11 replies to this topic

[Zero_Cool]

i got 2 files .dll and they are hooked in GS.exe now i need to remove them and its not cracking this 2 dll causing problems so i need to take them out please how can i do that

[WingedPanther]

You're thinking about it backwards. GS.exe is hooking into the dll files, not the other way around. GS.exe is using functions that have their code in those .dll files. If you don't have them, it doesn't know what to do.

If you have the source code for all of them, you can recompile with static linking instead of dynamic linking.

[Zero_Cool]

The GameServer.exe contain the dll files because i know some one and he removed the files from the exe but he wont tell me how :(
and what i have is only .pdb of the exe file that wont help me alot

[Alexander]

Zero_Cool said:

The GameServer.exe contain the dll files because i know some one and he removed the files from the exe but he wont tell me how :(
and what i have is only .pdb of the exe file that wont help me alot

If it really does have a DLL within, then the executable is really a packaged application and not a plain executable. You will have to discover how to unpack it, or prevent the library from being successfully unpacked.

[Zero_Cool]

the exe isnt packed its pure and unmodified

[RhetoricalRuvim]

If they used NASM to make the executable, they might have used the incbin pseudo-instruction to include the DLL.

Executables, including DLLs, start with the 'MZ' word. Maybe you could look into the data section of the executable and find all the 'MZ's and investigate further wich one of those is the start of the DLL.

You can also take a look at this:
PE/COFF Specification

[dargueta]

Zero_Cool: For future reference, EXEs are designed so that they can contain resources, such as icons, string tables, cursors, as well as arbitrary files. It's definitely possible--likely, even--that the DLL is embedded in the EXE, which is what we mean by packed.

To get that DLL out, use Resource Hacker (freeware). It's pretty intuitive and is a lot of fun for messing with your friends' heads when you modify their Microsoft Word. :D

[Zero_Cool]

and how exactly i take out the dll using this ?

[dargueta]

Open the EXE with it and you should see all of the resources it contains in a panel on the left-hand side. Do you see any DLLs in there?

[Zero_Cool]

dargueta said:

Open the EXE with it and you should see all of the resources it contains in a panel on the left-hand side. Do you see any DLLs in there?

all i can see is a lot of folders but no dlls :(

[Alexander]

I am unsure if a DLL can be used as a resource within an existing executable, likely it is placed in to memory or a temporary file every time GS.exe is executed (a packer, this is what it does)

Try to view the dependencies of GS.exe with a dependency viewer (you need to find one online), to see what files it needs to load for what functions you wish to remove - if it lists a DLL that is not a system DLL, then it is likely the one you need to find.

If you could explain further what the two DLLs are doing and why it is causing the problem, it may make more sense, so far we are only guessing on what you are giving us.

Do the DLLs provide authentication functions that you are wanting to remove? How do you know they are there if you cannot see them?

[Zero_Cool]

thats the all thing i do see them in the folder and its **** DLL pure garbage