CShell / Engine / EHSvc Dumped - 29/01/2011

Scan CShell:
CShell.rar - Verificador de malware do Jotti
CShell.rar MD5:af94f932c10cfe9dfd8ba767448c0028 - VirSCAN.org 14% Scanner(s) (5/37) found malware!

Scan Engine:
Engine.rar - Verificador de malware do Jotti
Engine.rar MD5:b6b34079b407880c128382838cd68177 - VirSCAN.org 11% Scanner(s) (4/37) found malware!

Scan EHSvc:
EHSvc.rar - Verificador de malware do Jotti
EHSvc.rar MD5:377369980c505215a081ee7a752e3963 - VirSCAN.org Scanners did not find malware!

Engine.rarattachment deleted · 125 downloads before removal

CShell.rarattachment deleted · 125 downloads before removal

EHSvc.rarattachment deleted · 93 downloads before removal

nice thanks for releasing

WHAT DOSE THIS DO?

Originally Posted by yoyoman4567

WHAT DOSE THIS DO?

Jesus christ.

Originally Posted by Disturbed

Jesus christ.

That made me lolz a lil bit

Originally Posted by yoyoman4567

WHAT DOSE THIS DO?

this like unprotect or un wanted file form ca u can use this to and sig scan and make a bypass or learn about the game and how it works

lol @ what does this do XD

i got 1 kinda stupid question myself though...what are a few programs (besides ollydbg) we could use that are just like olly? olly wont open engine on my computer for some reason

Originally Posted by supercarz1991

lol @ what does this do XD

i got 1 kinda stupid question myself though...what are a few programs (besides ollydbg) we could use that are just like olly? olly wont open engine on my computer for some reason

Google 'debuggers dissamblers'.

Originally Posted by supercarz1991

lol @ what does this do XD

i got 1 kinda stupid question myself though...what are a few programs (besides ollydbg) we could use that are just like olly? olly wont open engine on my computer for some reason

I have a cracked version of PE explorer for disassembling attachments.

PE explorer > Olly.
It can open up .dll's by themselves the same way you open an exe.

Originally Posted by Disturbed

I have a cracked version of PE explorer for disassembling attachments.

PE explorer > Olly.
It can open up .dll's by themselves the same way you open an exe.

thanks a lot, i used to have a program called MHS or somethin but lost it in a reformat and don't remember exactly what it was called (i don't believe in backups haha)

You can load dll's in Olly. That's what LoadDLL.exe is for.

Also Olly will open Engine, it's just packed. Select No when it asks for analysis.

Originally Posted by why06

You can load dll's in Olly. That's what LoadDLL.exe is for.

Also Olly will open Engine, it's just packed. Select No when it asks for analysis.

lol PE crashed when i tried to open engine XD

and i get the error

Code:

Unable to start file 'link to engine.exe here'

i don't even get to analysis lol

Valeu alessandro !

belo topico....

What did you use to fix the import address table after dumping?

I just made a dump of Engine and CShell , Tried fixing the IAT with ImportRec without success

Originally Posted by Departure

What did you use to fix the import address table after dumping?

I just made a dump of Engine and CShell , Tried fixing the IAT with ImportRec without success

i believe the fix dump mmbob released fixes that

CShell / Engine / EHSvc Dumped - 29/01/2011

Tags for this Thread