Cheat Engine

Euphorical · Cheater Reputation: 9 Joined: 17 Feb 2008 Posts: 35

can you reverse this for me like you did with that runescape account grabber

http://xchacks.net/

its here
http://www.mediafire.com/?shgesph03skm8h5

paupav · Posted: Sun Jun 10, 2012 5:14 pm Post subject:

Is that hack free?

Euphorical · Cheater Reputation: 9 Joined: 17 Feb 2008 Posts: 35

M. · Posted: Sun Jun 10, 2012 5:22 pm Post subject:

paupav · Posted: Sun Jun 10, 2012 5:25 pm Post subject:

Lol they patched it fast. they say that it worked on 6.6.2012... is combat arms still crappy game full of hackers as it used To be?

Fafaffy · Cheater Reputation: 65 Joined: 12 Dec 2007 Posts: 28

Too lazy to reverse more, but this is a unique virus. It's doing injection of some sort, and I can't figure it out. I ran this in sandboxie and it didn't drop any files, but it does start with like 4 processes which are sister threaded for persistence.

Here's practically 80% of the code in the program that I found. Too lazy to continue

Also, the message box is the decrypted code of that encrypted message at the top

PUSHEAX_PUSHEAX · Posted: Sun Jun 10, 2012 11:44 pm Post subject:

Can we get some Olly in da building. I wish I could use Olly Sad

Cryoma · Posted: Mon Jun 11, 2012 12:00 am Post subject:

wat
olly is like ce, you just target an exe and there you go

PUSHEAX_PUSHEAX · Posted: Mon Jun 11, 2012 12:55 am Post subject:

Slugsnack · Posted: Mon Jun 11, 2012 1:05 am Post subject:

ollydbg is useless on .net applications because you'll spend more time reversing the .net framework than on the cil which is what you should be interested in. it's the equivalent of disassembling a java program, instead of decompiling it.
cryoma is just useless

also what the fuck is sister threaded supposed to mean lmfao

Fafaffy · Cheater Reputation: 65 Joined: 12 Dec 2007 Posts: 28

Slugsnack · Posted: Mon Jun 11, 2012 1:19 am Post subject:

i have never encountered that term before and google doesn't turn up anything relevant either. where did you pick up such an obscure term? why would it be called a sister thread? this sort of thing can be referred to as a supervisor process instead though even that is not common

Fafaffy · Cheater Reputation: 65 Joined: 12 Dec 2007 Posts: 28

Slugsnack · Posted: Mon Jun 11, 2012 1:23 am Post subject:

it's a dumb terminology because thread suggests it is part of the same process

Cryoma · Posted: Mon Jun 11, 2012 1:39 am Post subject: