[TUT]unpack cshell.dll
[TUT]unpack cshell.dll
We are going to unpack cshell.dll
First of al we need to load cshell.dll in to an other proces.
We do this becouse the we don't need to unpack it manualy, and this is an easy way.
So we need to make a script that loads cshell.dll we can do that easy with c++:
Complire and put it in your crossfire map.
Add OllyDbg PE Dumper to Ollydbg (Or download ollydbg below (in the file.rar))
Open the script.
If you see that it is loaded open ollydbg.
Klik on file, attach. Go to the procces from the program you made.
Go to plugin and click on Olly PE Dumper, make a Dump of proces.
In the drop down menu click on cshell.
Click on Dump.
Save it as a .dll
Close your program to load cshell.dll
open the .dll you dumpt. And that is your unpackt dll
If you don't know how to do this, watch the video. (online in a few minits)
For ollydbg + PE Dumper
And loadlibarary script:
First of al we need to load cshell.dll in to an other proces.
We do this becouse the we don't need to unpack it manualy, and this is an easy way.
So we need to make a script that loads cshell.dll we can do that easy with c++:
Code:
#include "windows.h"
#include <iostream>
int main()
{
DWORD err;
HINSTANCE hDLL = LoadLibrary("CShell.dll"); // Handle to DLL
if(hDLL != NULL) {
printf("Library has been loaded\n");
}
else {
err = GetLastError();
printf("Couldn't load dll\n");
}
system("pause");
return 0;
}
Add OllyDbg PE Dumper to Ollydbg (Or download ollydbg below (in the file.rar))
Open the script.
If you see that it is loaded open ollydbg.
Klik on file, attach. Go to the procces from the program you made.
Go to plugin and click on Olly PE Dumper, make a Dump of proces.
In the drop down menu click on cshell.
Click on Dump.
Save it as a .dll
Close your program to load cshell.dll
open the .dll you dumpt. And that is your unpackt dll
If you don't know how to do this, watch the video. (online in a few minits)
For ollydbg + PE Dumper
And loadlibarary script:
You da man bro 
i was having a hard time figuring this out thanks ;D
i was having a hard time figuring this out thanks ;D
Thanks!
/mgs2short
/mgs2short
If you know how it needs to be done, it's very easy :P
But it took long before I knew how to do it :P
But it took long before I knew how to do it :P
You have my gratitude!
I'll be tinkering this in a few...
I'll be tinkering this in a few...
nice job very helpful,.
Very nice tutorial.
I politely request the mods to sticky this thread. It'll be useful to some and for future development.
Thanks.
Thanks.
i havent understand it -.-
What do you don't understand?
What it is:
You can find PTC commands and more in Cshell.dll
How to unpack?
What it is:
You can find PTC commands and more in Cshell.dll
How to unpack?
i have a problem with Olly.
in your Vido you have plugin but i haven it why?
in your Vido you have plugin but i haven it why?
Originally Posted by lauwy
Add OllyDbg PE Dumper to Ollydbg (Or download ollydbg below (in the file.rar))
Originally Posted by lauwy
/to short mssg
your the 
Np 
You can also download the plugin from internet
You can also download the plugin from internet
Originally Posted by lauwy
Np
You can also download the plugin from internet
You can also download the plugin from internet
its doeasent work
This thread is closed for replies.
