How would i do this?

08/11/2010 16:13 flamepattern#1
So yeah I know almost nothing about hacking of any sort. Most I've done is debug a few client .exe to make multi clients and that was with a guide telling me how to do it lol. Anyways on to the point I want to make a multi client for cabal north America version. If anyone can point me to a guide on how to do it I would be thankful. I will be using ollydebug on the .exe in the mean time to try and find a way. Oh I don't know if it matters but its protected by game guard rev1563 anyways thanks in advance :D
08/11/2010 16:34 Mr0x90#2
in order to get around some antidebugger tricks, you'd want to
a) use some anti-debugging olly plugin, your best bet is taking one with some kernel mode protection driver
b) crack the antidebugging part on your own

a good starting point to locate the multiclient badboy is to trace to user32.findwindow(W)(A) , breakpoint it and check who called it in the stack
once you get there it's usually just about changing some JNZs to JMPs. no big deal actually.
08/11/2010 16:54 flamepattern#3
thanks i will try and understand what you typed and do what i can :)
08/11/2010 17:01 ms​#4
Quote:
Originally Posted by Mr0x90 View Post
a good starting point to locate the multiclient badboy is to trace to user32.findwindow(W)(A) , breakpoint it and check who called it in the stack
once you get there it's usually just about changing some JNZs to JMPs. no big deal actually.
Additionally, most multiclient protections I've seen use CreateMutex to prohibit multiclienting.
08/12/2010 03:49 flamepattern#5
do any of you think that gameguard would have anything to do with not allowing multi client ?

and would you happen to know a good olly plugin that has what you suggested?
08/12/2010 06:57 wurstbrot123#6
Strong OD
08/12/2010 18:40 Mr0x90#7
Phant0m ain't bad either..

if hard-code-patching the client doesnt do the job for you, you can bypass a few protections by writing a loader to start the actual game client, inject a dll upon startup which freezes the client, patches the multiclient protection and sets a hook to somewhere later in the code. once eip gets there, your hook will unload the dll and the dll is gonna remove all patches again
eZ
08/12/2010 20:53 x]vIrus[x#8
what everyone is telling you: forget it
08/17/2010 17:44 flamepattern#9
i kinda gathered that when i only understood 1/5th of what they were typing :)

well since im an idiot anyone want to do it for me ?