3

I have a game that has ("ex: GameGate.exe") file to open.
I found out later that file is not responsible for opening the game directly but it's just a gate to open another file ("ex: GameMain.exe") internally using the kernel32.CreateProcessInternalA function.
Also, I found that file "GameMain.exe" among the rest of the game files but when attaching that file to the debugger calls the ExitProcess function after a few steps, so I can't debug that file directly.

By the way, I am using x64dbg.

How can I debug that file, is there a way to make me debug that file?

4
  • 1
    It sounds like GameGate.exe implements some protection features, you might want to analyse that one thoroughly first. Nov 30, 2022 at 22:43
  • @MegaTonnage: Thank you.
    – Lion King
    Dec 1, 2022 at 6:04
  • @LionKing try to pick up a copy of "Anti-Debugging Reference" by Peter Ferrie (who is also a member of this community). Also look into ScyllaHide and TitanHide in conjunction with x64dbg.
    – 0xC0000022L
    Dec 2, 2022 at 12:09
  • @0xC0000022L: Thank you.
    – Lion King
    Dec 4, 2022 at 1:47

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.