Thread: Bypass HackShield for RO2

Originally Posted by lala1990

the shutdown code is hard to find, there's ntdll.rtlexituserthread, ntdll.rtlexituserprocess, kernel32.terminateprocess, etc. there are many instances of it, and you need to find out exactly which one is the one that causes the program to exit, the problem is, the client is packed with themida, and you need to unpack it in order to be able to attach a debugger to the game.

Umm.. I think you are wrong. The client is not packed with Themida. Only hackshield files are.

Originally Posted by keile

Umm.. I think you are wrong. The client is not packed with Themida. Only hackshield files are.

hmm, if it isn't packed with themida, why is it that when a debugger is running when the game begins running, there's a warning from themida about a debugger present?

Originally Posted by lala1990

hmm, if it isn't packed with themida, why is it that when a debugger is running when the game begins running, there's a warning from themida about a debugger present?

That is the themida from the hackshield. Disable hackshield and try it again. You won't get any warning.

that's what i thought too initially HAHA