00408090 seems to be the address that hackshield and engine.exe calls in HSUpdate
Printable View
00408090 seems to be the address that hackshield and engine.exe calls in HSUpdate
I have gotten Engine.exe into a debugger but couldn't do shit all because it was encrypted :(
i can get it in and its readable but i can only get the first few lines
https://img385.imageshack.us/img385/3292/engine.jpg
i can get in fully open in another debuger but the debugger crashes the moment i try to copy the code to a text file im still working on a way to grab it
ok u guys i tried to upload the debugger here that will work on engine.exe but it keep failing so just google this
"Debuggy By Vanja Fuckar"
and u will find the debuger that works
I have tried opening it with Visual Studio but no luck
I will try some other debuggers, hopefully I will find one the works
i am still confused what are the attachments suposto do? oh btw ur awsome lolz
park the reason i didnt link debuggy is cause external links are not allowed, i would edit ur post and remove the link so u dont get possibly banned.
Sorry i didn't know that.
So you are opening it in visual studio or something?
Getting local time, maybe set back the timers and HS would not update? Just throwing a suggestion.Code:0040AFBE |. 50 PUSH EAX ; /pLocaltime
0040AFBF |. FF15 A0514100 CALL DWORD PTR DS:[<&KERNEL32.GetLocalTi>; \GetLocalTime
...
0040B037 |. 50 PUSH EAX ; /pLocaltime
0040B038 |. FF15 A0514100 CALL DWORD PTR DS:[<&KERNEL32.GetLocalTi>; \GetLocalTime
:o i wish i cood code i wood be a happy lil hacker lolz