Post by £åߥ®Ñth on Jan 27, 2008 15:03:27 GMT -5
MSN_Messenger_Live v 8.1 (Build 8.1.0178.00)
Hacking Msn Live so you can run more then 1 instance of the application.
This can also be done to games to achieve the same result.
Course it can be a little different then doing msn.
We will use the step method to find out where we need to set a break point.
0. Study the target. We know when you try and run a second MSn you get a flash of the window in the toolbar. basically thats the message saying you have it running already.
1. Run msn live. * You dont have to log in, just have 1 running.
2. Open second one in ollydbg.
3. Use F8 to step through till you get the flashing window. *This gives you and idea where in the code things start to go wrong.
4. When you inspect the code in this location you can see an api used. "CreateEventA"
5. Looks interesting so we set a break on it. "F2"
6. Run olly and see if we flash before the break or after it.
Image of the location.
So from the break you can step to see where it goes wrong.
This is the cmp that you should alter. If it is equal then the JE after it will jump. Eax in registers window is 0B7
Change 0B7 to anything, for example cmp eax,0C7 <-- Now it is not equal.
Here is your JE, you can alter this to get the job done as well. Change JE to JNZ or alter bytes 84 to 85. Results are the same.
After one or the other has been altered you can run 2 instances of msn.
Hacking Msn Live so you can run more then 1 instance of the application.
This can also be done to games to achieve the same result.
Course it can be a little different then doing msn.
We will use the step method to find out where we need to set a break point.
0. Study the target. We know when you try and run a second MSn you get a flash of the window in the toolbar. basically thats the message saying you have it running already.
1. Run msn live. * You dont have to log in, just have 1 running.
2. Open second one in ollydbg.
3. Use F8 to step through till you get the flashing window. *This gives you and idea where in the code things start to go wrong.
4. When you inspect the code in this location you can see an api used. "CreateEventA"
5. Looks interesting so we set a break on it. "F2"
6. Run olly and see if we flash before the break or after it.
Image of the location.
So from the break you can step to see where it goes wrong.
This is the cmp that you should alter. If it is equal then the JE after it will jump. Eax in registers window is 0B7
Change 0B7 to anything, for example cmp eax,0C7 <-- Now it is not equal.
Here is your JE, you can alter this to get the job done as well. Change JE to JNZ or alter bytes 84 to 85. Results are the same.
After one or the other has been altered you can run 2 instances of msn.