Hello, 1st sorry 4 my bad eng
I wanna Bypass XIGNCODE3 of a game I have, but I don't know how to obtain the exact address to kill xigncode before it starts
This is an image from OllyDbg:
Please, Share any idea you have !
thanks
---------
I did Put a
mov eax,1
Retn
At 4aa2c0
but xigncode3 detect it; i use this dll :
Code:
#include <Windows.h>
DWORD dwXignInitFnc = 0x004AA2C0;
BOOL WriteBytes(DWORD dwAddress, LPBYTE lpBuffer, DWORD nBytes) {
if (nBytes == 0) {
OutputDebugString(L"WriteBytes:: Tried to write 0 bytes to memory.");
return FALSE;
}
DWORD dwOldProtect;
if (!VirtualProtect((LPVOID)dwAddress, nBytes, PAGE_EXECUTE_READWRITE, &dwOldProtect)) {
OutputDebugString(L"WriteBytes:: Failed to change access protection on memory address.");
return FALSE;
}
memcpy((LPVOID)dwAddress, lpBuffer, nBytes);
if (!VirtualProtect((LPVOID)dwAddress, nBytes, dwOldProtect, &dwOldProtect)) {
OutputDebugString(L"WriteBytes:: Failed to change access protection on memory address.");
return FALSE;
}
return TRUE;
}
BOOL StopXignInit() {
/*
Modify code to:
mov eax, 1
ret
nop
*/
return WriteBytes(dwXignInitFnc, (PBYTE)"\xB8\x01\x00\x00\x00\xC3\x90", 9);
}
BOOL APIENTRY DllMain(__in HINSTANCE hInstance, __in DWORD fdwReason, __in __reserved LPVOID lpReserved) {
UNREFERENCED_PARAMETER(lpReserved);
if (fdwReason == DLL_PROCESS_ATTACH) {
if (StopXignInit()) {
OutputDebugString(L"Successfully stopped XIGNCODE3 from initializing!");
}
else {
OutputDebugString(L"Failed to stop XIGNCODE3 from initializing!");
}
}
return TRUE;
}
then i search for the callers, and I found this:
Please What is next !!
the complete screen image is here:
I attached the dumped file of the game !
https://virustotal.com/en/file/04967...is/1467099008/