OllyDbg
1. Open up OllyDbg (you can get it from www.ollydbg.de),
2. Load Ebenezer - File -> Open -> Ebenezer,
3. Hit CTRL+G to open up a small dialog which can help you to jump to various offsets,
4. Type in 004ABB55, and hit "OK",
5. Select this line and the one below, right-click them, and hit Binary->Fill with NOPs,
6. Double-click the first (now nopped) line, or right-click it and hit "Assemble",
7. Type in: JMP 004ABC90, and hit "OK".
8. Select the lines:
004ABB55 E9 36010000 JMP Ebenezer.004ABC90
004ABB5A 90 NOP
9. Right-click, copy to executable, selected modifications.
OR
A hex editor
1. Open up the hex editor,
2. Load Ebenezer,
3. Jump to the file offset 000ABB55,
4. Replace the following 6 bytes with: E9 36 01 00 00 90
5. Save. |
