ExclamationSource code help!! GINIYAT IS NEEDED HERE!

Posts 115 of 28 · Page 1 of 2
Source code help!! GINIYAT IS NEEDED HERE!
well i will release this tut only for noobs who dont belive i found it my self

open your unpacked cshell.dll with olly dbg

right click->search for->binary string and search for

Code:
51 57 68 C9 00 00 00 6A 1C E8 ?? ?? ?? ?? 83 C4 10
of course you are asking me how could i find this string
here it comes:

use a modified version of bypassxtrap to open the game in undetected ollydbg
(which i won't share here, use google)
btw special thanx to ***** for sharing his bypass source

now right click->view->module CShell
and right click->search for->text strings.

go to third location of "ButtonMissionInfo"
and go up and you will find something like this

Code:
CMP EAX, 1C
click on the call before it and press enter to see this
Code:
MOV EAX,DWORD PTR DS:[103466AC]
so we have found the HTR ptr now right click and select find refs->address constant

and select this one:
Code:
MOV DWORD PTR DS:[103466AC],EAX
now go to the top of the function then login
and press HWBP on function
when BP hits make sure that "Hack tool detected" string is in the stack
if not press F9

now right click on first address in stack and select "follow in dissambler"

you can find this code:
Code:
PUSH ECX
PUSH EDI
PUSH 0C9
PUSH 1C
CALL CShell.10076020
ADD ESP,10
highlight this piece of code and right click->binary->binary copy then paste it into afile
and you can see some thing like this:

Code:
51 57 68 C9 00 00 00 6A 1C E8 EF 08 FF FF 83 C4 10
now, as you see the E9 byte is call but called function will change every update
so we change the EF 08 FF FF to ?? ?? ?? ??

every thing we need now is to nop this bytes and the msgbox won't appear

you are happy now? press thanks

@giniyat101
Gini, if you are giniyat202

can you explain in a better way how to get this code? coz i reeally need it

@[[SeXergy]]
Sexergy you know it too, can you explain?

Thanks
this is ASM .. learn it / i dont think giniyat will just give u the code .. he may help you but err idk wait and see
i think i have already told you it is patched. why? cuz i was very noob and made this thread and every one called me leecher anyway.
If I remove hack tool I get disconnected from server but I am working.
Quote Originally Posted by 006B View Post
If I remove hack tool I get disconnected from server but I am working.
Divers, you were away for a long time.
hack Tool detected 2:0 can´t get removed with a normal HTR
Quote Originally Posted by A$IAN View Post

Divers, you were away for a long time.
hack Tool detected 2:0 can´t get removed with a normal HTR
yes u can remove it, but u get DC anyway.
Quote Originally Posted by MightySaa0d View Post
What is ASM?
epic fail how did u code hacks if u dont know what asm means?
OMGz fail is fail ..
ASM = Assembly
Why dont u google it?
Quote Originally Posted by MightySaa0d View Post
i just keep updating offsets
@giniyat101
Don´t tell me to find offsets, you just guess and look for EAX and EBX+anything xD
If you have a little bit knowledge of Assambler you can understand all things better and how cshell works
Quote Originally Posted by A$IAN View Post

Don´t tell me to find offsets, you just guess and look for EAX and EBX+anything xD
If you have a little bit knowledge of Assambler you can understand all things better and how cshell works
agree.
it is 0x864A3 anyway if he wants to test it.
learn Assembly dude
@giniyat101

Man i want to know how you find this addy 0x864A3

with this addy i can keep making my hacks but how u get it? x.x
Posts 115 of 28 · Page 1 of 2
This thread is closed for replies.

Similar Threads

Tags for this Thread

Need help?