OllyDbg

[NeoStryker]

Can anyone tell me if there is any way to open Engine.exe in OllyDbg while the game is running?

[Ch40zz-C0d3r]

Get parameters from the launcher using a program which can display startup parameters.
Open Engine.exe in Olly (dont attach, open a new process) and change the startup parameters.
Restart the process and manually bypass HackShield and Blackcypher (nop init call + jump the jne/jnz and mov al,1 + retn for BC).
Now you can run the game for 2 minutes with all debugger functions
Have fun.

[NeoStryker]

Thank you very much! Got the idea! But why two minutes?

[NeoStryker]

Get parameters from the launcher using a program which can display startup parameters.
Open Engine.exe in Olly (dont attach, open a new process) and change the startup parameters.
Restart the process and manually bypass HackShield and Blackcypher (nop init call + jump the jne/jnz and mov al,1 + retn for BC).
Now you can run the game for 2 minutes with all debugger functions
Have fun.

Thank you! But opening Engine.exe by OllyDbg I can not find any string and no intermodular calls!

[Ch40zz-C0d3r]

Thank you! But opening Engine.exe by OllyDbg I can not find any string and no intermodular calls!

2 minutes because hackshield has a heartbeat and will DC you automaticly.
To find strings you have to run it to a certain point becuase the file was packed with winlicense/themida.
Just run it and pause after its unpacked.

[NeoStryker]

2 minutes because hackshield has a heartbeat and will DC you automaticly.
To find strings you have to run it to a certain point becuase the file was packed with winlicense/themida.
Just run it and pause after its unpacked.

[EDITED]

Nice, from what I understand I will make the combat arms start without anti-hack, so I just put mov al, 1 in HS and BC initialization but gives crash on the login screen. I did something wrong?





[OFF TOPIC]
Where can I download your game, "Disbanded"?

[Ch40zz-C0d3r]

[EDITED]

Nice, from what I understand I will make the combat arms start without anti-hack, so I just put mov al, 1 in HS and BC initialization but gives crash on the login screen. I did something wrong?





[OFF TOPIC]
Where can I download your game, "Disbanded"?

Maybe they added more protections to it, make sure ehsvc and blackcipher modules are never even loaded.
If the crash is done by game you might even hook the API's like ExitProcess etc. to stopthe game from doing that or to find returnaddress and patch it manually.

Download: https://ch4ozz-c0d3r.de/Game/
Keep in mind its pre alpha and I dont have any servers open yet. Port is 1001 if you want to open one (UD and TCP)

[NeoStryker]

Maybe they added more protections to it, make sure ehsvc and blackcipher modules are never even loaded.
If the crash is done by game you might even hook the API's like ExitProcess etc. to stopthe game from doing that or to find returnaddress and patch it manually.

Download: https://ch4ozz-c0d3r.de/Game/
Keep in mind its pre alpha and I dont have any servers open yet. Port is 1001 if you want to open one (UD and TCP)

Yes, has a check at login. I think that is related to this address:

0x7E0C08

[Ch40zz-C0d3r]

Well just set it to 1 then within cheat engine? (for freezing it)