Cheat Engine

[supercharger]

some dll/exe are compressed and probably encrypted, and they are not compressed by common softwares such as UPX/ASPACK ...
although i can modify codes in runtime, but i don't want that. what i want is to modify these dll's permanently.
in this case, where should i start in order to hack these dll's ?

[blitz02]

Usually detect first what packer used on the exe/dll.
Use PeID to check it.
After you see what kind of packer was used, search for its corresponding unpacker. There are lots of unpacker spread out on the net.
Finally, if you can't see any packer name and still the size is (PACKED)
means that the packer used was kinda like THEMIDA or something like that.
AFAIK THEMIDA is the first and #1 Packer now.
Which means updated packer and an unpacker will be months before a release of one.

In your case, if you don't know these kind of things. Then unpacking a paid packer will be too far for you. ^^

[supercharger]

yeah, thanks.
in this situation, i prefer the other ways. hacking these compressed DLL is too difficult.

[STN]

you can usually find unpackers for basic packers such as upx/fsg etc but for professional protectors such as aspr or themida, you'd need to manually defeat it. It would be tough to find a tutorial on how to do that for recent releases and unpackers are usually non-existent for these.

I don't know your skill level but if you are a newbie when it comes to this, your best choice is to hack it run-time. Unpacking the dll maybe difficult depending on the packer used, you should check it with PEiD.

I am guessing the dll your trying to hack is just packed and not protected with any professional protector because if it was, you won't be able to attach to it at run-time. They usually contain anti-debug code which will throw you off right away you attach. Unless your using some anti-anti-debug plugins(olly)/tools.

Hope it helps.

[goosenp]

There is something better than peid its called protection id you can get it by googling the name (I am not allowed to post link yet)

It works better than peid because its made to detect protetion and encryption.

[atom0s]