CSHELL ENCRYPTED

Posts 1–8 of 8 · Page 1 of 1
CSHELL ENCRYPTED
I think , there are encrypted , cuz if i pattern scan some bytes code,
it will change !!!
I think post is not clear enough.
How do you open cShell.dll in Ollydbg ?
Maybe you forgot to remove addresses from your byte pattern?
Quote Originally Posted by Diolegend. View Post
I think , there are encrypted , cuz if i pattern scan some bytes code,
it will change !!!
Sometimes it's really complicated doing a byte scan in Olly.
Although some people post their pattern we just can't find them. Try to use IDA
If i use ollydbg to see cshell , it's alright.
If i inject in crossfire , i will get another .. bytes (instruction) and it will change every 0.50 seconds -2 seconds

- - - Updated - - -

So.. i can't create new feature for my hack.
So i think cshell is encrypted with xor or somethings else..
Quote Originally Posted by Diolegend. View Post
If i use ollydbg to see cshell , it's alright.
If i inject in crossfire , i will get another .. bytes (instruction) and it will change every 0.50 seconds -2 seconds

- - - Updated - - -

So.. i can't create new feature for my hack.
So i think cshell is encrypted with xor or somethings else..
It's a little bit complicated to understand what you're trying to say.
But let's understand...

First of all you need to dump cshell and crossfire.exe if u know how to do that it's very simple to do next step in ollydbg.
If you attach crossfire.exe with Crossfire opened it'll change values because they really change all the time.
Please, remember to do a backup with your cshell.dll and crossfire.exe when you dump them
I don't know how to say it on English, so...
В последних обновлениях игры ввели проверку целостности кода. Изменение даже одного байта, если он находится под проверкой, повлечет отключение от сервера в лучшем случае, в худшем бан. Поэтому сейчас почти нереально сделать какие-либо функции для оружия. Почти... Я нашел лазейку. Но делиться пока не собираюсь
Posts 1–8 of 8 · Page 1 of 1

Post a Reply

Similar Threads

Tags for this Thread

None

Need help?