[TUTORIAL] Run more than 1 server on the same machine

Status
Not open for further replies.
Create DLL and Hook Client

PUSH Offeset Name DLL
LoadLibrerayA
JMP EntryPoint
Learn how to leech correct!

[Begin Code Cave] -- Credits: Phail/me for posting this!!!!!!!!!!!!!!!!
Code:

Go to:
004B1FE0 and replace it with:

Code:
004B1FE0     E8 6F500E00    CALL theduel.00597054
004B1FE5     81EC 50040000  SUB ESP,450
[Code Cave] -- Credits: Phail/me for posting this!!!!!!!!!!!!!!!!
Code:

Code:
0059704B   . 53 46 58 2E 64>ASCII "SFX.dll",0
00597053     60             PUSHAD
00597054     68 4B705900    PUSH theduel.0059704B                    ;  ASCII "SFX.dll"
00597059     E8 19AD267C    CALL kernel32.LoadLibraryA
0059705E     85C0           TEST EAX,EAX
00597060     75 0B          JNZ SHORT theduel.0059706D
00597062     58             POP EAX
00597063     A1 601C6400    MOV EAX,DWORD PTR DS:[641C60]
00597068     C3             RETN
00597069     61             POPAD
0059706A     CC             INT3
0059706B     CC             INT3
0059706C     60             PUSHAD
0059706D     6A 00          PUSH 0
0059706F     E8 665D287C    CALL kernel32.ExitProcess
00597074     58             POP EAX
00597075     61             POPAD
 
I converted the ClientHook to VC++ 2005, and now it can't compile due to the CDetour missing stuff.

A mini-tut on how to find hexadecimal (I found this myself while thinking of regedit)
Tutorial said:
Full Credit to: Linear88.

1. Start > Run > regedit
2. Right click > New > DWORD key.
3. Select the option decimal.
4. Type the number you want.
5. Press OK.
6. Copy/Remember the hexadecimal number (excluding 0x0000)
7. Delete the key (since its just useless there).
8. Done.
 
Sorry but it isn't working for me.
As the detoured function is returning to the original one when it's called, it looks like the original function is replacing the parameters returned by the edited one. Sorry if i am saying ****.
 
Status
Not open for further replies.
Back