Results 1 to 13 of 13
  1. #1
    whit's Avatar
    Join Date
    Jan 2010
    Gender
    male
    Posts
    7,170
    Reputation
    490
    Thanks
    2,252

    Unhappy [HELP] cshell.dll in ollydbg

    ok when i open cshell in olly and try to search for all reference text strings it say unable to read memory of degugged process??

    i put the cshell in main game folder...

    if you have any idea please post them...

  2. #2
    |-|3|_][({}PT3R12's Avatar
    Join Date
    Nov 2008
    Gender
    male
    Location
    UnkwOwnS
    Posts
    449
    Reputation
    12
    Thanks
    472
    My Mood
    Twisted
    Its packed with themida... That and Engine.exe ;D


    So good luck

  3. #3
    whit's Avatar
    Join Date
    Jan 2010
    Gender
    male
    Posts
    7,170
    Reputation
    490
    Thanks
    2,252
    thks people kep tellin me it wasnt..
    but thanks for for that bit of info..

    /close

  4. #4
    AVGN's Avatar
    Join Date
    Sep 2009
    Gender
    male
    Location
    Making America Great Again.
    Posts
    15,451
    Reputation
    1549
    Thanks
    6,234
    lol nexon does NOT use themida! XD



    ^Thanks to RJ^




  5. #5
    whit's Avatar
    Join Date
    Jan 2010
    Gender
    male
    Posts
    7,170
    Reputation
    490
    Thanks
    2,252
    Quote Originally Posted by AVGN View Post
    lol nexon does NOT use themida! XD
    lol but is it packed tho

  6. #6
    Ragehax's Avatar
    Join Date
    Jun 2009
    Gender
    male
    Posts
    358
    Reputation
    12
    Thanks
    87
    My Mood
    Inspired
    its not packed anymore.... nexon stopped packing, idk why.... try opening cshell.dll with a different hex editer, or try running as admin if on vista/7.

  7. #7
    whit's Avatar
    Join Date
    Jan 2010
    Gender
    male
    Posts
    7,170
    Reputation
    490
    Thanks
    2,252
    Quote Originally Posted by ******* View Post
    its not packed anymore.... nexon stopped packing, idk why.... try opening cshell.dll with a different hex editer, or try running as admin if on vista/7.
    wat hex editor do you recomend?>?>

  8. #8
    |-|3|_][({}PT3R12's Avatar
    Join Date
    Nov 2008
    Gender
    male
    Location
    UnkwOwnS
    Posts
    449
    Reputation
    12
    Thanks
    472
    My Mood
    Twisted
    lol.... Even on UC they said its packed, everywhere says its packed... Try to open it.

    And Nexon can use w/e it wants, its a company, it probably paid Themida to secure their software for advertisement or $$.

  9. #9
    whit's Avatar
    Join Date
    Jan 2010
    Gender
    male
    Posts
    7,170
    Reputation
    490
    Thanks
    2,252
    Quote Originally Posted by |-|3|_][({}PT3R12 View Post
    lol.... Even on UC they said its packed, everywhere says its packed... Try to open it.

    And Nexon can use w/e it wants, its a company, it probably paid Themida to secure their software for advertisement or $$.
    so if i get it unpacked...and it will work for me in olly??

  10. #10
    mrperkins's Avatar
    Join Date
    Nov 2009
    Gender
    male
    Location
    Under Your Bed
    Posts
    160
    Reputation
    10
    Thanks
    13
    My Mood
    Breezy
    maybe if you try it,..


    themida is like a virus?

  11. #11
    whit's Avatar
    Join Date
    Jan 2010
    Gender
    male
    Posts
    7,170
    Reputation
    490
    Thanks
    2,252
    Quote Originally Posted by mrperkins View Post
    maybe if you try it,..


    themida is like a virus?
    no themidia is a false positive...

  12. #12
    |-|3|_][({}PT3R12's Avatar
    Join Date
    Nov 2008
    Gender
    male
    Location
    UnkwOwnS
    Posts
    449
    Reputation
    12
    Thanks
    472
    My Mood
    Twisted
    Themida is a way of encrypting your work... Look at it this way, say you have the text "I like cheese", anyone can see it in your project if they open it in oly or a hex viewer. So what themida does is change the the way we look at it (its the same code, and does the same thing, but its all "scrambled" and less likely to be open/detected). So we now have "#@$JKASDJ#)@$*" or somthing from our "I like cheese," but don't try to just change things in oly because everything that is being changed is being linked back by the engine to the original code so it knows what "#@$JKASDJ#)@$*" means

  13. The Following User Says Thank You to |-|3|_][({}PT3R12 For This Useful Post:

    whit (03-31-2010)

  14. #13
    whit's Avatar
    Join Date
    Jan 2010
    Gender
    male
    Posts
    7,170
    Reputation
    490
    Thanks
    2,252
    Quote Originally Posted by |-|3|_][({}PT3R12 View Post
    Themida is a way of encrypting your work... Look at it this way, say you have the text "I like cheese", anyone can see it in your project if they open it in oly or a hex viewer. So what themida does is change the the way we look at it (its the same code, and does the same thing, but its all "scrambled" and less likely to be open/detected). So we now have "#@$JKASDJ#)@$*" or somthing from our "I like cheese," but don't try to just change things in oly because everything that is being changed is being linked back by the engine to the original code so it knows what "#@$JKASDJ#)@$*" means
    ok thks..you helped me i dont know bout them tho..lol

Similar Threads

  1. [Help] Dumping the EU CShell.dll
    By Houston in forum Combat Arms Coding Help & Discussion
    Replies: 2
    Last Post: 01-24-2011, 03:52 PM
  2. [Request] Help with Dumping Cshell.dll
    By CoderNever in forum Combat Arms Coding Help & Discussion
    Replies: 27
    Last Post: 10-29-2010, 12:14 PM
  3. [Help] Unpack Engine and Cshell.dll (Adress of hacks after pacthes)
    By filecroc in forum Combat Arms Coding Help & Discussion
    Replies: 2
    Last Post: 10-14-2010, 10:05 AM
  4. Opening CShell.dll with Ollydbg
    By ShadowPwnz in forum Combat Arms Hack Coding / Programming / Source Code
    Replies: 7
    Last Post: 03-13-2010, 08:12 PM
  5. [help]Error copying files cshell.dll.
    By mexicano007 in forum Combat Arms Mods & Rez Modding
    Replies: 12
    Last Post: 12-09-2009, 05:24 PM