cshell.dll, blacklisted strings.

Was browsing through cshell.dll in IDA today for fun and found a whole function dedicated to strings associated with hack sites and swear words that they've probably blacklisted including @TokolocoSK

I've blurred out everything else because if I kept them as they were, that'd be considered advertising. I can't post a picture of the function cause it made my IDA lag hard and it took ages for the tab to close.

I wonder how MPGH got there.

pu ta mutha mytit free vip mpgh n0otz

LOL!
ive noticed these once but the list wasnt tha tlong
it mostly just swear words when i saw it

Originally Posted by -Bl00d-

LOL!
ive noticed these once but the list wasnt tha tlong
it mostly just swear words when i saw it

Yeah, there's WAY more, but I obviously can't post all of it.

Nexon hates me

Just disable the function or write a jump and that should solve a lot of detection problems

And Nexon has a lot of weird strings that they check for.

Originally Posted by Flengo

Just disable the function or write a jump and that should solve a lot of detection problems

And Nexon has a lot of weird strings that they check for.

I believe this guy already did that :3

Originally Posted by Shadow`

I believe this guy already did that :3

Yeah I saw that a while ago too.

Not going to look at it, gonna find more in with this. If its derived from a class, there could be more checks in there

Oh well. I'll post it here with a scan once I do.

cshell.dll, blacklisted strings.

Post a Reply

Similar Threads

Tags for this Thread