I would suggest you do a fresh installation of Genshin on a new computer for this, as your login data is still saved on the login screen and hooking a process dumper to Genshin might constitute as 'cheating' and get your account banned. Since we have neither the debug symbols nor imports, we'll need to reconstruct the imports segment for a start.įor this, we need Scylla to dump the process while Genshin is running.
By tracing the function call, we can find the chunk with the obfuscator. These are the anti-debugging defense miHoYo has included in the binary, by protecting it against static analysis. The next thing you'll notice are the chunks of code that look like data instead of assembly. As for the debug symbols, you'll need Genshin's source code for that so don't bother. This is miHoYo's first barrier to reversing - destroying the list of imports so you will have to rebuild it from scratch. If you open GenshinImpact.exe found in C:\Program Files\Genshin Impact\Genshin Impact Game in IDA Pro, you'll find that the import segment has been destroyed, and that the debug symbol list is missing. It is automatically started with the game, after you click the "Launch" button on the Launcher. This is the process for their kernel-level anti cheat. The goal is to disable the checks for whether mhyprot2.sys has started properly. It is assumed that you have decent knowledge of reverse engineering and are comfortable with Assembly instructions. There is a way of doing this and which involves modifying game files. However, if you still want to know how to do it while breaking their ToS, read on. Without breaking any of miHoYo's ToS, and risking your account being permanently banned, the answer is no.
Is there a way to allow it be run without administrator privileges?
0 kommentar(er)
