Message Box

[Dead(H)ell]

when ever i use the ingame message box function i normally login and after a while from logging in when the message box starts to appear i get a send errror report .. :S any one has a solution?

[Zacherl]

Show some code please. Remember the calling convention is cdecl and not stdcall! Maybe you corrupted the stack.

[CFhackerfree]

wrong pointer

[Dead(H)ell]

Show some code please. Remember the calling convention is cdecl and not stdcall! Maybe you corrupted the stack.

#include <Windows.h>
void ShowMessage(char* string, DWORD CShell);


void Hacks()
{
	while(1)
	{
		DWORD CShell = (DWORD)GetModuleHandleA("CShell.dll");
		ShowMessage("The messege",CShell);
		while(1)
		{
		________________________________________
		}
	}
}

after dllmain:

void ShowMessage(char* string, DWORD CShell)
{
    DWORD MsgBoxFunc = CShell + 0x80AA0;
    __asm
    {
        push string;
        push 0;
        push 0x70;
        push 0x1C;
        call MsgBoxFunc;
        add esp, 16;
    }
}

[DaRk]

#include <Windows.h>
void ShowMessage(char* string, DWORD CShell);


void Hacks()
{
	while(1)
	{
		DWORD CShell = (DWORD)GetModuleHandleA("CShell.dll");
		ShowMessage("The messege",CShell);
		while(1)
		{
		________________________________________
		}
	}
}

after dllmain:

void ShowMessage(char* string, DWORD CShell)
{
    DWORD MsgBoxFunc = CShell + 0x80AA0;
    __asm
    {
        push string;
        push 0;
        push 0x70;
        push 0x1C;
        call MsgBoxFunc;
        add esp, 16;
    }
}

ur addy is wrong
it's 0x80940

[Dead(H)ell]

@DaRk thnx and btw the msgbox normally popsup and when i press OK or Enter it doesnt want to disappear and if i waited some more time or i kept pressing OK and Enter i get error report fast reply is good!

[DaRk]

@DaRk thnx and btw the msgbox normally popsup and when i press OK or Enter it doesnt want to disappear and if i waited some more time or i kept pressing OK and Enter i get error report fast reply is good!

idk abt that sry..it should work
maybe something is wrong with ur code

[giniyat101]

@Dead(H)ell
u must put it before while(1)

[TCT.MasTer]

how debug pointer 0x80AA0; ???

[kloklo2]

how debug pointer 0x80AA0; ???

Learn C++ but

#define Pointer 0x80AA0

[TCT.MasTer]

Learn C++ but

#define Pointer 0x80AA0

How Scan poinet ??? or Debug olly text string ????

[Ryuzaki™]

How Scan poinet ??? or Debug olly text string ????

vertex lock failed
is the string

[{Banned}**HACKER**]

@DaRk thnx and btw the msgbox normally popsup and when i press OK or Enter it doesnt want to disappear and if i waited some more time or i kept pressing OK and Enter i get error report fast reply is good!

It doesnt want to disappear because you had it inside of while(1) Take it outside of this and update your addy that DaRk gave you and you should be good to go!

[dicky88smd]

If i use while my hack got detected

so i place message in hotkey function

if (hack){
Message
Hack
}

and it works perfect

[TCT.MasTer]

vertex lock failed
is the string

push 0x70; <= ?????
push 0x1C; <=????
Help

1013C677 68 C0C03310 PUSH CShell.1033C0C0 ; ASCII "vertex lock failed"
1013C67C 6A 00 PUSH 0
1013C67E 6A 6E PUSH 6E
1013C680 6A 1D PUSH 1D
1013C682 E8 598FF5FF CALL CShell.100955E0
1013C687 83C4 10 ADD ESP,10
1013C68A C3 RETN
1013C68B CC INT3
1013C68C CC INT3
1013C68D CC INT3
1013C68E CC INT3
1013C68F CC INT3
1013C690 803D 74633910 FF CMP BYTE PTR DS:[10396374],0FF
1013C697 74 36 JE SHORT CShell.1013C6CF
1013C699 803D 81633910 00 CMP BYTE PTR DS:[10396381],0
1013C6A0 75 2D JNZ SHORT CShell.1013C6CF
1013C6A2 6A 0B PUSH 0B
1013C6A4 E8 A732F5FF CALL CShell.1008F950
1013C6A9 83C4 04 ADD ESP,4
1013C6AC 85C0 TEST EAX,EAX
1013C6AE 74 1F JE SHORT CShell.1013C6CF
1013C6B0 0FBE0D 74633910 MOVSX ECX,BYTE PTR DS:[10396374]
1013C6B7 8B15 70C4B010 MOV EDX,DWORD PTR DS:[10B0C470]
1013C6BD 69C9 20040000 IMUL ECX,ECX,420
1013C6C3 8D4C11 06 LEA ECX,DWORD PTR DS:[ECX+EDX+6]
1013C6C7 51 PUSH ECX
1013C6C8 8BC8 MOV ECX,EAX
1013C6CA E8 F1C0F2FF CALL CShell.100687C0
1013C6CF C3 RETN
1013C6D0 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]
1013C6D4 50 PUSH EAX
1013C6D5 B9 5C633910 MOV ECX,CShell.1039635C
1013C6DA E8 D1E8ECFF CALL CShell.1000AFB0
1013C6DF A1 C8EE3910 MOV EAX,DWORD PTR DS:[1039EEC8]
1013C6E4 8D88 C8600000 LEA ECX,DWORD PTR DS:[EAX+60C8]
1013C6EA 890D 70C4B010 MOV DWORD PTR DS:[10B0C470],ECX
1013C6F0 8A90 C4600000 MOV DL,BYTE PTR DS:[EAX+60C4]
1013C6F6 05 38010000 ADD EAX,138
1013C6FB 8815 58633910 MOV BYTE PTR DS:[10396358],DL
1013C701 A3 74C4B010 MOV DWORD PTR DS:[10B0C474],EAX
1013C706 C3 RETN
1013C707 CC INT3
1013C708 CC INT3
1013C709 CC INT3
1013C70A CC INT3
1013C70B CC INT3
1013C70C CC INT3
1013C70D CC INT3
1013C70E CC INT3
1013C70F CC INT3
1013C710 53 PUSH EBX
1013C711 56 PUSH ESI
1013C712 8B7424 0C MOV ESI,DWORD PTR SS:[ESP+C]
1013C716 33C9 XOR ECX,ECX
1013C718 8D46 12 LEA EAX,DWORD PTR DS:[ESI+12]
1013C71B 8908 MOV DWORD PTR DS:[EAX],ECX
1013C71D 8948 04 MOV DWORD PTR DS:[EAX+4],ECX
1013C720 8948 08 MOV DWORD PTR DS:[EAX+8],ECX
1013C723 66:8948 0C MOV WORD PTR DS:[EAX+C],CX
1013C727 0FBE0D 74633910 MOVSX ECX,BYTE PTR DS:[10396374]
1013C72E 8B15 70C4B010 MOV EDX,DWORD PTR DS:[10B0C470]
1013C734 69C9 20040000 IMUL ECX,ECX,420
1013C73A 57 PUSH EDI
1013C73B 8B3D 9C543110 MOV EDI,DWORD PTR DS:[1031549C] ; MSVCR80.strncpy
1013C741 6A 0D PUSH 0D
1013C743 8D4C11 06 LEA ECX,DWORD PTR DS:[ECX+EDX+6]
1013C747 51 PUSH ECX
1013C748 50 PUSH EAX
1013C749 33DB XOR EBX,EBX
1013C74B FFD7 CALL EDI
1013C74D 885E 1F MOV BYTE PTR DS:[ESI+1F],BL
1013C750 8A15 74633910 MOV DL,BYTE PTR DS:[10396374]
1013C756 8856 21 MOV BYTE PTR DS:[ESI+21],DL
1013C759 0FBF05 76633910 MOVSX EAX,WORD PTR DS:[10396376]
1013C760 8946 2C MOV DWORD PTR DS:[ESI+2C],EAX
1013C763 8A0D 7E633910 MOV CL,BYTE PTR DS:[1039637E]
1013C769 884E 3D MOV BYTE PTR DS:[ESI+3D],CL
1013C76C 8B15 78633910 MOV EDX,DWORD PTR DS:[10396378]
1013C772 8956 40 MOV DWORD PTR DS:[ESI+40],EDX
1013C775 A1 A8EE3910 MOV EAX,DWORD PTR DS:[1039EEA8]
1013C77A 8906 MOV DWORD PTR DS:[ESI],EAX
1013C77C 0FBE0D 74633910 MOVSX ECX,BYTE PTR DS:[10396374]
1013C783 8B15 70C4B010 MOV EDX,DWORD PTR DS:[10B0C470]
1013C789 69C9 20040000 IMUL ECX,ECX,420
1013C78F 8A4411 05 MOV AL,BYTE PTR DS:[ECX+EDX+5]
1013C793 8846 23 MOV BYTE PTR DS:[ESI+23],AL
1013C796 0FB60D 58633910 MOVZX ECX,BYTE PTR DS:[10396358]
1013C79D 51 PUSH ECX
1013C79E E8 9DFEFFFF CALL CShell.1013C640
1013C7A3 83C4 10 ADD ESP,10
1013C7A6 84C0 TEST AL,AL
1013C7A8 74 19 JE SHORT CShell.1013C7C3
1013C7AA 0FB615 58633910 MOVZX EDX,BYTE PTR DS:[10396358]
1013C7B1 A1 70C4B010 MOV EAX,DWORD PTR DS:[10B0C470]
1013C7B6 69D2 20040000 IMUL EDX,EDX,420
1013C7BC 8A4C02 05 MOV CL,BYTE PTR DS:[EDX+EAX+5]
1013C7C0 884E 24 MOV BYTE PTR DS:[ESI+24],CL
1013C7C3 8A15 75633910 MOV DL,BYTE PTR DS:[10396375]
1013C7C9 3A15 74633910 CMP DL,BYTE PTR DS:[10396374]
1013C7CF 75 05 JNZ SHORT CShell.1013C7D6
1013C7D1 895E 48 MOV DWORD PTR DS:[ESI+48],EBX
1013C7D4 EB 0A JMP SHORT CShell.1013C7E0
1013C7D6 0FB605 7C633910 MOVZX EAX,BYTE PTR DS:[1039637C]
1013C7DD 8946 48 MOV DWORD PTR DS:[ESI+48],EAX
1013C7E0 8A0D 80633910 MOV CL,BYTE PTR DS:[10396380]
1013C7E6 884E 4C MOV BYTE PTR DS:[ESI+4C],CL
1013C7E9 8A15 7D633910 MOV DL,BYTE PTR DS:[1039637D]
1013C7EF 8856 3C MOV BYTE PTR DS:[ESI+3C],DL
1013C7F2 A0 74633910 MOV AL,BYTE PTR DS:[10396374]
1013C7F7 3A05 75633910 CMP AL,BYTE PTR DS:[10396375]
1013C7FD 0F94C1 SETE CL
1013C800 80E9 01 SUB CL,1
1013C803 220D 7F633910 AND CL,BYTE PTR DS:[1039637F]
1013C809 885E 4D MOV BYTE PTR DS:[ESI+4D],BL
1013C80C 884E 44 MOV BYTE PTR DS:[ESI+44],CL
1013C80F 80C9 FF OR CL,0FF
1013C812 895E 50 MOV DWORD PTR DS:[ESI+50],EBX
1013C815 380D 75633910 CMP BYTE PTR DS:[10396375],CL
1013C81B 0F84 DD000000 JE CShell.1013C8FE
1013C821 8D46 04 LEA EAX,DWORD PTR DS:[ESI+4]
1013C824 33C9 XOR ECX,ECX
1013C826 8908 MOV DWORD PTR DS:[EAX],ECX
1013C828 8948 04 MOV DWORD PTR DS:[EAX+4],ECX
1013C82B 8948 08 MOV DWORD PTR DS:[EAX+8],ECX
1013C82E 66:8948 0C MOV WORD PTR DS:[EAX+C],CX
1013C832 0FBE15 75633910 MOVSX EDX,BYTE PTR DS:[10396375]
1013C839 8B0D 70C4B010 MOV ECX,DWORD PTR DS:[10B0C470]
1013C83F 69D2 20040000 IMUL EDX,EDX,420
1013C845 6A 0D PUSH 0D
1013C847 8D540A 06 LEA EDX,DWORD PTR DS:[EDX+ECX+6]
1013C84B 52 PUSH EDX
1013C84C 50 PUSH EAX
1013C84D FFD7 CALL EDI
1013C84F 885E 11 MOV BYTE PTR DS:[ESI+11],BL
1013C852 0FB605 75633910 MOVZX EAX,BYTE PTR DS:[10396375]
1013C859 8846 20 MOV BYTE PTR DS:[ESI+20],AL
1013C85C 0FBE0D 75633910 MOVSX ECX,BYTE PTR DS:[10396375]
1013C863 8B15 70C4B010 MOV EDX,DWORD PTR DS:[10B0C470]
1013C869 69C9 20040000 IMUL ECX,ECX,420
1013C86F 0FB64411 05 MOVZX EAX,BYTE PTR DS:[ECX+EDX+5]
1013C874 8846 22 MOV BYTE PTR DS:[ESI+22],AL
1013C877 A1 A8EE3910 MOV EAX,DWORD PTR DS:[1039EEA8]
1013C87C 83C4 0C ADD ESP,0C
1013C87F 32C9 XOR CL,CL
1013C881 83F8 05 CMP EAX,5
1013C884 74 0A JE SHORT CShell.1013C890
1013C886 83F8 0C CMP EAX,0C
1013C889 74 05 JE SHORT CShell.1013C890
1013C88B 83F8 0E CMP EAX,0E
1013C88E 75 24 JNZ SHORT CShell.1013C8B4
1013C890 0FBE15 74633910 MOVSX EDX,BYTE PTR DS:[10396374]
1013C897 A1 70C4B010 MOV EAX,DWORD PTR DS:[10B0C470]
1013C89C 69D2 20040000 IMUL EDX,EDX,420
1013C8A2 8B4402 14 MOV EAX,DWORD PTR DS:[EDX+EAX+14]
1013C8A6 3BC3 CMP EAX,EBX
1013C8A8 74 0A JE SHORT CShell.1013C8B4
1013C8AA 3898 63E90000 CMP BYTE PTR DS:[EAX+E963],BL
1013C8B0 74 02 JE SHORT CShell.1013C8B4
1013C8B2 B1 01 MOV CL,1
1013C8B4 A1 78633910 MOV EAX,DWORD PTR DS:[10396378]
1013C8B9 83F8 01 CMP EAX,1
1013C8BC BA 68000000 MOV EDX,68
1013C8C1 75 09 JNZ SHORT CShell.1013C8CC
1013C8C3 C746 28 64000000 MOV DWORD PTR DS:[ESI+28],64
1013C8CA EB 1E JMP SHORT CShell.1013C8EA
1013C8CC 83F8 02 CMP EAX,2
1013C8CF 75 09 JNZ SHORT CShell.1013C8DA
1013C8D1 C746 28 65000000 MOV DWORD PTR DS:[ESI+28],65
1013C8D8 EB 10 JMP SHORT CShell.1013C8EA
1013C8DA 3ACB CMP CL,BL
1013C8DC 75 09 JNZ SHORT CShell.1013C8E7
1013C8DE C746 28 67000000 MOV DWORD PTR DS:[ESI+28],67
1013C8E5 EB 03 JMP SHORT CShell.1013C8EA
1013C8E7 8956 28 MOV DWORD PTR DS:[ESI+28],EDX
1013C8EA 833D A8EE3910 05 CMP DWORD PTR DS:[1039EEA8],5
1013C8F1 75 51 JNZ SHORT CShell.1013C944
1013C8F3 3ACB CMP CL,BL
1013C8F5 74 4D JE SHORT CShell.1013C944
1013C8F7 5F POP EDI
1013C8F8 8956 28 MOV DWORD PTR DS:[ESI+28],EDX
1013C8FB 5E POP ESI
1013C8FC 5B POP EBX
1013C8FD C3 RETN
1013C8FE 33C0 XOR EAX,EAX
1013C900 8946 04 MOV DWORD PTR DS:[ESI+4],EAX
1013C903 8946 08 MOV DWORD PTR DS:[ESI+8],EAX
1013C906 8946 0C MOV DWORD PTR DS:[ESI+C],EAX
1013C909 66:8946 10 MOV WORD PTR DS:[ESI+10],AX
1013C90D C746 28 66000000 MOV DWORD PTR DS:[ESI+28],66
1013C914 884E 22 MOV BYTE PTR DS:[ESI+22],CL
1013C917 833D A8EE3910 0C CMP DWORD PTR DS:[1039EEA8],0C
1013C91E 75 24 JNZ SHORT CShell.1013C944
1013C920 0FBE0D 74633910 MOVSX ECX,BYTE PTR DS:[10396374]
1013C927 8B15 70C4B010 MOV EDX,DWORD PTR DS:[10B0C470]
1013C92D 69C9 20040000 IMUL ECX,ECX,420
1013C933 8B4411 14 MOV EAX,DWORD PTR DS:[ECX+EDX+14]
1013C937 3BC3 CMP EAX,EBX
1013C939 74 09 JE SHORT CShell.1013C944
1013C93B 8A80 63E90000 MOV AL,BYTE PTR DS:[EAX+E963]
1013C941 8846 46 MOV BYTE PTR DS:[ESI+46],AL