I have another doubt, I would crumble up and put the correct code so I've changed the two aloken call it was in the sequence and put the two new characters. my doubt is the placement would be correct codes? I would get this wrong you correct me. Thanks

reference for: game_tpack and game_mesh.

PHP Code:

0099B55F /$ B8 209AAD00 MOV EAX,Dekaron_.00AD9A20 ; ASCII "ALO" 0099B564 |. 80FA 06 CMP DL,6 0099B567 |. 74 0A JE SHORT Dekaron_.0099B573 0099B569 |. 8B0495 94CEAD0>MOV EAX,DWORD PTR DS:[EDX*4+ADCE94] 0099B570 |. C2 0400 RETN 4 0099B573 |> B8 BEB79900 MOV EAX,Dekaron_.0099B7BE ; ASCII "CON" 0099B578 |. 80FA 0A CMP DL,0A 0099B57B |. 74 0A JE SHORT Dekaron_.0099B587 0099B57D |. 8B0495 94CEAD0>MOV EAX,DWORD PTR DS:[EDX*4+ADCE94] 0099B584 |. C2 0400 RETN 4 0099B587 |> B8 C3B79900 MOV EAX,Dekaron_.0099B7C3 ; ASCII "RIP" 0099B58C |. 80FA 0B CMP DL,0B 0099B58F |. 74 07 JE SHORT Dekaron_.0099B598 0099B591 |. 8B0495 94CEAD0>MOV EAX,DWORD PTR DS:[EDX*4+ADCE94] 0099B598 \> C3 RETN

thanks for patience.

i have the same problem, i tried almost all possibilities

BTW, your codes can t work.
1. Its WSU & MSE , not CON & RIP i think
2. The ALO Lines get called from 2 different offsets (game_mesh & game_tpack)
(search for CALL 0099B4C3)

Maybe it works if you add CALL s for WSU and MSE there

[DEV]Harmony · 11/29/2011, 13:37

Yes you're right, its not con and rip its WSU and MSE.

LogLife · 11/29/2011, 14:18

oh my gaad please share everything i will leech you all
i'm leecher please share i will leech wowwww evodk will share new class here
everyonce come here to leech , don't stop to share man go a head , i'm leeching

[DEV]Harmony · 11/29/2011, 14:36

Quote:

Originally Posted by LogLife

oh my gaad please share everything i will leech you all
i'm leecher please share i will leech wowwww evodk will share new class here
everyonce come here to leech , don't stop to share man go a head , i'm leeching

You really have some issues. You say the same things in 3 sentence's, not only that but you look like a complete Idiot when you say such things. And we already know, you are...

~~DekaronSo~~ · 11/29/2011, 15:05

Quote:

Originally Posted by [DEV]DorianGray

I don´t think that im PRO enough for that
I just started with the whole exe stuff a few weeks ago...........

When i have success in exe editing,it s more Luck than knowledge
I just try and try and try till it works

i would look forward to your work on it . thanks .