Retrieving CShell.dll for SuddenAttack(NA)
General Fact
The CShell.dll is packed in some file so you cannot easily access it.
I am here to spread the wisdom to you guys by guiding you step by step.
SA(NA) File Info
suddenattack.exe <= Packed with Themida.
Modified entry point to prevent PEiD from easily detecting it's encryption.
launcher.exe <= Packed with Themida.
Modified entry point to prevent PEiD from easily detecting it's encryption.
IsDebuggerPresent checks done by Themida.
Download / Necessary Files
GVI.dat
*Attached
Step 1. Download and put the GVI.dat in the SA(NA) folder.
*Usually : C:\Program Files\Gamehi\SuddenAttackNA\
Step 2. Run Launcher.exe and wait for the updating to reach 'Creating resource files'.
Step 3. When you reach 'Creating resource files', go to your temp folder.
*Run->%temp%
Step 4. Set the organization to 'Date modified' and look for a random 8 digit letter folder that was created the day you do this.
Step 5. Click in it and and you'll see some things like 'game','gvi.dat', etc.
Step 6. Click on 'game' folder and you'll see a bunch of folders and files.
Step 7. There should be 'cshell.dll', 'clientfx.fxd', 'cres.dll', etc.
Step 8. Now go grab that CShell.dll and whatever that you think will be important.
Congratulations, you have grabbed the CShell.dll
Mind you, they are packed. That's your problem, not mine.
Created by V3CT0R of MPGH
Ryan's edit:
Scans:
http://virscan.org/report/d1d359911c...9054a28dd.html
http://www.virustotal.com/analisis/9...b5e-1279898348
GVI.rar
Originally Posted by V3CT0R
