Posted: Wed Nov 12, 2014 7:20 pm Post subject: Is there a way to decrypt an EXE using Cheat Engine?
Some software has encryption applied to make it harder to modify. A lot of Steam games use this, although in these cases I don't think it's intended for preventing modification, but rather to tie it to a single Steam account. Obviously when the program is actually running the code isn't encrypted, because the processor doesn't understand encrypted code any more than a disassembler does. What I'm asking is does Cheat Engine have an option to capture the data from all the segments of the executable as it exists in memory at a certain point (ideally once it's been decrypted) and export it to a new, decrypted EXE that can be more easily analyzed in a disassembler like IDA?
Joined: 25 Jan 2006 Posts: 8517 Location: 127.0.0.1
Posted: Thu Nov 13, 2014 5:30 am Post subject:
Yes it is possible, but its not really practical.
If you need a debugger to unpack with, try using TitanEngine. It's made for unpacking and debugging targets for the purposes of reversing them. _________________
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum