[IAH] Hacking Trials

[Neyoel]

[IAH] Hacking Trials
by Neyoel

Achievements:

• Kill EHsvc.dll Threads to bypass the "Unknown Hack Detected"-Error while working with Cheat Engine
• Wrote a Proxy DLL that:
  - disables HackShield completely
  - kills IsDebuggerPresent calls
  - kills InitAppProtectFailed Message
  - kills DuplicateError Message
  - enables Multiclient

Errors to Fix:

• "Connection to the server has been lost due to abnormal client status. (0x00026)"

Help Requests:

• Ideas on how to Fix the Error mentioned above which pops up when working with the Proxy DLL
• Ideas how to get a Memory Hacking Software to work, so that i can search for pointers

How to Use ProxyDLL:

1. Make a Backup of your "..\IAHGames\Dragonica\Release\HShield" folder
2. Download winmm.rar and extract it into your "..\IAHGames\Dragonica\Release" Folder (overwrite all)
3. start DRAGONICA.exe (NOT the Launcher) and login (the dll will be loaded automatically ^^)

After login you will get the error mentioned above!

Scans & Checksums:

//winmm.dll (Proxy DLL)
VirusScan:
MD5 Checksum: 7d31ff0889f0dc8a789d410395e24187
SHA1 Checksum: 2a3666d8cd1ece224890251a2475e6fab6bd1ede

[LemoniscooL]

Nice one keep up the work!
Unfortunately i cant help you cuz i dun know the error you recieve, if the game closes when the debugger gets enabled, there might be an IsDebuggerActive check, try that ^^

greetz

Edit:
Its called IsDebuggerPresent, not IsDebuggerActive .. sry xD

[Neyoel]

Thanks =) i will keep it up, of course!
Ill try that "IsDebuggerActive" and report back!

[rapmachine]

xD, my client is not running right after i putted it in Release Folder

[Neyoel]

@rapmachine: any errors? Oo

@eMale: you are right the "IsDebuggerPresent" Function is called twice, ill patch them and see what it does =P

//Edit:
eeek .. **** lol i forgot if i patch the exe ill get that error i mentioned above >.< i have to fix that one first .... thanks for trying eMale

[fashadowz]

Thanks so much for this . Opens a door of opportunities.

[Neyoel]

noone got an idea on how to fix the error?
if the error is fixed, hackshield would be completely disabled and we could use everything we want! every hacking tool, make old hacks working again and even make new hacks!

im thinking and looking around all the time but everything i try doesnt work .. it seems like there is a check thats coordinated with the server cuz no matter what i patch in the exe, the error still pops up, i even tried the CRC fix eMale provided a while ago, maybe its already fixed, maybe it didnt even work at all..

I have found a HackShield bypass from Deebe but it isnt working anymore, maybe you could give me a hint on how to do it Deebe??

[Zacko7]

Woo, someone is finally attempting to create a hack for IAH again. xD

[Neyoel]

I Updated the First Thread a bit but i couldnt find a way to fix the Error 0x00026 ... really no one got an Idea? I think its a CRC check of the memory but i dun know how to find the function for that so i can patch it >.<

[fashadowz]

Too bad maintenance is today xD.

[Neyoel]

yaa its annoying ^^

[Hunner]

Sorry for being completely clueless. So there are no official and fully functional .CT for IAH Dragonica yet? *Hence this thread* O_O?
I'm just a bit like... wth, since there are videos on youtube which shows recent people hacking on IAH.
As ofcourse not all youtube videos are credible, but could be a possiibility. if u guys know what im on about XD

I have no logic whatsoever with regards to bypass or hacking, like ive hacked a lot of games... practically every game i've played and never had the patience to actually level up.

And another thing.. Is it possible to create a IAH private server?
Since in topofgames.com... there are the newest DRAGONICA private server, which is becoming more and more mainstream, but it's all on g potato. just a suggestion.
because apparently decrypting/encrypting this game is beyond comprehensible.

omg so much **** to write. sorry for the blurrrrrrrrrrrr ;p

[Neyoel]

Hmm .. no matter what i try it just doesnt work ..

I cant turn off HackShield completely cuz i cant find the CRC check function which detects when i modify the game executable

if i kill the EHSvc.dll (hackshield main dll) threads i can start cheat engine but i cant search for pointers cuz the debugger i use for it is detected.. probably by the "IsDebuggerPresent" function..
but if i try to kill the IsDebuggerPresent function inside the executable the CRC check notices it.. if i try to
inject a dll which kills those functions the dll gets detected and the game crashes >.<

[Kane49]

Originally Posted by Neyoel

Hmm .. no matter what i try it just doesnt work ..

I cant turn off HackShield completely cuz i cant find the CRC check function which detects when i modify the game executable

if i kill the EHSvc.dll (hackshield main dll) threads i can start cheat engine but i cant search for pointers cuz the debugger i use for it is detected.. probably by the "IsDebuggerPresent" function..
but if i try to kill the IsDebuggerPresent function inside the executable the CRC check notices it.. if i try to
inject a dll which kills those functions the dll gets detected and the game crashes >.<

1. IsDebuggerPresent reads a single byte from memory.
2. ????
3. Profit !

Also Hackshields debugger check is probably more complex than IsDebuggerPresent.

[Neyoel]

Originally Posted by Kane49

1. IsDebuggerPresent reads a single byte from memory.
2. ????
3. Profit !

Umm .. what? xD
I dun wanna make profit with it .. i just think its time to get hacks back ^^