dharmang1910 Expert Cheater
Reputation: 0
Joined: 09 May 2010 Posts: 102
|
Posted: Thu Jun 20, 2019 6:15 am Post subject: unity game crash on attach debugger |
|
|
I think there is some anti cheat implementation is there. Game's name is rogue's tale. When i have run game in x64dbg and try to attach cheat engine's veh debugger to find what writes to then x64dbg break on an exception.
Here is i found when on x64dbg
On symbol screen
No symbols loaded for: monodatacollector64.dll
No symbols loaded for: vehdebug-x86_64.dll
Log after breakpoint
| Quote: | SetThreadName(380C, "NVFBCAsyncThread")
EXCEPTION_DEBUG_INFO:
dwFirstChance: 1
ExceptionCode: 406D1388 (MS_VC_EXCEPTION)
ExceptionFlags: 00000000
ExceptionAddress: 00007FFF485AA839 kernelbase.00007FFF485AA839
NumberParameters: 6
ExceptionInformation[00]: 0000000000001000
ExceptionInformation[01]: 00007FFF014D06C0 nvwgf2umx.00007FFF014D06C0
ExceptionInformation[02]: 00000000FFFFFFFF
ExceptionInformation[03]: 0000000000000000
ExceptionInformation[04]: 0000000000000000
ExceptionInformation[05]: 00007FFF00C78892 nvwgf2umx.00007FFF00C78892
First chance exception on 00007FFF485AA839 (406D1388, MS_VC_EXCEPTION)!
Thread 29F8 created, Entry: nvwgf2umx.00007FFF01322F7C
Thread 3B14 created, Entry: nvwgf2umx.00007FFF01322F7C
Thread 1C48 created, Entry: nvwgf2umx.00007FFF01322F7C
Thread 1218 created, Entry: unityplayer.00007FFF088C3E80
DLL Loaded: 00007FFF06AF0000 K:\Games 8\Rogue's Tale\Launcher_Data\Plugins\steam_api64.dll
DLL Loaded: 00007FFF46E30000 C:\Windows\System32\IPHLPAPI.DLL
DLL Loaded: 00007FFF4A0E0000 C:\Windows\System32\nsi.dll
DLL Loaded: 00007FFF40FC0000 C:\Windows\System32\dhcpcsvc6.dll
DLL Loaded: 00007FFF41270000 C:\Windows\System32\dhcpcsvc.dll
Thread 21E0 created, Entry: unityplayer.00007FFF092F7C94
DLL Loaded: 00007FFF46E70000 C:\Windows\System32\dnsapi.dll
DLL Loaded: 00007FFF337D0000 C:\Windows\System32\rasadhlp.dll
DLL Loaded: 00007FFF40EE0000 C:\Windows\System32\FWPUCLNT.DLL
Thread 21E0 exit
Thread 188C created, Entry: mswsock.00007FFF470E09E0
DLL Loaded: 00007FFF327A0000 C:\Windows\System32\netapi32.dll
DLL Loaded: 00007FFF46F40000 C:\Windows\System32\netutils.dll
DLL Loaded: 00007FFF43590000 C:\Windows\System32\wkscli.dll
DLL Loaded: 00007FFF32770000 C:\Windows\System32\srvcli.dll
DLL Unloaded: 00007FFF46F40000 netutils.dll
DLL Unloaded: 00007FFF43590000 wkscli.dll
DLL Unloaded: 00007FFF32770000 srvcli.dll
DLL Unloaded: 00007FFF327A0000 netapi32.dll
Thread 1708 created, Entry: unityplayer.00007FFF08E3F970
Thread D78 created, Entry: unityplayer.00007FFF088C3E80
Thread 3BB0 created, Entry: unityplayer.00007FFF088C3E80
Thread 26D8 created, Entry: ntdll.00007FFF4A9F3CF0
Thread 3908 created, Entry: unityplayer.00007FFF092F7C94
Thread 3908 exit
Thread 3158 created, Entry: unityplayer.00007FFF092F7C94
Thread 3158 exit
Thread 28A8 exit
DLL Loaded: 00007FFF32D30000 C:\Windows\System32\TextInputFramework.dll
DLL Loaded: 00007FFF45410000 C:\Windows\System32\CoreMessaging.dll
DLL Loaded: 00007FFF435E0000 C:\Windows\System32\CoreUIComponents.dll
DLL Loaded: 00007FFF46910000 C:\Windows\System32\ntmarta.dll
Breakpoint at 00007FF73A24B0E8 set!
Thread 188C exit
Thread F54 created, Entry: unityplayer.00007FFF092F7C94
Thread F54 exit
Thread 21AC created, Entry: mswsock.00007FFF470E09E0
Thread 1B50 exit
Thread 2B68 created, Entry: 000002D814C20051
DLL Loaded: 00007FFF44560000 C:\Program Files (x86)\Cheat Engine 6.8.3\autorun\dlls\MonoDataCollector64.dll
DebugString: "DllMain entry"
Thread 2D4C created, Entry: monodatacollector64.00007FFF445610D0
Thread 2B68 exit
Thread 21AC exit
Thread 29E0 created, Entry: 000002D814C2003F
DLL Loaded: 0000000110000000 C:\Program Files (x86)\Cheat Engine 6.8.3\vehdebug-x86_64.dll
Thread 29E0 exit
Thread 3924 created, Entry: <vehdebug-x86_64.InitializeVEH>
DebugString: "VEHDebug init"
DebugString: "ConfigName="{44C14885-A339-4C52-9154-BED6B5E395AE}""
DebugString: "fm=00000910"
DebugString: "VEHSharedMem=2D814C20000"
DebugString: "HasDebugEvent=00000580"
DebugString: "HasHandledDebugEvent=0000090C"
DebugString: "@HasDebugEvent=2D814C22000"
DebugString: "@HasHandledDebugEvent=2D814C22008"
DebugString: "Testing if it handles normal debug events"
DebugString: "1"
DebugString: "2"
DebugString: "3"
DebugString: "Calling EmulateInitializeEvents"
DebugString: "Registering exception handler"
DebugString: "returned from EmulateInitializeEvents"
DebugString: "Created exception handler:2D82C5A4760"
Thread 3924 exit
EXCEPTION_DEBUG_INFO:
dwFirstChance: 1
ExceptionCode: 80000004 (EXCEPTION_SINGLE_STEP)
ExceptionFlags: 00000000
ExceptionAddress: 000002D8364519C6
NumberParameters: 0
First chance exception on 000002D8364519C6 (80000004, EXCEPTION_SINGLE_STEP)!
Breakpoint at 00007FFF48A6A310 set!
Breakpoint deleted!
Thread 391C created, Entry: ntdll.00007FFF4A9F3CF0
Thread 28F0 exit
Thread 2940 exit
Thread 1270 created, Entry: unityplayer.00007FFF092F7C94
DebugString: "avcore\audiocore\client\audioclient\audioclientcore.cpp(1536)\AUDIOSES.DLL!00007FFF348CD50B: (caller: 00007FFF348B1317) ReturnHr(1) tid(199c) 887C005C "
DebugString: "avcore\audiocore\client\audioclient\audioclientcore.cpp(1536)\AUDIOSES.DLL!00007FFF348CD50B: (caller: 00007FFF348B1317) ReturnHr(1) tid(199c) 887C005C "
Thread 1270 exit
Thread 3420 created, Entry: mswsock.00007FFF470E09E0
Thread A08 created, Entry: 000002D8171A0051
Thread A08 exit
EXCEPTION_DEBUG_INFO:
dwFirstChance: 1
ExceptionCode: 80000004 (EXCEPTION_SINGLE_STEP)
ExceptionFlags: 00000000
ExceptionAddress: 000002D8449428FD
NumberParameters: 0
First chance exception on 000002D8449428FD (80000004, EXCEPTION_SINGLE_STEP)!
EXCEPTION_DEBUG_INFO:
dwFirstChance: 1
ExceptionCode: 80000004 (EXCEPTION_SINGLE_STEP)
ExceptionFlags: 00000000
ExceptionAddress: 000002D8449428FD
NumberParameters: 0
First chance exception on 000002D8449428FD (80000004, EXCEPTION_SINGLE_STEP)!
|
Can anyone tell me how to handle this situation to bypass this anticheat.
|
|