Thread: Bypass HackShield for RO2

Originally Posted by stalefish30

It works perfectly !! Thank You !!

I hope you also share to us how to find the hex values when they update HS. Thanks.

I described the whole process to find the hex values in the first post. So please have a look and read it carefully. There are similarities even when they update the exe's.

Originally Posted by masayoshikun

I described the whole process to find the hex values in the first post. So please have a look and read it carefully. There are similarities even when they update the exe's.

Im sorry sir, im really new into this. Honestly I dont know what to do how to find the hex values. But im a fast learner hope you share it with me. Thank you.

Originally Posted by stalefish30

Im sorry sir, im really new into this. Honestly I dont know what to do how to find the hex values. But im a fast learner hope you share it with me. Thank you.

I have shared all my information for finding hex values on page 1. Please read page 1. I shared it with you and everyone already.

Originally Posted by masayoshikun

I have shared all my information for finding hex values on page 1. Please read page 1. I shared it with you and everyone already.

Last question sir, what software should i use to find the hex values? Because im just oepen rag2.exe with notepad. I dont know what to do sir.. Thanks

---------- Post added at 09:23 PM ---------- Previous post was at 09:12 PM ----------

What im trying to ask sir is where can I find this CODES.

text:00822F44 57 push edi ; hInstance
.text:00822F45 FF D6 call esi ; LoadStringW
.text:00822F47 E8 F8 CD FF FF call sub_81FD44
.text:00822F4C 85 C0 test eax, eax
.text:00822F4E 75 16 jnz short loc_822F66
.text:00822F50 68 80 FD 81 00 push offset TopLevelExceptionFilter ; lpTopLevelExceptionFilter
.text:00822F55 FF 15 44 33 DB 00 call ds:SetUnhandledExceptionFilter
.text:00822F5B 57 push edi ; replace with jmps loc_822F66 (EB09)
.text:00822F5C E8 F8 CD FF FF call sub_81FD59 ; this is hackshield call, nop
.text:00822F61 59 pop ecx ; nop the rest
.text:00822F62 85 C0 test eax, eax ; nop
.text:00822F64 74 BC jz short loc_822F22 ; nop
.text:00822F66
.text:00822F66 loc_822F66: ; CODE XREF: wWinMain(x,x,x,x)+85j game code continues here.
.text:00822F66 53 push ebx
.text:00822F67 FF 15 88 3C DB 00 call ds:__imp_timeGetTime
.text:00822F6D 50 push eax ; Src
.text:00822F6E FF 15 D4 35 DB 00 call ds:srand

---------- Post added at 09:27 PM ---------- Previous post was at 09:23 PM ----------

I can understand where are hex values, but i dony know what to open or what to use to find those texts. Hehe im very sorry for the questions sir.. Hoping for your kindness answer.. Thanks

Originally Posted by stalefish30

Last question sir, what software should i use to find the hex values? Because im just oepen rag2.exe with notepad. I dont know what to do sir.. Thanks

---------- Post added at 09:23 PM ---------- Previous post was at 09:12 PM ----------

What im trying to ask sir is where can I find this CODES.

text:00822F44 57 push edi ; hInstance
.text:00822F45 FF D6 call esi ; LoadStringW
.text:00822F47 E8 F8 CD FF FF call sub_81FD44
.text:00822F4C 85 C0 test eax, eax
.text:00822F4E 75 16 jnz short loc_822F66
.text:00822F50 68 80 FD 81 00 push offset TopLevelExceptionFilter ; lpTopLevelExceptionFilter
.text:00822F55 FF 15 44 33 DB 00 call ds:SetUnhandledExceptionFilter
.text:00822F5B 57 push edi ; replace with jmps loc_822F66 (EB09)
.text:00822F5C E8 F8 CD FF FF call sub_81FD59 ; this is hackshield call, nop
.text:00822F61 59 pop ecx ; nop the rest
.text:00822F62 85 C0 test eax, eax ; nop
.text:00822F64 74 BC jz short loc_822F22 ; nop
.text:00822F66
.text:00822F66 loc_822F66: ; CODE XREF: wWinMain(x,x,x,x)+85j game code continues here.
.text:00822F66 53 push ebx
.text:00822F67 FF 15 88 3C DB 00 call ds:__imp_timeGetTime
.text:00822F6D 50 push eax ; Src
.text:00822F6E FF 15 D4 35 DB 00 call ds:srand

---------- Post added at 09:27 PM ---------- Previous post was at 09:23 PM ----------

I can understand where are hex values, but i dony know what to open or what to use to find those texts. Hehe im very sorry for the questions sir.. Hoping for your kindness answer.. Thanks

HxD, ollydbg, ida pro etc

Im trying to use WPE on my own patched client, and found some interesting address. It may be client sided, but exploitable.

Originally Posted by stalefish30

What file should i open for me to see the codes?

ro2client.exe launcher

using HxD, i cant find those code..? please help sir.. :/

Originally Posted by geckt

HxD, ollydbg, ida pro etc

What file should i open for me to see the codes?

---------- Post added 2013-01-29 at 06:45 AM ---------- Previous post was 2013-01-28 at 10:44 PM ----------

Cannot seem to find it using IDA PRO.

I was looking for this one. I dont know where to look for this.
Hope someone can help to find this codes, the codes posted in page 1.

---------- Post added at 09:28 AM ---------- Previous post was at 06:45 AM ----------

Originally Posted by shin7

ro2client.exe launcher

When I opened ro2client.exe, only hex codes appeared. not the codes like posted in page 1.

You edit the file Rag2.exe in SHIPPING folder, not ro2client.exe