As I was browsing RE related blogs and articles I stumbled upon this gem.
Amazing article that gave me more insight on how to perform more stealthy hooking.
Showing posts with label API. Show all posts
Showing posts with label API. Show all posts
Sunday, April 3, 2016
Wednesday, June 25, 2014
Success, defeated the antidebug of Crysis 3.
Well after a month I finally made progress. Turns out the error code 2001 I was getting was caused by GetTickCount returning 0 or a unreasonable value. After fixing this I got an error code value of 8011, then I patched the ProcessDebugFlags check(0x1f on NtQueryProcessInformation) and the game now runs under a debugger.
Obviously this is good news, but far from the expected result. Where is the VM? What does it do? What kind of anti-dumping techniques are used? Many more questions to be answered.
Obviously this is good news, but far from the expected result. Where is the VM? What does it do? What kind of anti-dumping techniques are used? Many more questions to be answered.
Subscribe to:
Posts (Atom)