DetectedDisable hackshield detection.

Posts 115 of 40 · Page 1 of 3
Disable hackshield detection.
This is basicly going to remove hackshield protection over the dragonnest.exe process, so you can screw about with cheatengine.

as it currently is, hackshield will not let you target dragonnest.exe, and will error you out if you attempt to, this guide will make it so we can use cheatengine to hack and mess around with dragonnest.



Most simple hacks from dragonnest are memory-hacking based.

-----------------------------------------------------------------------

Obtain XueTR; a chinese made antirootkit software.

Code:
http://xuetr.com/download/XueTr.zip
Step 1.
Once you have xuetr running, under the default process tab, you're going to select System
Right-click > Threads



Step 2.
Click on 'start module' column to organize > look for eagleNT.sys ( hackshield ) > right-click on one, and click on suspend, and do the same for the other one so that both are suspended.



Step 3.
Go to your dragonnest process > right-click > view handles
Look for the handle ' \device\namedpipe\sfcapi ' and force close it.



Step 4.
once again, right-click on dragonnest process, only this time > View threads
click on start module again to organize, and this time hold ctrl, and left click on all the EhSvc.dll and Force Kill them.



Step 5.
once you have stopped hackshield, now your going to remove their hooks.

click on the 4th tab entitled ' Ring0 Hooks '
on the first 3 tabs, you're going to see red highlighted lines, as shown in the picture.
right-click> and push restore for every red line that you see in all those 3 tabs.




And your done! you can now use cheatengine on dragonnest.exe, and have fun.

Just don't use the built-in speedhack, as the client will detect and still disconnect you, but have fun with memory editing.


----

Don't forget to give thanks.
Don't download this until it's uploaded on MPGH and checked with virus scans.
Does HS block everything from targeting the exe, or just cheat engine?
Quote Originally Posted by Remorse View Post
Does HS block everything from targeting the exe, or just cheat engine?
Should block any hack program or other programs that want to edit it's memory...
Blocks out any memory editing software.

and it's not a virus, lmao. it's an antirootkit.
I've been a member of this site longer than you, I wouldn't just randomly post a virus.
Quote Originally Posted by dark9011 View Post
Blocks out any memory editing software.

and it's not a virus, lmao. it's an antirootkit.
I've been a member of this site longer than you, I wouldn't just randomly post a virus.
Well then you know its nothing personal that's the way this site works. Nothing should be DL'd without a virus scan.
Have u been able to do anything useful with the game with CE? Except speed up the gameplay..
If you have the right offsets and adresses, you can use it for no cooldowns and speed hacking.

Theres a few tutorials in the chinese forums, but I've never bee able to really understand them because of no good translations.
基址:00b6bc40Y :856 (2字节)X :84E (2字节)this DN HACK FOR CN
That's not very helpful.

Theres different base addresses /offsets for each class
XueTR i think only works on 32bits systems.
Know this is silly for a first post, but if you do care to pm me those chinese tuts I can try to translate em , chinese is my second language O.o
If you're curious why I'm interested, its since I enjoy fiddling around on pservers and it would be nice to have a clue on how to start
been lurking for a bit but only just decided to join up O.o
and yes, I'm talking about that one pserver :x
If chinese is your second language,then I'm sure you shouldn't have a hard time finding anything on google or baidu.com
I can find the ones for the official server np, but not sure what to do for the pserver :/ And for some reason I can't hook on to the pserver client with cheat engine so i cant even try to do it myself O_O
(no clue if this is due to the client now being started using a batch file or im just missing something obvious :x)
Posts 115 of 40 · Page 1 of 3
This thread is closed for replies.

Tags for this Thread

None

Need help?