Mixing
How to jump to a dynamic address with OllyDbg (knowing the exact position from the beginning)
So I'm moving from Cheat Engine to OllyDbg to hack a simple game with anti-debugger and integrity checks protections (simply because OllyDbg goes with ScyllaHide which helps me from hiding). Normally with CE, the position for the codes to be injected will be written as follows "game.dll"+9xxxx. Because all the addresses in the dll file change after every login, CE simply count from the first address and plus a definite number (this position never changes).
When I move on to OllyDbg, to perform a code injection, I would simply jump from the position where the code is located to an empty space, then make modifications and jump back to the next opcode. This works for game.exe, where important addresses remain stable. However, in the game.dll, since addresses are always changing, my modifications will become invalid after the next login. Therefore, I would like to know whether there is a way for Olly to understand and jump to something like "game.dll"+9xxxx instead of an address? Or even to a set of binary strings perhaps?
I really appreaciate your help!
P/S: I have to patch the file to get permanent effects, because changing opcodes everytime I login will result in an immediate ban (integrity checks).
Thank you in advance.
dynamic static ollydbg jmp
asked Jan 1 at 10:22
Hung NguyenHung Nguyen
11
add a comment |
So I'm moving from Cheat Engine to OllyDbg to hack a simple game with anti-debugger and integrity checks protections (simply because OllyDbg goes with ScyllaHide which helps me from hiding). Normally with CE, the position for the codes to be injected will be written as follows "game.dll"+9xxxx. Because all the addresses in the dll file change after every login, CE simply count from the first address and plus a definite number (this position never changes).
When I move on to OllyDbg, to perform a code injection, I would simply jump from the position where the code is located to an empty space, then make modifications and jump back to the next opcode. This works for game.exe, where important addresses remain stable. However, in the game.dll, since addresses are always changing, my modifications will become invalid after the next login. Therefore, I would like to know whether there is a way for Olly to understand and jump to something like "game.dll"+9xxxx instead of an address? Or even to a set of binary strings perhaps?
I really appreaciate your help!
P/S: I have to patch the file to get permanent effects, because changing opcodes everytime I login will result in an immediate ban (integrity checks).
Thank you in advance.
dynamic static ollydbg jmp
asked Jan 1 at 10:22
Hung NguyenHung Nguyen
11
add a comment |
So I'm moving from Cheat Engine to OllyDbg to hack a simple game with anti-debugger and integrity checks protections (simply because OllyDbg goes with ScyllaHide which helps me from hiding). Normally with CE, the position for the codes to be injected will be written as follows "game.dll"+9xxxx. Because all the addresses in the dll file change after every login, CE simply count from the first address and plus a definite number (this position never changes).
When I move on to OllyDbg, to perform a code injection, I would simply jump from the position where the code is located to an empty space, then make modifications and jump back to the next opcode. This works for game.exe, where important addresses remain stable. However, in the game.dll, since addresses are always changing, my modifications will become invalid after the next login. Therefore, I would like to know whether there is a way for Olly to understand and jump to something like "game.dll"+9xxxx instead of an address? Or even to a set of binary strings perhaps?
I really appreaciate your help!
P/S: I have to patch the file to get permanent effects, because changing opcodes everytime I login will result in an immediate ban (integrity checks).
Thank you in advance.
dynamic static ollydbg jmp
asked Jan 1 at 10:22
Hung NguyenHung Nguyen
11
So I'm moving from Cheat Engine to OllyDbg to hack a simple game with anti-debugger and integrity checks protections (simply because OllyDbg goes with ScyllaHide which helps me from hiding). Normally with CE, the position for the codes to be injected will be written as follows "game.dll"+9xxxx. Because all the addresses in the dll file change after every login, CE simply count from the first address and plus a definite number (this position never changes).
When I move on to OllyDbg, to perform a code injection, I would simply jump from the position where the code is located to an empty space, then make modifications and jump back to the next opcode. This works for game.exe, where important addresses remain stable. However, in the game.dll, since addresses are always changing, my modifications will become invalid after the next login. Therefore, I would like to know whether there is a way for Olly to understand and jump to something like "game.dll"+9xxxx instead of an address? Or even to a set of binary strings perhaps?
I really appreaciate your help!
P/S: I have to patch the file to get permanent effects, because changing opcodes everytime I login will result in an immediate ban (integrity checks).
Thank you in advance.
dynamic static ollydbg jmp
dynamic static ollydbg jmp
asked Jan 1 at 10:22
Hung NguyenHung Nguyen
11
asked Jan 1 at 10:22
Hung NguyenHung Nguyen
11
asked Jan 1 at 10:22
Hung NguyenHung Nguyen
11
asked Jan 1 at 10:22
Hung NguyenHung Nguyen
11
asked Jan 1 at 10:22
Hung NguyenHung Nguyen
11
11
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53994689%2fhow-to-jump-to-a-dynamic-address-with-ollydbg-knowing-the-exact-position-from-t%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53994689%2fhow-to-jump-to-a-dynamic-address-with-ollydbg-knowing-the-exact-position-from-t%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
