[Solved] Dump CSHELL ?

Dump CSHELL ?

How to properly dump CSHELL ??
Cuz I use OllyDBG Pe Dumper plugin and the file just goes ape shit.
Still doesn't show anything cuz it doesn't load the CSHELL.dll >.<
Tips?

I released a program to dump it, just search for it cant find it atm

Originally Posted by Ch40zz-C0d3r

I released a program to dump it, just search for it cant find it atm

If that works, could you make 1 for District 187 ??
I'm gonna need to DUMP the .exe and a few .dll's from it.
Pretty much same as Combat Arms.
Same engine anyways. xD

- Cheers

Just load the dll via LoadLibrary API and then dump it from your external program without any anticheats attached

Originally Posted by Ch40zz-C0d3r

Just load the dll via LoadLibrary API and then dump it from your external program without any anticheats attached

I tried that, but whenever I try to hook OllyDbg to my little external program.
It just terminates the process.
Not allowing me to DUMP the module CShell.
Crashe's saying .. ERROR_ACCESS_DENIED.
Any Ideas?

Trying it on, "CShell.dll".
From Combat Arms just to test.

Originally Posted by lunatik21

I tried that, but whenever I try to hook OllyDbg to my little external program.
It just terminates the process.
Not allowing me to DUMP the module CShell.
Crashe's saying .. ERROR_ACCESS_DENIED.
Any Ideas?

Trying it on, "CShell.dll".
From Combat Arms just to test.

Just Load CShell throw perxor any good injector then dump it

@lunatik21

Scan 1 -> Load Modules + PETools

Scan 2 -> Load Modules + PETools

//Aproved ?

@BACKD00R -> radical
@Flengo
@Genesis
@YellowFever

Load_mpgh.net.rar202 KB · 62 downloads 2/46 malicious

Download & Thanks

Originally Posted by experthack

@lunatik21

Scan 1 -> Load Modules + PETools

Scan 2 -> Load Modules + PETools

//Aproved ?

@BACKD00R -> radical
@Flengo
@Genesis
@YellowFever

Still get the "Error Success" and can't proper dump.
Strings are still Encrypted.

Edit:
Got it to work.
Was just missing the Dll's.
So mine works to now, Thank you a bunch!

You should have released that in the main section

Solved & Closed.

SolvedDump CSHELL ?

Similar Threads

Tags for this Thread