Problem with attaching DLL

[micrak]

Version: Season 4.5 (CzF) (1.03h)

[FIXED] 1. When i'am trying to pack main with using MoleBox, it shows an error: main.exe is an invalid executable image -

2. I attached antihack.dll into main.exe by this guide: http://forum.ragezone.com/f196/guide...in-exe-406128/ and when i run for test catastrophe and main antihack deosn't work - also nothin happed when i attach glow.dll (library for changing items colours.

Anybody help?

http://www.speedysha...534776/Main.exe <- clean main

http://www.speedysha...9/Main-nowy.exe <- main after attaching antihack.dll

http://img515.imageshack.us/img515/5048/probav.jpg <- here is screen with my hook code in ollydbg

[MentaL]

[Annaev]

Rebuild PE of main.exe, and it will molebox correct.

---------- Post added at 08:39 PM ---------- Previous post was at 08:31 PM ----------

Use LordPe.
In configs of LordPe> For the Rebuilder.

Rebuilder must have only 1 tick > Realing file... > Normal.

Then open main.exe in LordPe with Func RebuildPE. Done

Your main, now can be moleboxed correctly

[micrak]

i used PErebuilder with no effect

i used PE Tools with success - now molebox shows no errors :)

but i still don't know why my hook doesn't work

http://img515.imageshack.us/img515/5048/probav.jpg - this how i hook my dll, any sollution?

[Annaev]

Maybe, your antihack has a Process Address.

Try to add GetProcAddress - Main

[micrak]

I don't know how to check that adress - if you can please give me link to correct antihack which will work at 100% with my main by using method from this guide ( http://forum.ragezone.com/f196/guide...in-exe-406128/ )

[Annaev]

yes, use this guide.

[micrak]

yes, use this guide.

i used but it doesn't work ( my main: http://img515.imageshack.us/img515/5048/probav.jpg )

[Annaev]

nop, you use only LoadLibrary, but put the GetProcAddress too.

Follow this guide

http://forum.ragezone.com/f196/guide...ml#post4803536

[micrak]

I used your guide and when i run main nothing happens

http://img339.imageshack.us/img339/2130/proba2.jpg

I think there is something wrong with my EntryPoint(00876215 - adress of first dll - i show it on this screen) or JMP. There is one more DLL loaded before my hook: http://img43.imageshack.us/img43/7191/proba3.jpg