Cheat Engine

azfk · Cheater Reputation: 0 Joined: 26 May 2009 Posts: 37

I've recently unpacked gameguard (I think at any rate) and now i'm wondering how can i decrypt their strings

smartz993 · Posted: Sun Jul 26, 2009 9:19 pm Post subject:

There is one function that is called a ton of times..

it takes one parameter.

Look for calls to 3 functions, whose parameter is a pointer to char buffer, whose first byte is 01.

then load up the file in a program you write, and scan for all the calls, then find the pushes in front, and grab the return from it.

there are your decrypted strings.

azfk · Cheater Reputation: 0 Joined: 26 May 2009 Posts: 37

lol ok, lemme try to straighten the methodology here,

one function is called a lot of times, (simple, will see this function called again and again)

this function takes one parameter, presumably something simple like

smartz993 · Posted: Mon Jul 27, 2009 10:57 pm Post subject:

There are 3 functions which are all called a bunch of times.

Decrypted strings (which are pushed before the calls) all start with the byte 01.

Scan for the calls to these 3 functions, then look for the addresses of the char buffs, and call it yourself. The return pointer will be in eax.

(The way i did it used a function pointer, but the first version used asm)