OllyDbg
Can anyone tell me if there is any way to open Engine.exe in OllyDbg while the game is running?
HelpOllyDbg
Get parameters from the launcher using a program which can display startup parameters.
Open Engine.exe in Olly (dont attach, open a new process) and change the startup parameters.
Restart the process and manually bypass HackShield and Blackcypher (nop init call + jump the jne/jnz and mov al,1 + retn for BC).
Now you can run the game for 2 minutes with all debugger functions
Have fun.
Open Engine.exe in Olly (dont attach, open a new process) and change the startup parameters.
Restart the process and manually bypass HackShield and Blackcypher (nop init call + jump the jne/jnz and mov al,1 + retn for BC).
Now you can run the game for 2 minutes with all debugger functions
Have fun.
Thank you very much! Got the idea! But why two minutes?
Originally Posted by Ch40zz-C0d3r
Get parameters from the launcher using a program which can display startup parameters.
Open Engine.exe in Olly (dont attach, open a new process) and change the startup parameters.
Restart the process and manually bypass HackShield and Blackcypher (nop init call + jump the jne/jnz and mov al,1 + retn for BC).
Now you can run the game for 2 minutes with all debugger functions
Have fun.
Open Engine.exe in Olly (dont attach, open a new process) and change the startup parameters.
Restart the process and manually bypass HackShield and Blackcypher (nop init call + jump the jne/jnz and mov al,1 + retn for BC).
Now you can run the game for 2 minutes with all debugger functions
Have fun.
Originally Posted by NeoStryker
Thank you! But opening Engine.exe by OllyDbg I can not find any string and no intermodular calls!
To find strings you have to run it to a certain point becuase the file was packed with winlicense/themida.
Just run it and pause after its unpacked.
Originally Posted by Ch40zz-C0d3r
2 minutes because hackshield has a heartbeat and will DC you automaticly.
To find strings you have to run it to a certain point becuase the file was packed with winlicense/themida.
Just run it and pause after its unpacked.
To find strings you have to run it to a certain point becuase the file was packed with winlicense/themida.
Just run it and pause after its unpacked.
Nice, from what I understand I will make the combat arms start without anti-hack, so I just put mov al, 1 in HS and BC initialization but gives crash on the login screen. I did something wrong?
[OFF TOPIC]
Where can I download your game, "Disbanded"?
Originally Posted by NeoStryker
[EDITED]
Nice, from what I understand I will make the combat arms start without anti-hack, so I just put mov al, 1 in HS and BC initialization but gives crash on the login screen. I did something wrong?
[OFF TOPIC]
Where can I download your game, "Disbanded"?
Nice, from what I understand I will make the combat arms start without anti-hack, so I just put mov al, 1 in HS and BC initialization but gives crash on the login screen. I did something wrong?
[OFF TOPIC]
Where can I download your game, "Disbanded"?
If the crash is done by game you might even hook the API's like ExitProcess etc. to stopthe game from doing that or to find returnaddress and patch it manually.
Download: http://ch4ozz-c0d3r.de/Game/
Keep in mind its pre alpha and I dont have any servers open yet. Port is 1001 if you want to open one (UD and TCP)
Originally Posted by Ch40zz-C0d3r
Maybe they added more protections to it, make sure ehsvc and blackcipher modules are never even loaded.
If the crash is done by game you might even hook the API's like ExitProcess etc. to stopthe game from doing that or to find returnaddress and patch it manually.
Download: http://ch4ozz-c0d3r.de/Game/
Keep in mind its pre alpha and I dont have any servers open yet. Port is 1001 if you want to open one (UD and TCP)
If the crash is done by game you might even hook the API's like ExitProcess etc. to stopthe game from doing that or to find returnaddress and patch it manually.
Download: http://ch4ozz-c0d3r.de/Game/
Keep in mind its pre alpha and I dont have any servers open yet. Port is 1001 if you want to open one (UD and TCP)
Code:
0x7E0C08
Well just set it to 1 then within cheat engine? (for freezing it) 
This thread is closed for replies.
