I have downloaded a nice D3D hack from another website, it is made by Simpsom. I am trying to hex edit to remove the site (with HXD) it came from so I could re-post on MPGH. I followed all of the Hex editing rules including the stuff about having the same number of letters. However IF I change just one letter say from a G to a M I get file is corrupted and may be a virus upon injecting. I figured there must be some type of a check sum type thing checking to see if the credits were changed? My next Idea was to unpack and open with Microsoft Visual C # 2010 express. I checked to see if the hack was packed, however according to Pied .95 the hack was not packed. So I proceeded to google something to unpack a dll. I saw that HxD could export to microsoft C and C # however when I opened them I saw no addies or anything remotely similar to a hack. Then I downloaded .NET reflector 7.6 exported a whol bunch of files and opened them with C#2010. I could find simpsom anywhere in any file so I did something wrong I guess. Aslo couldnt find the noraml setup of a hack u know DWORD and all that stuff ( unless it's a different language.
Pe explorer Found some interesting stuff
the credits are on 2 different locations I don't know if this is normal
10007108 53696D70736F6E733220+ db '
(I added the stars)
* Note this PE explorer looks real useful are there any tutorials for it? With the intent of hacking?
Also some program said it was compiled with . Net something.
OK so can anyone help me with removing the the website where it comes from. NOTE in game when u open the menu that where the simpsom and NET thing shows there is no popup when the hack injects except something about a unregistered version on VM somin.