Results 1 to 7 of 7
  1. #1
    rhu10
    rhu10 is offline
    Banned
    Join Date
    2011 May
    Location
    Brasil
    Posts
    70
    Thanks
    42
    Thanked 24 Times in 15 Posts
    Rep Power
    0

    OllyDBG Beginner

    I'm starting to work with OllyDbg and when I try to execute Aika unpacked (F9) it doesn't
    open. I don't know if it's about windows 7 64 bits.

    It stops there at FB | STI... and doesn't happen nothing.
    I'm newbie and I really want to learn everything about it.

    I'm trying to disable first xTrap by nopping some calls at OllyDbg, but I can't see them as I showed before? Am I in the right way? If not, guide me pls.


    I heard about IDA PRO decompiler, is it better for beginners than OllyDBG?
    I'm newbie and I really want to learn everything about it.

    Thanks!

  2. #2
    deathpum
    deathpum is offline
    Guest
    Join Date
    2011 Aug
    Posts
    1
    Thanks
    3
    Thanked 1 Time in 1 Post
    Rep Power
    0
    you are inside one of Xtrap functions... since you must stop before Xtrap execution, search for the string "cannot init xtrap" (no case-sensitive) and look at above: 2 CALLs followed by a JE. You can make the first patch there...

  3. The Following User Says Thank You to deathpum For This Useful Post:


  4. #3
    gm3x
    gm3x is offline
    Member-in-training gm3x's Avatar
    Join Date
    2011 Feb
    Location
    Rio Grande, RS - Brazil
    Posts
    92
    Thanks
    4
    Thanked 56 Times in 16 Posts
    Rep Power
    0
    Quote Originally Posted by rhu10 View Post
    I'm starting to work with OllyDbg and when I try to execute Aika unpacked (F9) it doesn't
    open. I don't know if it's about windows 7 64 bits.

    It stops there at FB | STI... and doesn't happen nothing.
    I'm newbie and I really want to learn everything about it.

    I'm trying to disable first xTrap by nopping some calls at OllyDbg, but I can't see them as I showed before? Am I in the right way? If not, guide me pls.


    I heard about IDA PRO decompiler, is it better for beginners than OllyDBG?
    I'm newbie and I really want to learn everything about it.

    Thanks!
    Also, isn't only about changing it, u must change JE for JNZ, and the two above calls to NOP

    it'll be like this:

    call xtrap

    call xtrap

    if xtrap is loaded, jump, if not, "cannot init xtrap"

    should NOP the two calls and change JE for JNZ right above the message.

    The last call u must trace back from terminateprocess to the first call, maybe u can get something from winmain too...

  5. The Following User Says Thank You to gm3x For This Useful Post:


  6. #4
    rhu10
    rhu10 is offline
    Banned
    Join Date
    2011 May
    Location
    Brasil
    Posts
    70
    Thanks
    42
    Thanked 24 Times in 15 Posts
    Rep Power
    0
    OK GM3X, but can I run it on normal mode, or only on debugger?

  7. #5
    gm3x
    gm3x is offline
    Member-in-training gm3x's Avatar
    Join Date
    2011 Feb
    Location
    Rio Grande, RS - Brazil
    Posts
    92
    Thanks
    4
    Thanked 56 Times in 16 Posts
    Rep Power
    0
    When you run alone, it terminate, should find the terminateprocess call, by tracing it (trace function in ollydbg), when you do it, the client will not shutdown anymore.
    Also, you can use the "AikaClient.log" to see where your client stopped and shut down, when I was makin' my dextrap, it was stoping after the "Init Network Manager"
    Also, I'm proud to say that maybe Dwar release a nice tutorial about disabling xtrap soon.

    You can use my guide to get some tips too...

    See ya

  8. The Following User Says Thank You to gm3x For This Useful Post:


  9. #6
    rhu10
    rhu10 is offline
    Banned
    Join Date
    2011 May
    Location
    Brasil
    Posts
    70
    Thanks
    42
    Thanked 24 Times in 15 Posts
    Rep Power
    0
    Thanks bro, you helps me a lot.
    I'll try it and post here my results.

    ------------------------------------------------
    It stops here after "Init Network Manager" too.
    But I can't run it even in debugger mode, it stops here:
    Code:
    772BF9CD    C2 0C00         retn    0xC
    And it takes 10-20 seconds, after all this, aika stops working (windows tell me so).
    Last edited by rhu10; 2011-09-04 at 05:18 PM.

  10. #7
    gm3x
    gm3x is offline
    Member-in-training gm3x's Avatar
    Join Date
    2011 Feb
    Location
    Rio Grande, RS - Brazil
    Posts
    92
    Thanks
    4
    Thanked 56 Times in 16 Posts
    Rep Power
    0
    Quote Originally Posted by rhu10 View Post
    Thanks bro, you helps me a lot.
    I'll try it and post here my results.

    ------------------------------------------------
    It stops here after "Init Network Manager" too.
    But I can't run it even in debugger mode, it stops here:
    Code:
    772BF9CD    C2 0C00         retn    0xC
    And it takes 10-20 seconds, after all this, aika stops working (windows tell me so).

    Try to put some breakpoints on some calls, run it by alt+F9,NOP 2 calls above the messagebox and JNZ the jump over the message 'cant init xtrap', after u can breakpoint some calls and run it by alt+F9, also, you can run by animation too, or u can make 'trace into' and after, run by F9 too, and after the crash, see the trace list...

    The 10-20 seconds maybe the loading screen.
    RUN BY ALT+F9, line by line, keep pressing it with the breakpoint, I hope u can make it...

    More than half-so, u must find the call that I said, about terminateprocess,isn't the intermodular call, it's a call that refeer to TP.

Similar Threads

  1. [Tutorial] Game Hacking for beginner, Video + Source Code
    By Dwar in forum Game Researching Tutorials
    Replies: 8
    Last Post: 2013-03-13, 09:39 AM
  2. ollydbg Modification Pack
    By Dwar in forum Files & Tools
    Replies: 5
    Last Post: 2012-03-13, 08:47 PM
  3. Problem using Ollydbg
    By smbogdan in forum General Programming
    Replies: 4
    Last Post: 2012-01-29, 02:45 AM
  4. Beginner Game Development
    By DirtyRasa in forum Game Research, Development
    Replies: 0
    Last Post: 2011-07-06, 11:22 PM
  5. Beginner question
    By iDent1ty in forum General Game Research
    Replies: 5
    Last Post: 2010-11-16, 01:51 PM
Visitors found this page by searching for:

ollydbg sti

disable xtrap ollydbg

xtrap ollydbg

ollydbg xtrap

ollydbg 64bit

starting ollydbg

ollydbg for beginners

aika ollydbg

Ollydbg AIKA

STI ollydbg

remove xtrap with ollydbg

ollydbg for newbie

ollydbg run trace

how to find xtrap in ollydbg

ollydbg beginner

better than ollydbg

fb sti xtrap ollydbgollydbg follow execution line by lineollydbg noppingterminateprocess ollydbgfb sti ollydbgollydbg windows 7ida pro intermodular callshttp:www.progamercity.netaika1645-help-ollydbg-beginner.htmlollydbg

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •