Thread: GameShield Manual Unpacking and Modifying Licenses

Manual unpacking of GameShield v4.5

Author: SSlEvIN [ARTeam]

Document format : PDF

Table of Contents

Verification
1. Manual unpacking of GameShield v4.5

• 1.1. Abstract
• 1.2. Targets
• 1.3. Tools used

2. General unpacking approach for all GameShield targets

• 2.1. At first glance (nothing important, but nice to know)
• 2.2. Unpacking it (at last...)
• 2.3. Dumping – (P)assion (A)ccording to (ST.) pe_h(E)ader
• 2.4. Fixing imports
• 2.5. Dump/Fix GameShield BuyOnly targets
• 2.6. Playing GameShield targets "for this execution only"

3. Conclusions

4. Greetings

Additional Stuff in Tutorial

CoA_DLL.dll is GameShield protector dll extracted and rebuilded from the game Call of Atlantis, thus this somewhat weird name.

Modifying GameShield Licenses

Author: Nieylana [ARTeam]

Document format : PDF

Table of Contents

1. Modifying GameShield Licenses

• 1.1. Abstract
• 1.2. Targets
• 1.3. Tools Used

2. Reversing the Shell

• 2.1. Finding/Dumping Protection DLL
• 2.2. Analyzing DLL
• 2.3. Recap Attack Method

3. Intercepting Information

• 3.1. Find License File Password
• 3.2. Investigating Blowfish
• 3.3. Decrypt Key Problem (and solution)

4. License Modification

• 4.1. Decrypt License Data
• 4.2. Making Changes
• 4.3. Repacking License

5. Final Thoughts

6. Greetings

Additional Stuff in Tutorial

GameShield License Decryptor
ZlibTool - Packer/unpacker for zlib 1.1.4
Simple Target for Training