π Learn to bypass Gameguard..:D
[G]CODER Here Releasing His GameGuard Bypass!
Code:
search for Intermoduler call kernel32.CreatMutexA
Under CMP EAX,0B7
Change JNZ to JMP.
Look for USER32.FindWindowA
Under TEST EAX,EAX
Change JE to JMP
Search for ASCII "nProtect GameGuard".
Directly underneath it.
Change from JNZ to JMP.
Search for IC the first kernel32.GetCurrentProcessId.
Above it look for TEST AL,AL.
Underneath change JNZ, to JMP.
Search for IC the second last kernel32.CreateProcessA.
Scroll up till you see ASCII "enc: %s".
Below it should be a set of PUSH commands,
Change the 3rd last PUSH 1 to PUSH 0.
Search for IC last kernel32.GetExitCodeProcess.
Above it look for the first MOV EAX,262.
Change from MOV EAX,262 to MOV EAX,755.
(Optional - So you do not have to pass start game arguments to exe)
search for ASCII "start game",
Under TEST EAX,EAX
Change from JE to JMP.
Credits:
Jewbacca (Ploxoraus).
Everyone else who contributed.
Detailed Instructions
Quote:
Originally Posted by Lucky_Phil
Detailed tutorial on making a No GameGuard Multi-Client executable.
So far the tutorials i have seen here are good, but for all you absolute newbies with none/next-to-none experience with Ollydbg here is a detailed tutorial on making the hacked client. (GG Bypass and Multi-Client)
Before you begin:
Make a backup of your game.exe file. I normally just make a copy of it in the same folder, except rename it to game.bak. That way, if you screw things up, you can easily delete the bad file, and then rename game.bak back to game.exe.
Code:
search for Intermoduler call kernel32.CreatMutexA
Under CMP EAX,0B7
Change JNZ to JMP.
Look for USER32.FindWindowA
Under TEST EAX,EAX
Change JE to JMP
Search for ASCII "nProtect GameGuard".
Directly underneath it.
Change from JNZ to JMP.
Search for IC the first kernel32.GetCurrentProcessId.
Above it look for TEST AL,AL.
Underneath change JNZ, to JMP.
Search for IC the second last kernel32.CreateProcessA.
Scroll up till you see ASCII "enc: %s".
Below it should be a set of PUSH commands,
Change the 3rd last PUSH 1 to PUSH 0.
Search for IC last kernel32.GetExitCodeProcess.
Above it look for the first MOV EAX,262.
Change from MOV EAX,262 to MOV EAX,755.
(Optional - So you do not have to pass start game arguments to exe)
search for ASCII "start game",
Under TEST EAX,EAX
Change from JE to JMP.
Credits:
Jewbacca (Ploxoraus).
Everyone else who contributed.
Detailed Instructions
Quote:
Originally Posted by Lucky_Phil
Detailed tutorial on making a No GameGuard Multi-Client executable.
So far the tutorials i have seen here are good, but for all you absolute newbies with none/next-to-none experience with Ollydbg here is a detailed tutorial on making the hacked client. (GG Bypass and Multi-Client)
Before you begin:
Make a backup of your game.exe file. I normally just make a copy of it in the same folder, except rename it to game.bak. That way, if you screw things up, you can easily delete the bad file, and then rename game.bak back to game.exe.
..
