Attaching ollydbg to Engine.exe

[qwerty01]

Hello, i have noticed quite a bit of anti-reverse engineering added in to CA, the one i'm having trouble with is the privilege level of CA, it seems to elevate itself to system level or something...whenever i try to attach (or get any process info) it gives me Access Denied even when run as administrator

Any ideas for how to elevate ollydbg or make it able to attach to engine.exe?

[EDIT]
accidentally put it in the wrong section, if a mod could move plox

[yodaliketaco]

Very simple. Write a dll that creates a messagebox in the main thread. While the messagebox is up, the execution of engine.exe is on hold, so you can attach olly.

[qwerty01]

already tried that
it seems they check for (or attempt to attach) another debugger before running engine -- it doesn't run correctly, and nothing is unpacked

[KawaiiSlut]

already tried that
it seems they check for (or attempt to attach) another debugger before running engine -- it doesn't run correctly, and nothing is unpacked

start it when engine.exe is on hold.

[qwerty01]

start it when engine.exe is on hold.

you just repeated what yodaliketaco said

once engine initializes, it can't be suspended, and if you attach it at initialization, it doesn't run correctly

[qwerty01]

I've noticed that you cannot attach it after all it's anti-hack stuff loads...

[Skaterforeva1]

its patched u cant attach it just dump cshell and then use ollydbg

[qwerty01]

you can't patch something that controls control flow...
but it sounds like it'd be too much work to bypass it =/

[flameswor10]

But you need Egnine.exe for some addresses

[qwerty01]

But you need Egnine.exe for some addresses

yea that's why i want to know how to attach it =/
seems like no one knows without dumping =/
and since i'm 64 bit i can't dump =/