[TuT] How to Unpack Warrock

[Dxt-Cobra]

Tutorial: How to Unpack Warrock with Olly Debugger.
By Cobra And ***************.

you will need the olly plugin --- >> olly dump

Open WarRock in olly
let it run till hacksheild loads.

right click an address, hit "Search For" - All referenced text strings.

search for this//

"1.0.0.1" << so search this after hs load

go to the beginning of the function ,it should look like this "Push EBP"
write the address down

Restart wrrk in olly, goto your new address you logged
right click the address and set breakpoint --->>>>> Hardware on execution.

Hit the play button till it hits the breakpoint.
Goto plugins -->> olly dump -->> Dump debug process
DONE -- >> save to a new file and name it.

[lars]

Tutorial: How to Unpack Warrock with Olly Debugger.
By Cobra And ***************.

you will need the olly plugin --- >> olly dump

Open WarRock in olly
let it run till hacksheild loads.

right click an address, hit "Search For" - All referenced text strings.

search for this//

"1.0.0.1" << so search this after hs load

go to the beginning of the function ,it should look like this "Push EBP"
write the address down

Restart wrrk in olly, goto your new address you logged
right click the address and set breakpoint --->>>>> Hardware on execution.

Hit the play button till it hits the breakpoint.
Goto plugins -->> olly dump -->> Dump debug process
DONE -- >> save to a new file and name it.


Thanks cobra this was just what i've been looking for for days

[Fireblais]

Thanks for sharing it :D good job

[lars]

I've got a question cuz i can't find the addy 1.0.0.1
- what do you open warrock.exe , WRlauncher or WRUpdater.
- You need to do it afther the hackshield dialog rightunder your screen right ?
- it gives me the message running game hack tool is detected when warrock is fully loaded to his login screen :confused:

[Dxt-Cobra]

I've got a question cuz i can't find the addy 1.0.0.1
- what do you open warrock.exe , WRlauncher or WRUpdater.
- You need to do it afther the hackshield dialog rightunder your screen right ?
- it gives me the message running game hack tool is detected when warrock is fully loaded to his login screen :confused:

addy 1.0.0.1 << this is not an address, it is a string.

follow the tut,and you should see that i said to find all strings, and search for 1.0.0.1.

Dont run olly ingame, Start wrrk from your olly.Pause it after hacksheild loads.

[lars]

addy 1.0.0.1 << this is not an address, it is a string.

follow the tut,and you should see that i said to find all strings, and search for 1.0.0.1.

Dont run olly ingame, Start wrrk from your olly.Pause it after hacksheild loads.

The last thing i already did but you're right i searched for the wrong thing :D thanks

[lars]

Ok, srry for my nubbness :D
but i still can't get it to work.. is it normal that when you run warrock in olly warrock says when it's loaded hack tool detected ??

[hackshieldsux]

I am just about to post a tutorial on this... :)

[kaswar]

I can only find 1.0.0.1 Before I press Play, after hackshield loads, a message box appears about Ehvsc or something blabla setting breakpoints blabla. Then when i tried to search for it, its not there

[madazn]

what would i do witht he debugged exe?

[Legendary Cookie]

I can only find 1.0.0.1 Before I press Play, after hackshield loads, a message box appears about Ehvsc or something blabla setting breakpoints blabla. Then when i tried to search for it, its not there

got the same here

[dongthuc]

thanks share

[bootwala]

what would i do witht he debugged exe?
THIS (wwwk2warez.com) is also better than this site :P