Join Date: Aug 2007
Posts: 8643
User-Rating:
|
Kategorie: Other FPS Games
Entwickler: changeofpace
Beschreibung:
Release v2.1
- Simplified FixOverwatch() by only remapping the views representing .text and .rdata instead of every view.
- Added verbose logging option.
Summary:
This x64dbg plugin removes anti-dumping and obfuscation techniques from Overwatch.exe to make the game able to be dumped using Scylla.
Syntax:
TEXT Code: OverwatchDumpFix [verbose]
Invoking the command with an argument that evaluates to true, e.g. 1, will enable verbose output.
How to use:
x64dbg
- Attach x64dbg to Overwatch.exe then execute the OverwatchDumpFix command.
- Open Scylla in x64dbg's "Plugins" menu then select Overwatch.exe in the "Attach to an active process" drop-down list.
- Click "IAT Autosearch".
- Click "Get Imports".
- Click "Dump" to create a dump file.
- Click "Fix Dump" and select the dump file from (5) to reconstruct imports.
- The Scylla output view should say "Import Rebuild success [FILE PATH]".
- Click "PE Rebuild" and select the fixed dump file.
IDA Pro
- Open the dump file in IDA. Check the "Manual load" and "Load resources" (optional) boxes. Click "OK" / "Yes" for every prompt.
- Run the "Universal Unpacker Manual Reconstruct" plugin for the IAT to set imports to the correct color.
- Happy reversing
Source: Only registered and activated users can see links.
Download:
Overwatch Dump Fix
|
Deutsch
