I am still studying more things on MHS, asm, debugging, OEP and such...
Now am barely trying to attach a debugger to the cabal game process (protected by x-trap). Nice. I can run the disassembler, see code, but when I try to start debugging, it always crashes (either x-trap or cabalmain.exe's themida finds the debugger and kills itself).
It seems there is no way (already found) to hide a debugger from that themida? Tried already ollydbg with some plugins. Was quite sure MHS's own debugger would be able to follow the process' current instruction pointer (dunno how people like to call it in english) in order to catch an event (disconnection from game) and prevent it from happening as it does normally.
Any suggestion on how could I accomplish this?