MHS crash game Babo Violent when attaching debugger, how to

[vibrio]

make it work with BV2. This other software CHeat engine can attach the debugger successfuly. The modify itself was try but no difference. Ollydbg also crash the game.

Or How can i change the windows caption of the disassembler. I try hex editing it but did not find the string? Because my next test was that.

[L. Spiro]

Find out why it does not work and I can make it work.


L. Spiro

[vibrio]

"Find out why it does not work and I can make it work."

to find why it crash ,that is kind of tough....

you mean like opening from the start with MHS disassembler and looking at the instructions? and look for an exception?

Well the last thing i get is this

I have discovered that that memory in the picture is from module user32.

Now i have discover this:




So if i change the compare to 0 [cmp eax,0] then the detection is off. At least this one.

Yes the detection is off but it still crash in MHS, strangely is does not crash in Ollydgb (Ollydbg most be doing something because in MHS it said that is not the same length the changes i made). It also crash if I patch the exe in hex editor. So it maybe...

[L. Spiro]

It sounds as though you are crashing it by making invalid modifcations to the code.
The picture you post proves that MHS can indeed attach to it via the debugger. If you get a warning saying that code sizes do not match it means you are using the regular Assemble command and adding/changing code.

In which case you need to manually select the smallest code in MHS so that it does not overwrite any following code.


L. Spiro

[vibrio]

It sounds as though you are crashing it by making invalid modifcations to the code.
The picture you post proves that MHS can indeed attach to it via the debugger. If you get a warning saying that code sizes do not match it means you are using the regular Assemble command and adding/changing code.

In which case you need to manually select the smallest code in MHS so that it does not overwrite any following code.


L. Spiro

Problem Solve if I change the jnz to jmp. Now the disassembler works in MHS.

[Sychotix]

IsDebuggerPresent is pretty self explanatory -.- Btw... for ollydbg you can get a(n) addon(s) to prevent detection from those minor things.