RE: GameUnguard(tm), and what has happened to MPC?

[Sirmabus]

Spoken mostly to whom ever runs this site anymore:
This is sad, really sad that MPC has fallen into such disrepair. I could try to be more soft about the obvious, but I'm going to "shoot from the hip" in hopes it will educate which should already be pretty obvious.

I mainly spent my time in the "Strategy Games / MMORPGs / MMOFPS's" but that has fallen even into steeper decline since "nightmare" has ceased to be a mod.
It's too a point where it's pretty much pointless comming here anymore because the signal to noise ratio is like .001 to 1.

Boss, If you are brave you will learn something from this post, ban me if it makes you feel better, if you can't accept what I'm saying, delete this post and pretend it never happend.

If you (Mod, flamers, et al) even bothered to look at my previous posts you will see they are 90% informational, and or, stuff I have released.

The point was more then anything here to show it could be done. I usally avoid such posts as If I was really looking for fame I do have stuff to show. I'm not looking for approval.
Sure any thing can be faked/photoshoped. I can show you a process list, then you can say I used one of the four or so comercial GameGuard bypasses (from reading thier feature list, mine is better anyhow).

And I do help peple if they ask for it. Mods look at my PM's and you'll see I help people that help them selfs.
If I released this it would probably be fixed and mean more work getting it back where it was.
If you want help with something, you (anyone) will invest your self. People that except hand outs in life usally end up with little.

I'm going to make some criticisms of this site that's ment to be constructive, and not an attack on anyone:

1) For people that are knowledgeable and source, and do any kind of releases. They are going to come here less and less. Why, because the mods are not quite doing thier jobs anymore. They are too lax now.
Who wants to sort through pages of "give me this", "any one have a hack for xxx", "how do I ... xxx noob question" et al? Yes you will get some copycats, and some less inteligent people will post stuff, but the over all quality and real information posts will continue to decline with out intervention.

Reality check:
Out of 20 topics on the first "GameGuard" page here )now MPC has lagged for me and I can't give 100% exact stats but):

At least 4 topics are totaly unrelated to "GameGuard", "Anti-Cheat" or anything close.
Even the first post below mine "Need help creating bot that can send key".
If at all it should be moved to the "New bee Section" or deleted entirely!

Then out of the 16 remaining there are around 2 or 3 informative posts. The the rest ~13 are give me, give me, give me, begger posts, and, or real noob questions that obviously the poster has taken zero time or investment to do something for them self. People that want every thing for free, and, or, feel self education is a myth.


2) The new add thing is too invasive, making it at times frustrating to use this site. If you use a browser like Firefox it some times locks up the page where you can't scroll to click on the 'X' to close the add.
IMHO: Source and informative posts means more active viewers, and means more real people that have money to spend, and thus more add revenue.


Whom ever runs this site, and the Mods really need to step up and turn the site back from the "OMG Hacks!" crowed back to at least a 1 to 4 ratio of informative/release content to noob/begger/flame content IMHO.

Other then that thanks for the few years of some times informative sharing posts and fun we had while it lasted..

aka Sirmbus

[frogger]

tl;dr

However, if you really have something to show, PM me, I'll appreciate all details about your work in the last thread.

[Dark Hacker]

Lately we've been overrun with noobs & leechers. Most of the noobs are leechers and vice versa.

We can hardly help it. We are already working hard to decrease the amount of beg threads and such, but we can't eliminate it. The problem is just that mpc is famous for easy hacks, so the word spreads fast...

[Sirmabus]

I can't talk alot about the screen shot'ed way it because a lot of low level info was shared with me. And again, it would probably result in a major GG upgrade and be more work over again.

Before, from my previous post I posted some basic knowledge that I learned from the "outside in", this time I took an "inside out" attack. Really if you want to handle GameGuard, XTrap, etc., it's best to unpack all the files and reverse engineer them period. Then it comes kind of easy after that.

If you post the details in any public place though, it's too easy for them to read it and fill in the holes with a new GameGuard version.
That's why you see things that work(ed) like Jamilah no longer work. That program probably would still work, you can see GG searches for some of these by name:
"\\.\jamilah"
"\\.\Ghostsec"
...
..

I'll post how I coexisted with GG before, hopefully it won't get fixed any time soon:

Assuming you are making your client game exploits, and, or, a bot with an injected DLL (as most would probably do), you can inject your DLL, but you have to do it before the game process runs (as GG has not started yet).
Even on packed EXE's just put a thread in your DLL to delay for about a second.
Then you can use hardware breakpoints (up to four), and direct IAT hooks. API Import patch hooks generaly won't work because they look for those (they at least check the first few bytes of several functions to see if there is a JMP in them). Mostly they check wsock functions send(), recv(), and the timer functions.

So as long as these things still work (It did for SilkRoad a few months ago), and you can be creative using only 4 hooks, and lots of IAT import hooks you can sit under the nose of GG and run things just fine!
I won't post all the details how to do that here, IAT hooks are fairly easy there are some sources and, or tutorials around for this. For HWBPs you have to have your own exception handler handle the hooks, etc. Google for it..

Also making copies of API functions will work. At least for a lot of functions, not for core memory ones like VirtualProtectEx() no matter what once GameMon.des has run. If you want to use things like SendInput(), SendMessage(), etc., you have to either make actual copies of the API functions, or you can even make a temp copy of say "User32.dll" (with a new name, I.E. "UserXX.tmp") and call GetProcAddress(hMyUser32Copy, "SendInput()"). You have to do all this before GG starts of course, because the whole idea is to make your own copies of these before GG puts it's system wide user land hooks in. It won't have hooked your copy because it won't know about it.
Also if you call directly (via ntdll.dll functions) some things like NtProtectVirtualMemory() the GG KMD will see it and might reboot your computer, at the very least it will bypass the call.

Again a way to coexist with nProtect GameGuard is HWBPs, IAT hooks, and API copies (inside the space of your target process). As long as these things havn't been fixed in the GG version your game uses..