CioNide
19th January 2008, 21:38
I recently figured out how to kill gameguard within your hack/pincracker. Thanks to gameguru, we can now make any hack undetected by gameguard.
This code is in C# by the way:
RefreshMapleProc();
byte[] bytesToWrite = { 0xB8, 0x55, 0x07 };
pKernel.WriteProcessMemory(GG_KILL_ADDRESS_EAX, bytesToWrite);
byte[] bytesToWrite2 = BitConverter.GetBytes(6946922); //{ 0x61, 0x00, 0x6a }
pKernel.WriteProcessMemory(GG_KILL_ADDRESS_PUSH, bytesToWrite2);
To use this code, you will need a base trainer(GUI, etc.). And Visual Studio C# 2008 Express Edition. After you have those you can implement this code in to a button called "Kill GameGuard" or "Bypass GameGuard".
The first line of code, RefreshMapleProc();, is just to see if maple is still open and to open its process, don't worry about it. The second line defines an array which to write. This array is written to the MOV EAX, 262 address, which we already know is the check to see if gameguard is open. Then using WriteProcessMemory, I write the selected arrays to the EAX address. It does the same thing for the Push 1 address. Defines a value (this time not an array, for no special reason.), and then writes. It's very simple. Just another example of using WriteProcessMemory to manipulate opcodes.
I hope this helps you trainer makers (C#) (I am making a trainer!)
And for everyone who was wondering about Syko Trainer 1.0(XiN Trainer 1.2) to come out, it will be released very soon thanks to the kill gameguard method!
Forgot to mention it, RefreshMapleProc(); must be identified also. If you want it to work.
But I can not help you with that lol.
This code is in C# by the way:
RefreshMapleProc();
byte[] bytesToWrite = { 0xB8, 0x55, 0x07 };
pKernel.WriteProcessMemory(GG_KILL_ADDRESS_EAX, bytesToWrite);
byte[] bytesToWrite2 = BitConverter.GetBytes(6946922); //{ 0x61, 0x00, 0x6a }
pKernel.WriteProcessMemory(GG_KILL_ADDRESS_PUSH, bytesToWrite2);
To use this code, you will need a base trainer(GUI, etc.). And Visual Studio C# 2008 Express Edition. After you have those you can implement this code in to a button called "Kill GameGuard" or "Bypass GameGuard".
The first line of code, RefreshMapleProc();, is just to see if maple is still open and to open its process, don't worry about it. The second line defines an array which to write. This array is written to the MOV EAX, 262 address, which we already know is the check to see if gameguard is open. Then using WriteProcessMemory, I write the selected arrays to the EAX address. It does the same thing for the Push 1 address. Defines a value (this time not an array, for no special reason.), and then writes. It's very simple. Just another example of using WriteProcessMemory to manipulate opcodes.
I hope this helps you trainer makers (C#) (I am making a trainer!)
And for everyone who was wondering about Syko Trainer 1.0(XiN Trainer 1.2) to come out, it will be released very soon thanks to the kill gameguard method!
Forgot to mention it, RefreshMapleProc(); must be identified also. If you want it to work.
But I can not help you with that lol.