Reversing Conqueror's Blade (2024)

Join Date: Jul 2017

Posts: 15

Reputation: 10
Rep Power: 170

Points: 4,960, Level: 7

Level up: 52%, 440 Points needed

Activity: 2.0%

Last Achievements

A while ago this game, Conqueror's Blade, came out, and I've seen almost no talk about the game outside of the people who I know who decided to play it. Since then, nobody has really come up with any methods of hacking it. It was a lot easier in CBT when the game had no Anti-Cheat, but they have certainly boosted their measures since then with their self-implemented (unconfirmed) anti-cheat.

That said, I should still be able to speed hack, at least to my knowledge, and I would love to figure out how. I've hacked a couple of other games, but they've always been made in an engine I'm familiar with, and relatively easy to reverse. Conqueror's Blade, on the other hand, is made with what is known as the "CHAOS" engine, by the company Mail.Ru, and their subsidiary My.Com.

Their website is here: https://conqblade.com/en
They can also be found on Steam here: https://store.steampowered.com/app/9...querors_Blade/

So far I have opened the "proven_ground_client.exe" in IDA64, but it's very small. I suspect the large amount of DLLs has to do with that, but I don't know how to link them all together to create a sort of "dump" of the game. I have not been able to use ReClass for longer than 10-ish minutes without it disconnecting me for "Disconnected due to suspicious," and that's obviously because of their GameGuard which likely reads the names of the Windows. I'm going to test that right now, by running a version of ReClass with a changed icon and exe name, and will update this thread as I go.

Update: ReClass does not find the process "proven_ground_client.exe"
Makes me wonder if the process is embedded in the GameCenter.exe?
I have tried injecting into proven_ground_client.exe but every time it tells me it can't allocate memory in the process, so maybe it's safe to assume it does run inside GameCenter.exe, which is weird because it does show as a separate executable.

Just an FYI: You don't have to run GameCenter.exe as Administrator, so they probably can't do much with their anti-cheat unless there is some sort of service running or their anticheat is KM?
So far, it hasn't crashed with ReClass opened with a different icon and file name.

Update 2: PETools shows that it is, indeed, running inside "GameCenter.exe" After looking for the Process ID, it matched perfectly to one of the "GameCenter.exe" ids.
PETools also did not list "proven_ground_client.exe"
I wonder if I can find the thread ID of "proven_ground_client.exe" and match it up with GameCenter.exe, like PETools has, then I'll use ReClass in that GameCenter.exe and find the offset of the executable...
It's as if the "proven_ground_client.exe" acts as a DLL.

Update 3: UDP Connection is not encrypted. Packets are coming in to all ports associated with "proven_ground_client.exe" without any encryption.

Last edited by beemerwt; 9th October 2020 at 01:46 PM.Reason: Update

Join Date: Sep 2020

Posts: 41

Reputation: 10
Rep Power: 92

Points: 687, Level: 1

Level up: 58%, 213 Points needed

Activity: 0%

Join Date: Jul 2017

Posts: 15

Reputation: 10
Rep Power: 170

Points: 4,960, Level: 7

Level up: 52%, 440 Points needed

Activity: 2.0%

Last Achievements

Last edited by ciceron; 11th April 2021 at 08:11 PM.

Join Date: Aug 2020

Posts: 5

Reputation: 10
Rep Power: 93

Points: 452, Level: 1

Level up: 11%, 448 Points needed

Activity: 0%

Join Date: Jan 2021

Posts: 1

Reputation: 10
Rep Power: 83

Points: 24, Level: 1

Level up: 6%, 376 Points needed

Activity: 0%

Join Date: Oct 2014

Posts: 2

Reputation: 10
Rep Power: 237

Points: 5,643, Level: 8

Level up: 23%, 857 Points needed

Activity: 0%

Last Achievements

I've seen a lot of people say this Mail.RU anticheat is some spyware sh*t. I didnt want it running while playing, but it doesnt seem like it has to. Find mracsvc.exe and end the process in task manager while the game is running. you wont get disconnected. you can also head to C/windows/system32 and delete it while the game is running. It will ask you to reinstall it if you relaunch the game however.