| View previous topic :: View next topic |
| Author |
Message |
fffffaaaaa
How do I cheat?
![]() Reputation: 0
Joined: 20 Nov 2012
Posts: 7
|
 Posted: Tue May 17, 2016 2:05 pm Post subject: why some exes are very different from assembly in memory? |
 |
|
Hi,
Some exe, e.g. re0hd.exe from resident evil hd remastered, at the sections, i cannot find any assembly code that corresponds to whatever loaded into the memory when the exe was invoked. The hex numbers in the exe do not seem like valid instructions at all.
Could anyone share some explanations? Thanks!
|
|
| Back to top |
|
 |
Dark Byte
Site Admin
 Reputation: 470
Joined: 09 May 2003
Posts: 25812
Location: The netherlands
|
| Posted: Tue May 17, 2016 2:21 pm Post subject: |
|
|
perhaps it's compressed, or encoded, and only extracted/decoded when the exe is being run
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
|
atom0s
Moderator
 Reputation: 205
Joined: 25 Jan 2006
Posts: 8587
Location: 127.0.0.1
|
| Posted: Tue May 17, 2016 2:46 pm Post subject: Re: why some exes are very different from assembly in memory |
|
|
| fffffaaaaa wrote: | Hi,
Some exe, e.g. re0hd.exe from resident evil hd remastered, at the sections, i cannot find any assembly code that corresponds to whatever loaded into the memory when the exe was invoked. The hex numbers in the exe do not seem like valid instructions at all.
Could anyone share some explanations? Thanks! |
re0hd.exe is packed with SteamStub protection. SteamStub protects the executable as a means of DRM by encrypting the .text section of the file and adding some other layers of things. The entry point is overwritten and placed inside of a custom injected .bind section that holds the 'unpacker' code to rebuild the executable at runtime as well as ensure you are running Steam and own the game etc.
You can check out my Steamless project to unpack it:
https://gitlab.com/atom0s/Steamless
_________________
- Retired. |
|
| Back to top |
|
|
fffffaaaaa
How do I cheat?
![]() Reputation: 0
Joined: 20 Nov 2012
Posts: 7
|
| Posted: Tue May 17, 2016 9:49 pm Post subject: Re: why some exes are very different from assembly in memory |
|
|
| Thanks!! I'll give it a try.
|
|
| Back to top |
|
|
STN
I post too much
 Reputation: 43
Joined: 09 Nov 2005
Posts: 2676
|
| Posted: Wed May 18, 2016 8:05 am Post subject: |
|
|
Unless the game generates code at runtime the code might mover but you can still find it in exe and mem. I dont remember any re game doing that but if its the protection like wiccaan said then yea
_________________
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
