I seem to have a problem, when i find an address in IDA, it doesn't match up in Olly. I'm running a 64-bit version of Windows 7 right now, is there any way to fix this?
It shows up as like 1XXXXXXX in IDA and 7XXXXXXX in Olly, and I'm pretty sure the IDA address is correct.
Okay, so I'll eat my words. You didn't specify enough information in your problem therefore I assumed incorrectly.
Did you even try checking the other sites?
Sorry about the vagueness of my original post >.< But yes, I have checked MabiZone as well. The problem still stands with the addresses not being the same after I tried every fix i could find.
The addresses don't have to be the same. It's because Olly loads all the files that your dll loads. Most likely, it starts out in ntdll, which has a different base address than the dll you tried to load.
Oh, and two things wrong with what you're trying to do.
1. You're modifying the wrong arrow revolver, the one you're modifying is Mari's arrow revolver. The correct function is core::CSkillArrowRevolver2::OnCanEnterPreparing().
The addresses don't have to be the same. It's because Olly loads all the files that your dll loads. Most likely, it starts out in ntdll, which has a different base address than the dll you tried to load.
Oh, and two things wrong with what you're trying to do.
1. You're modifying the wrong arrow revolver, the one you're modifying is Mari's arrow revolver. The correct function is core::CSkillArrowRevolver2::OnCanEnterPreparing().
2. What you're trying to do is server sided.
Two things:
1. Then how do I find the address I was trying to jump to?
2. The screenshots I posted there were just random addresses to show my problem, they have no relevance to what I'm trying to do.
64bit uses different addresses for future references. when loading on a 64bit, the dlls have change address sometimes, i wish i could help however i never fooled around with dll edits.
Thanks to everyone who's offered help so far, but this didn't help either, the addresses are still read differently than with IDA even when i run the script.
Quote:
Originally Posted by fenrir2037
Do it the hard way: Find it in IDA, sync with the hex, copy the hex, search for it in Olly...
Painful, and probably another easier way.. But that's what I can suggest from what I know :P
Errrm, explain what you mean by sync with the hex?
How to use OllyDBG 12/13/2009 - 12Sky2 - 1 Replies Is there any tutorial for this program? I want to learn how to hack 12Sky but I don't know how to use it. I know some basics but nothing more. I know to work in CE and in AutoIT really well.
[Help]Ollydbg. 12/10/2009 - Mabinogi - 4 Replies I didnt have problems until today.
For some reason, when i open any dll with ollydbg this error message pops up.
If you dont mind, help me with this problem.
Ollydbg help 08/03/2009 - Dekaron - 23 Replies I am trying to get a GM hack working, but I am still pretty noob with olly and assembly language. Is there anybody who would be willing to help me along, or work on it with me? I'm not asking for somebody to tell me what to do, just for somebody to give me a few pointers and tips and such to get this going.
What I did was backtrack a few of the gm commands using the call tree, and I ended up at the same offset for each code (0050CE37). So, I'm assuming that is the line that determines if...
ollydbg 06/24/2009 - Dekaron - 3 Replies can i take the new adress with ollydbg?
is there any TUT?
Need help at ollydbg 02/15/2009 - General Coding - 12 Replies Hi everyone,
so I have the following problem: I've set a breakpoint on a certain opcode. It is activated when I attack a monster in a game. Now I'm pretty sure that there's a jump or a call jumping to that opcode since the thread doesn't go thru the opcodes above. Usually there's a ">" sign between address and opcode in my ollydbg window at jump destinations and you can go right click -> Go to -> JMP from blahblahblah, but in this case I can't.
I already tried to find the jump/call using...
