Bypassing Gameguard: Imported functions

Expanding a bit more on this anti-cheat.

Code:

void function_list_dump( )
{
dwGameGuardClassBase = GetGameGuard( );

do
{
GGMethodTable = *(PDWORD*)dwGameGuardClassBase;
Sleep(10);
}
while( !GGMethodTable );

while( *(PDWORD)((DWORD)dwGameGuardClassBase + 4) == NULL )
Sleep(10);

do
{
GGMethodTable2 = **(PDWORD**)((DWORD)dwGameGuardClassBase + 4);
}
while( !GGMethodTable2 );

#ifdef LOG_GG
pLog->log("\n-------------\nGG Method Table 1\nsize = %d", dwGetMethodCount(GGMethodTable));
PrintMethodLocations( GGMethodTable );
pLog->log("\n-------------\nGG Method Table 2\nsize = %d", dwGetMethodCount(GGMethodTable2));
PrintMethodLocations( GGMethodTable2 );
ExitProcess(0);
#endif
}

GetGameGuard? Another GG function that's wrapped.

Code:

typedef PVOID (__cdecl* tGetGameGuard)( );
tGetGameGuard GetGameGuard = (tGetGameGuard)GGPTR;

GGPTR? Location of this function

Code:

mov eax, offset off_D25874
retn

Shad0w just print the functions like this:

Code:

void PrintMethodLocations( PDWORD pdwVMT )
{
DWORD dwIndex = 0;

for ( dwIndex = 0; pdwVMT[ dwIndex ]; dwIndex++ )
{
if ( IsBadCodePtr( ( FARPROC ) pdwVMT[ dwIndex ] ) )
{
break;
}

pLog->log("%i [ 0x%x ]", dwIndex, pdwVMT[dwIndex]);
}

}

Credit:Shad0w

dont thanks me yet just wait for any suggestion about this code.

you use my signature make other for that

---------- Post added at 08:36 AM ---------- Previous post was at 08:35 AM ----------

Originally Posted by Farah[Aisyah]

Expanding a bit more on this anti-cheat.

Code:
void function_list_dump( )
{
dwGameGuardClassBase = GetGameGuard( );

do
{
GGMethodTable = *(PDWORD*)dwGameGuardClassBase;
Sleep(10);
}
while( !GGMethodTable );

while( *(PDWORD)((DWORD)dwGameGuardClassBase + 4) == NULL )
Sleep(10);

do
{
GGMethodTable2 = **(PDWORD**)((DWORD)dwGameGuardClassBase + 4);
}
while( !GGMethodTable2 );

#ifdef LOG_GG
pLog->log("\n-------------\nGG Method Table 1\nsize = %d", dwGetMethodCount(GGMethodTable));
PrintMethodLocations( GGMethodTable );
pLog->log("\n-------------\nGG Method Table 2\nsize = %d", dwGetMethodCount(GGMethodTable2));
PrintMethodLocations( GGMethodTable2 );
ExitProcess(0);
#endif
}

GetGameGuard? Another GG function that's wrapped.

Code:
typedef PVOID (__cdecl* tGetGameGuard)( );
tGetGameGuard GetGameGuard = (tGetGameGuard)GGPTR;

GGPTR? Location of this function

Code:
mov eax, offset off_D25874
retn

Shad0w just print the functions like this:

Code:
void PrintMethodLocations( PDWORD pdwVMT )
{
DWORD dwIndex = 0;

for ( dwIndex = 0; pdwVMT[ dwIndex ]; dwIndex++ )
{
if ( IsBadCodePtr( ( FARPROC ) pdwVMT[ dwIndex ] ) )
{
break;
}

pLog->log("%i [ 0x%x ]", dwIndex, pdwVMT[dwIndex]);
}

}

Credit:Shad0w

dont thanks me yet just wait for any suggestion about this code.

no double post i know you post this in other forum make one post

how to use this? help me.

Originally Posted by newbiedivine

how to use this? help me.

It's A Code Kids

sorce codes

why u puting theus. in this web is soo many who dont know waht to do witch them, why u dont creat fils whitch we can just bypas gg

YOLO

where this code to paste at google chrome or at create notepad file

Old code is old. If I wasn't wrong it is 2012's.

nice anyone can make a bypass or something after a week for sure ^^

LOL kids? U must paste this code at C+++ and learn it by urself

Originally Posted by fikrihamzah98

where this code to paste at google chrome or at create notepad file

This is a 2012 source code. From a November GameGuard Patch.
Firstly, you're going to need to know your APIs Inside out, like you can trace the Back of your Hand.
You're also going to need to know a Fucking shitload of Assembly & Reversing, That's bassically The minimun.
After that you can start Using the C++ Client to code your Reversed Functions

Actually , you not only you must know standard coding languages such as C or C++, you do also need to know reversing.

Originally Posted by arunis

sorce codes

why u puting theus. in this web is soo many who dont know waht to do witch them, why u dont creat fils whitch we can just bypas gg

Ur English PowerFull Let Me Help Source Codes

Why U Putting this.at mpgh so many dont know what to do with them why dont u create files which we can just bypass GG-gameGuard

---------- Post added at 05:57 AM ---------- Previous post was at 05:57 AM ----------

Originally Posted by ♥prepixjr+

Right

yeah i agree with the idea,just create a file then attact it

Originally Posted by nordin25

Ur English PowerFull Let Me Help Source Codes

it patch ?

Originally Posted by Farah[Aisyah]

it patch ?

Yes, long ago. It was a leeched from a november post. Anyway you can't really do shit with it. You need to learn reversing other than having extreme knowledge in C++/C/C# , whatever you're coding your trainer in. NO one will spend time for this antihack as well, it gets patched too quickly.

Bypassing Gameguard: Imported functions

Post a Reply

Similar Threads

Tags for this Thread