Cheat Engine

Cryoma · Posted: Thu Sep 18, 2008 6:04 pm Post subject:

It's open to lancing shell.exp so pretty much I just have to partial compile the randomator as 5000.

Noz3001 · Posted: Thu Sep 18, 2008 6:23 pm Post subject:

jackyyll · Posted: Thu Sep 18, 2008 7:37 pm Post subject:

Overload · Posted: Thu Sep 18, 2008 10:17 pm Post subject:

Noz3001 · Posted: Fri Sep 19, 2008 3:08 am Post subject:

DoomsDay · Posted: Fri Sep 19, 2008 1:07 pm Post subject:

The storage of the values is still static, so it was easy to monitor.
All in all, it took me a lot of time to go through it manually, but I finally got it =]
This thing at the end... nasty trick you got there =P

Noz3001 · Posted: Fri Sep 19, 2008 2:29 pm Post subject:

Cryoma · Posted: Fri Sep 19, 2008 3:26 pm Post subject:

Lancing shell.explore is a script that gives you a real time decrypted console of everything going on in an app.
It lets you change certain aspects and re-compile part of that app without decompiling and recompiling the whole thing.
In real time.

Noz3001 · Posted: Fri Sep 19, 2008 5:38 pm Post subject:

krazedkat · Posted: Fri Sep 19, 2008 10:29 pm Post subject:

haha cracked in 5 minutes.

haha01haha01 · Posted: Fri Sep 19, 2008 11:45 pm Post subject:

so, basically, we are supposed to unrandomize the value and always set it 5000?

Noz3001 · Posted: Sat Sep 20, 2008 3:09 am Post subject:

nog_lorp · Posted: Wed Oct 01, 2008 12:51 am Post subject:

Noz where you going? I just started a week and a half ago.

Slightly more on topic: lol, RtlDecodePointer:

Noz3001 · Posted: Wed Oct 01, 2008 3:41 am Post subject:

nog_lorp · Posted: Wed Oct 01, 2008 8:25 pm Post subject:

Interesting, what compiler are you using? It encodes a million pointers and stores them in TLS.

RtlDecodePointer is just funny because it looks like they did

void * RtlDecodePointer(void * ptr) {
__asm {
pop ebp
jmp RtlEncodePointer
}
}

Since they do exactly the same thing (xor'ing the pointer with a random per-process 32 bit mask).