Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


WinAPIHook
Goto page Previous  1, 2, 3, 4  Next
 
Post new topic   Reply to topic    Cheat Engine Forum Index -> General programming
View previous topic :: View next topic  
Author Message
OneWhoSighs
Cheater
Reputation: 0

Joined: 13 Aug 2007
Posts: 32

PostPosted: Tue Nov 20, 2007 9:07 pm    Post subject: Reply with quote

Flyte wrote:
OneWhoSighs wrote:
Legion fully emulated the latest rev of GameGuard. He also created a custom map compiler for Gunz and server Emulator.

But I don't know Moose but I hear he is pretty good and him and Legion are the only ones that are able to emulate GameGuard. Is Moose able to? Or am I just hearing things?


Hold on, did you just say emulate Game Guard? Holy shit that is basic. I could do that (and so could a lot of people here) easily. moose on the other hand made a full bypass for it (it doesn't even run on your system).


This is what I meant. That is what Legions emulator does, he created a program which emulates the server checks and acts as gameguard when it really isnt, therefore no GameGuard is loaded because the game thinks GameGuard is already loaded, so yes, a full bypass.

_________________


Back to top
View user's profile Send private message
Flyte
Peanuts!!!!
Reputation: 6

Joined: 19 Apr 2006
Posts: 1887
Location: Canada

PostPosted: Tue Nov 20, 2007 9:19 pm    Post subject: Reply with quote

OneWhoSighs wrote:
This is what I meant. That is what Legions emulator does, he created a program which emulates the server checks and acts as gameguard when it really isnt, therefore no GameGuard is loaded because the game thinks GameGuard is already loaded, so yes, a full bypass.


Link to proof? Anyways, this isn't really about moose and Legion, the main point was that this is an extremely thin wrapper. I would also like to see how you compare to "Legion", since Stick here thinks you are oh so great ( Rolling Eyes ).

If I could get into unpacking I would be able to do same thing, its just that sadly reverse engineering isn't my forte (as opposed to programming, which I excel at). Every bypass I made just rendered GG useless, it didn't really remove it. I really should try and remedy that. Confused
Back to top
View user's profile Send private message
OneWhoSighs
Cheater
Reputation: 0

Joined: 13 Aug 2007
Posts: 32

PostPosted: Tue Nov 20, 2007 9:25 pm    Post subject: Reply with quote

Flyte wrote:
OneWhoSighs wrote:
This is what I meant. That is what Legions emulator does, he created a program which emulates the server checks and acts as gameguard when it really isnt, therefore no GameGuard is loaded because the game thinks GameGuard is already loaded, so yes, a full bypass.


Link to proof? Anyways, this isn't really about moose and Legion, the main point was that this is an extremely thin wrapper. I would also like to see how you compare to "Legion", since Stick here thinks you are oh so great ( Rolling Eyes ).

If I could get into unpacking I would be able to do same thing, its just that sadly reverse engineering isn't my forte (as opposed to programming, which I excel at). Every bypass I made just rendered GG useless, it didn't really remove it. I really should try and remedy that. Confused


I dont compare to Legion. Legion is far better then me. I don't know why he would say that.

Here are some topics to the release for your proof

(remove the spaces in the urls)

http://forum.game cheetah.com/showthread.php?s=d706180a468d4190145bbe64fc440d07&t=26510
( ignore the top part, the bottom part is the emulator/bypass )

(change gamers to gamers)
http://www.gamers planet.net/forums/na-gunz/186891-full-gameguard-emulator-shared.html

The second link says credits to onewhosighs, and not legion is because the retard who leeched it from rc, posted it on gzp and put credits to me because I was the first person to release it, (legion asked me to post it for him).
Though it's patched now, Legion released the updated one, then that one got patched again, and he stopped and he is keeping it private.

_________________


Back to top
View user's profile Send private message
OneWhoSighs
Cheater
Reputation: 0

Joined: 13 Aug 2007
Posts: 32

PostPosted: Tue Nov 20, 2007 9:49 pm    Post subject: Reply with quote

x0r wrote:
OneWhoSighs wrote:
I dont compare to Legion. Legion is far better then me. I don't know why he would say that.

Here are some topics to the release for your proof

(remove the spaces in the urls)

http://forum.game cheetah.com/showthread.php?s=d706180a468d4190145bbe64fc440d07&t=26510
( ignore the top part, the bottom part is the emulator/bypass )

(change gamers to gamers)
http://www.gamers planet.net/forums/na-gunz/186891-full-gameguard-emulator-shared.html

The second link says credits to onewhosighs, and not legion is because the retard who leeched it from rc, posted it on gzp and put credits to me because I was the first person to release it, (legion asked me to post it for him).
Though it's patched now, Legion released the updated one, then that one got patched again, and he stopped and he is keeping it private.

Ok, now you've managed to fucking piss me off you fucking retard. That is all ripped from CEF and it does not emulate GameGuard at all, this was done by Matsy, this corrupts the GameGuard initialization routine and it never loads, this is a well known exploit and has been around for quite a while, he even documented how to do it. This only works on games with no CS2AUTH, so in all reality your friend just ripped Matsy's work, claimed it as his then got owned when GuNZ added the server auth to GameGuard (which apparently didn't exist before).


The GameGuard Emulator (ijji annihalator as Legion calls it), was created by Legion.

I don't go to either web-site, I just google searched gg emulator legion, and found two forums which had posted the emulator Legion released.

What he did was remove GameGuard from running from the client, and he replaced the Gunz Launcher with his own which does all the packet handling. Legion didnt rip anything, you need to calm down. Legion is a well respected guy. Go look over things before you say crazy shit like that.

_________________


Back to top
View user's profile Send private message
TheSorc3r3r
I post too much
Reputation: 0

Joined: 06 Sep 2006
Posts: 2404

PostPosted: Wed Nov 21, 2007 6:40 pm    Post subject: Reply with quote

You guys are assholes (flyte and x0r), gtfo out of this thread
_________________


Don't laugh, I'm still learning photoshop!
Back to top
View user's profile Send private message
sphere90
Grandmaster Cheater
Reputation: 0

Joined: 24 Jun 2006
Posts: 912

PostPosted: Wed Nov 21, 2007 7:54 pm    Post subject: Reply with quote

Frankly speaking, I agree with both Flyte and x0r. There's nothing so amazing about this API hook. If you consider using a wrapper provided by Microsoft as pro, then what do you call those who can disable GG completely (eg. Moose)?
Back to top
View user's profile Send private message
TheSorc3r3r
I post too much
Reputation: 0

Joined: 06 Sep 2006
Posts: 2404

PostPosted: Wed Nov 21, 2007 7:57 pm    Post subject: Reply with quote

thank you sphere for saying your ideas POLITELY. it's not what you believe that pisses me off, it's how x0r/flyte express it..
_________________


Don't laugh, I'm still learning photoshop!
Back to top
View user's profile Send private message
DeletedUser14087
I post too much
Reputation: 2

Joined: 21 Jun 2006
Posts: 3069

PostPosted: Thu Nov 22, 2007 1:01 pm    Post subject: Reply with quote

sphere90 wrote:
Frankly speaking, I agree with both Flyte and x0r. There's nothing so amazing about this API hook. If you consider using a wrapper provided by Microsoft as pro, then what do you call those who can disable GG completely (eg. Moose)?


The bold line rocks.
Back to top
View user's profile Send private message
HomerSexual
Grandmaster Cheater Supreme
Reputation: 5

Joined: 03 Feb 2007
Posts: 1657

PostPosted: Thu Nov 22, 2007 2:04 pm    Post subject: Reply with quote

x0r has every right to flame this noob. He's saying false things and not giving credit to the maker of stuff.

And this thing is lame Rolling Eyes

_________________
Back to top
View user's profile Send private message
SkatSkat
Grandmaster Cheater
Reputation: 0

Joined: 30 Oct 2006
Posts: 648

PostPosted: Thu Nov 22, 2007 8:41 pm    Post subject: Reply with quote

blankrider wrote:
x0r has every right to flame this noob. He's saying false things and not giving credit to the maker of stuff.

And this thing is lame Rolling Eyes


there is never a time to flame.

_________________
"We're betting everything on ourselves tonight" - The Bouncing Souls
Back to top
View user's profile Send private message AIM Address
dnsi0
I post too much
Reputation: 0

Joined: 04 Jan 2007
Posts: 2674

PostPosted: Thu Nov 22, 2007 9:03 pm    Post subject: Reply with quote

Can you make it in delphi...
Back to top
View user's profile Send private message
appalsap
Moderator
Reputation: 0

Joined: 27 Apr 2006
Posts: 6753
Location: Pakistan

PostPosted: Thu Nov 22, 2007 9:04 pm    Post subject: Reply with quote

dnsi0 wrote:
Can you make it in delphi...


Microsoft didn't make an easy library for delphi, he would have to actually code something. Don't count on it!

_________________
Back to top
View user's profile Send private message
DeletedUser14087
I post too much
Reputation: 2

Joined: 21 Jun 2006
Posts: 3069

PostPosted: Thu Nov 22, 2007 9:04 pm    Post subject: Reply with quote

dnsi0 wrote:
Can you make it in delphi...


i lol'd, and btw OWS, welcome to CEF Laughing
Back to top
View user's profile Send private message
OneWhoSighs
Cheater
Reputation: 0

Joined: 13 Aug 2007
Posts: 32

PostPosted: Sat Nov 24, 2007 7:32 pm    Post subject: Reply with quote

x0r wrote:
OneWhoSighs wrote:
I dont compare to Legion. Legion is far better then me. I don't know why he would say that.

Here are some topics to the release for your proof

(remove the spaces in the urls)

http://forum.game cheetah.com/showthread.php?s=d706180a468d4190145bbe64fc440d07&t=26510
( ignore the top part, the bottom part is the emulator/bypass )

(change gamers to gamers)
http://www.gamers planet.net/forums/na-gunz/186891-full-gameguard-emulator-shared.html

The second link says credits to onewhosighs, and not legion is because the retard who leeched it from rc, posted it on gzp and put credits to me because I was the first person to release it, (legion asked me to post it for him).
Though it's patched now, Legion released the updated one, then that one got patched again, and he stopped and he is keeping it private.

Ok, now you've managed to fucking piss me off you fucking retard. That is all ripped from CEF and it does not emulate GameGuard at all, this was done by Matsy, this corrupts the GameGuard initialization routine and it never loads, this is a well known exploit and has been around for quite a while, he even documented how to do it. This only works on games with no CS2AUTH, so in all reality your friend just ripped Matsy's work, claimed it as his then got owned when GuNZ added the server auth to GameGuard (which apparently didn't exist before).


Moron, he didnt get owned when Gunz added the server auth. When I said emulated, I meant HE EMULATED THE SERVER AUTH. This is the whole reason he made the bypass.

It emulates the server auth, doesnt just disable gameguard.

Learn to reverse, and properly understand how his program works.

Quote,
INCA learned their lesson though(or maybe didn't learn it at all if you look from a performance point of view), they rewrote the keygen and encrypted blocks of it with themida

_________________


Back to top
View user's profile Send private message
Zand
Master Cheater
Reputation: 0

Joined: 21 Jul 2006
Posts: 424

PostPosted: Sat Nov 24, 2007 10:34 pm    Post subject: Reply with quote

x0r wrote:
OneWhoSighs wrote:
Moron, he didnt get owned when Gunz added the server auth. When I said emulated, I meant HE EMULATED THE SERVER AUTH. This is the whole reason he made the bypass.

It emulates the server auth, doesnt just disable gameguard.

Learn to reverse, and properly understand how his program works.

Quote,
INCA learned their lesson though(or maybe didn't learn it at all if you look from a performance point of view), they rewrote the keygen and encrypted blocks of it with themida

Oh wow, you're a fucking a retard. You've already made yourself out to be a 'pro' along with naming some other retard and you don't even know of Moose? Looks like you're talking a combination of shit and 'vapor' when you speak. Now to debunk your stupid ass theories, you said that GameGuard rewrote their authentication algorithm, wrong you stupid piece of shit. GameGuard's 'new' authentication algorithm (CS2) was implemented almost half a year (not globally, I guess GuNZ got it after the GG removal exploit was ported to GuNZ by Matsy) before your friend released that hoax (then conveniently claimed that iNCA rewrote their entire authentication algorithm in a day and shipped it off). Furthermore, GameGuard was already protected by Themida at the time the 'bypass' was released and anyone who knows how to reverse knows that Themida indiscriminately virtualizes all code whilst Code Virtualizer (which GameGuard's driver uses, not GameMon) allows selective code virtualization.

Seriously, just fuck off before you're made to look even more foolish.


Legion reversed the gameguard client -> server algo, not just the mov eax,262 to mov eax,755 and CreateProcessA crap. He added a new section to the gunz.exe (obfuscated), and detoured the original function to his function.

He posted some info in this thread
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> General programming All times are GMT - 6 Hours
Goto page Previous  1, 2, 3, 4  Next
Page 3 of 4

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites