Welcome to the new Woodmann RCE Messageboards Regroupment
Please be patient while the rest of the site is restored.

To all Members of the old RCE Forums:
In order to log in, it will be necessary to reset your forum login password ("I forgot my password") using the original email address you registered with. You will be sent an email with a link to reset your password for that member account.

The old vBulletin forum was converted to phpBB format, requiring the passwords to be reset. If this is a problem for some because of a forgotten email address, please feel free to re-register with a new username. We are happy to welcome old and new members back to the forums! Thanks.

All new accounts are manually activated before you can post. Any questions can be PM'ed to Kayaker.

ollydbg help

Support forums for OllyDbg 32-bit Assembler-Level Debugger.
Developed by Oleh Yuschuk (http://www.ollydbg.de)
Locked
heiron8
Junior Member
Posts: 2
Joined: Sun Feb 23, 2014 1:31 pm

ollydbg help

Post by heiron8 »

Hi,
I want to patch an exe with olly, I open the exe, dbclick the line and enter the value I want, I right click and 'copy to exe' then on the new window rightclick and save but it pops save mscore.dll, try to save mscore but denies access, how can I patch the data and remain to exe and save the exe to disk?

Ty
naides
Posts: 1655
Joined: Sat Jan 12, 2002 12:00 pm
Location: Planet Earth

Post by naides »

Seems to me that the file you are trying to patch is a .NET executable (Right??)

A good deal of the true executable code of .NET is actually run by a System file called mscore.dll, which is a system library. If you did modify it (provaided you could) it would change the behavior and likely crash ALL .NET executables.

.NET apps patching is a different game, rather advanced by the way; thus Ollydbg tracing and patching is not the way to go.
heiron8
Junior Member
Posts: 2
Joined: Sun Feb 23, 2014 1:31 pm

Post by heiron8 »

thank you naides, you're right it is a .NET application, any good dissasembler debugger for Net? I heard of IL spy.
hepL3r
Junior Member
Posts: 6
Joined: Sun Dec 09, 2012 9:46 am

Post by hepL3r »

try Reflector+Reflexil Plugin.
malice
Junior Member
Posts: 3
Joined: Sun Mar 16, 2014 1:28 am

Post by malice »

I tend to run .NET assemblies through de4dot if they're obfuscated, which usually restores them to the point where the code at least compiles. Then I extract the source files with ILSpy (free alternative for reflector) and open them up in Visual Studio. There I can freely debug, analyze, edit or recompile the program.

x86 debuggers like OllyDbg are for x86 instructions, not MSIL.
Locked