search

CodeName-Anti / CrabGame-Cheat

A Cheat for CrabGame by DaniDev.
GNU General Public License v3.0
35 stars 8 forks source link

How did u find the right method? #43

Closed orcun9988 closed 2 years ago

orcun9988 commented 2 years ago

Hello sir, I wonder how do you find the bepinexdetector method?

I'm also love coding mods for example phasmophobia have too bepinex melonloader detections methods too but I can't find the right method in dnspy

orcun9988 commented 2 years ago

I mean https://github.com/CodeName-Anti/CrabGame-Cheat/blob/master/CrabGame%20Cheat/Patches/BepInExDetectionPatch.cs

line 10-15 method string Method_Private_Void_GameObject_Boolean_Vector3_Quaternion_0 how do u know this method prevents melonlader-bepinex etc

CodeName-Anti commented 2 years ago

I searched for any string that has a relation to BepInEx for example: "BepInEx", "winhttp.dll" in IDA and searched their method addresses in the decompiled il2cpp code generated Cpp2IL to find their methodnames.

orcun9988 commented 2 years ago

image 1-) I installed ghidra 2-) I put gameassembly.dll to ghidra then wait 1-2hour to finished decompile 3-) I go file -> parse c source-> add il2cpp.h ( got from Il2CppInspector ) then set parse options = "-DGHIDRA" then I press Parse to program then wait 10mins finished 4-) Opened script manager added il2cpp.py (got from Il2CppInspector ) then run waitied 30mins finished all done

now as u said I searched that names "MelonLoader", "BepInEx" , "winhttp.dll" but it gives me no result

I already know that method in picture ( __405_____10 ) is detection void but when look in there is no string melonloader - bepinex - winhttp.dll- version.dll - plugins etc what can i do ? ( I know becaue another person told me idk how to that person found this but he's right )

CodeName-Anti commented 2 years ago

Well you have to actually use a string search and not search in the method names because they're encrypted. Just google how to do it, I do not have enough experience in Ghidra so I cannot tell you how to do it.

CodeName-Anti commented 2 years ago

You could also try using Cpp2IL and let it generate Assemblies with code in them, then decompile it to a project folder with dnSpy and use something like Notepad++ to find any strings in those files.

orcun9988 commented 2 years ago

still no results probly I need to find cracked ida pro thx anyway u can close this topic I'm very thankful.