 |
Cheat Engine
The Official Site of Cheat Engine
|
| View previous topic :: View next topic |
| Author |
Message |
CristoferMartins
Newbie cheater
![]() Reputation: 0
Joined: 18 Dec 2009
Posts: 22
|
 Posted: Wed Mar 17, 2010 10:50 am Post subject: |
 |
|
News:
I try to make the iat hook,iits work on other game but not in gb(Again).
Here the code:
| Code: | Procedure SetHookProxy(Enabled: Boolean);
Var
AdrSend : Pinteger; // Pointer to integer
AdrRecv : Pinteger; // Pointer to integer
OldProtect: Cardinal;
NewProtect: Cardinal;
Begin
AdrSend := Ptr($5F05B0); // Pointer to Iat Address of Send Function GB
AdrRecv := Ptr($5F0570); // Pointer to Iat Address of Send Function GB
VirtualProtect(AdrSend,4,64,OldProtect); // Unprotect send
VirtualProtect(AdrRecv,4,64,OldProtect); // Unprotect recv
OrigSend := Ptr(AdrSend^); // Get orig send function
OrigRecv := Ptr(AdrRecv^); // get orig recv function
AdrSend^ := Integer(@SendMeu); // put my send
AdrRecv^ := Integer(@recvMeu); // put my recv
VirtualProtect(AdrSend,4,OldProtect,NewProtect); // unprotect send
VirtualProtect(AdrRecv,4,OldProtect,NewProtect); // unprotect send
End; |
My theory are thats gg is funcking with me.
please,help.[/code]
|
|
| Back to top |
|
 |
Slugsnack
Grandmaster Cheater Supreme
![]() Reputation: 71
Joined: 24 Jan 2007
Posts: 1857
|
| Posted: Wed Mar 17, 2010 12:34 pm Post subject: |
|
|
| Code: | AdrSend := Ptr($5F05B0); // Pointer to Iat Address of Send Function GB
AdrRecv := Ptr($5F0570); // Pointer to Iat Address of Send Function GB |
How did you come about those addresses
|
|
| Back to top |
|
|
CristoferMartins
Newbie cheater
![]() Reputation: 0
Joined: 18 Dec 2009
Posts: 22
|
| Posted: Wed Mar 17, 2010 12:48 pm Post subject: |
|
|
| Slugsnack wrote: | | Code: | AdrSend := Ptr($5F05B0); // Pointer to Iat Address of Send Function GB
AdrRecv := Ptr($5F0570); // Pointer to Iat Address of Send Function GB |
How did you come about those addresses |
I unpack the gunbound.gme.
|
|
| Back to top |
|
|
4jax_cheater
Cheater
![]() Reputation: 0
Joined: 14 Apr 2009
Posts: 31
|
| Posted: Sat Mar 20, 2010 6:47 am Post subject: |
|
|
Hello, MS, this procedure will not work or a game even if you use something to hook into protection since hacks to bypass or circumvent any api to work on gameguard you'll have to redo the code and make a code so that not only gameguard begins with the code of the packet is rather by normal code like the Cheat Engine to bypass a CheatEngine and need to know a little tease for that you'll have to create a generally many use to bypass asm code works correctly, usually not changing the code bypasses gg hook it uses to pass the hook is necessary to circumvent the hook as you do it? depends on your experience.
usually try to comment the code and see what this gameguard bloqued.
is also you missed gameguard is protected with themida.
I'm not saying that to bypass the cheatengine is necessary to pass the hook, it is rather the code will not work this way.
no speak inglês
att 4jax
|
|
| Back to top |
|
|
CristoferMartins
Newbie cheater
![]() Reputation: 0
Joined: 18 Dec 2009
Posts: 22
|
| Posted: Sat Mar 20, 2010 10:40 am Post subject: |
|
|
| 4jax_cheater wrote: | Hello, MS, this procedure will not work or a game even if you use something to hook into protection since hacks to bypass or circumvent any api to work on gameguard you'll have to redo the code and make a code so that not only gameguard begins with the code of the packet is rather by normal code like the Cheat Engine to bypass a CheatEngine and need to know a little tease for that you'll have to create a generally many use to bypass asm code works correctly, usually not changing the code bypasses gg hook it uses to pass the hook is necessary to circumvent the hook as you do it? depends on your experience.
usually try to comment the code and see what this gameguard bloqued.
is also you missed gameguard is protected with themida.
I'm not saying that to bypass the cheatengine is necessary to pass the hook, it is rather the code will not work this way.
no speak inglês
att 4jax |
To bypass the gg hook you need a trampoline.
Then,i need to hook the recv/send to get the socket id.
I think that the gg is protecting anything to make me fail.
Then i need to hook into the protection and hook it when gunbound/gg start?
I dont understand much thing you talked...
Anyway,this days i was making some tests...when i inject my dll,i look the bytes of the function(Its return 2 bytes simple),then,i hook it and its show the Byte $E9 in the begin(lol,its the jump).
Then,i dont understand nothing.
|
|
| Back to top |
|
|
CristoferMartins
Newbie cheater
![]() Reputation: 0
Joined: 18 Dec 2009
Posts: 22
|
| Posted: Sat Mar 20, 2010 7:20 pm Post subject: |
|
|
The gg hook the getprocaddress?
Anyway,i think(I was looking in the bytes of the function,i dont found any jump($E9) thats gg not hook the send/recv in usermode...
i am thinking in give up in this shit...
Iat dont work,Detours or normal hook dont work,hell...
|
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
