[Guide] Remove MuError.log Enc

[[INDG]FeN$x]

Ok if we want to remove MuError.log encription for check some errors (for me it doesnt do anything necesarie)
but here we go:

1.- Open Ollydbg
2.- NOP this, secondary buttom>Binary>Fill with NOPS

006A8E8D                                               6A 00                           PUSH 0
006A8E8F                                               8B8D F8FFFDFF                   MOV ECX,DWORD PTR SS:[EBP+FFFDFFF8]
006A8E95                                               51                              PUSH ECX
006A8E96                                               8D95 0000FEFF                   LEA EDX,DWORD PTR SS:[EBP+FFFE0000]
006A8E9C                                               52                              PUSH EDX
006A8E9D                                               E8 DEFDFFFF                     CALL maintest.006A8C80
006A8EA2                                               83C4 0C                         ADD ESP,0C

OR if you want just NOP the call:

006A8E9D                                               E8 DEFDFFFF                     CALL maintest.006A8C80

3.- NOP this too before it writtes the file:

006A90A7                                               51                              PUSH ECX
006A90A8                                               8B55 10                         MOV EDX,DWORD PTR SS:[EBP+10]
006A90AB                                               52                              PUSH EDX
006A90AC                                               8B45 0C                         MOV EAX,DWORD PTR SS:[EBP+C]
006A90AF                                               50                              PUSH EAX
006A90B0                                               E8 CBFBFFFF                     CALL maintest.006A8C80
006A90B5                                               83C4 0C                         ADD ESP,0C

OR just simple again NOP the call

006A90B0                                               E8 CBFBFFFF                     CALL maintest.006A8C80

Dont worry be happy thats all, if some one can test for me please caused i just do it debuggin with "sigth" this means i dont RUN the main for test... why? caused i have BMD error .

 

[Stifi]

Main version is: 1.05c (Kor) (1.5.3.0) = 3.00.05

 

[[RCZ]ShadowKing]

or we just do a jmp to retn at first push in encryption function

 

[oleg35]

shadowking, how can find "encryption function" to set retrn

 

[[RCZ]ShadowKing]

search for MuError.log and there should be a call to encrypt/decrypt function,if you know a little ASM you will find it very easy or try what fen$x posted

 

[SaintZeus]

fix for main 1.03K ?

 

[mauka]

hah... feniks noob anyway, i posted similar guide