[Request / Release] CShell Dump

Posts 15 of 5 · Page 1 of 1
[Request / Release] CShell Dump
Can any please provide me latest CShell Dump as I run a x64 system, I did how ever manage to dump Engine without any problems but at the time of dumping Engine.exe the CShell module had yet to be loaded into memory. download below for current Engine.exe dump.
Quote Originally Posted by Departure View Post
Can any please provide me latest CShell Dump as I run a x64 system, I did how ever manage to dump Engine without any problems but at the time of dumping Engine.exe the CShell module had yet to be loaded into memory. download below for current Engine.exe dump.
Create new thread, wait for CShell to load, use Suspendthread with Thread32Next, then attach SabreGold, and dump.
First off Wrong Section. This thread Belongs in the Coding Help & Discussions

@Polo
@Drake

Can you move this thread to its appropriate Place ?
Get 2 virusscans
@poplm2

I have done that, I made a dll that suspends Engine.exe Pid once CShell is loaded into memory, But it seems I can not attach to it, I think Hackshield protects it before CShell is loaded, I have no problems attaching or dumping to Engine.exe before CShell is loaded, but once Cshell is loaded then you can not attach to Engine. MY theory is hacksheild does something to protect Engine before Cshell is loaded
Posts 15 of 5 · Page 1 of 1

Post a Reply

Similar Threads

Tags for this Thread

None

Need help?