Bypassing Gameguard: Imported functions

Expanding a bit more on this anti-cheat.

Code:

void function_list_dump( )
{
dwGameGuardClassBase = GetGameGuard( );

do
{
GGMethodTable = *(PDWORD*)dwGameGuardClassBase;
Sleep(10);
}
while( !GGMethodTable );

while( *(PDWORD)((DWORD)dwGameGuardClassBase + 4) == NULL )
Sleep(10);

do
{
GGMethodTable2 = **(PDWORD**)((DWORD)dwGameGuardClassBase + 4);
}
while( !GGMethodTable2 );

#ifdef LOG_GG
pLog->log("\n-------------\nGG Method Table 1\nsize = %d", dwGetMethodCount(GGMethodTable));
PrintMethodLocations( GGMethodTable );
pLog->log("\n-------------\nGG Method Table 2\nsize = %d", dwGetMethodCount(GGMethodTable2));
PrintMethodLocations( GGMethodTable2 );
ExitProcess(0);
#endif
}

GetGameGuard? Another GG function that's wrapped.

Code:

typedef PVOID (__cdecl* tGetGameGuard)( );
tGetGameGuard GetGameGuard = (tGetGameGuard)GGPTR;

GGPTR? Location of this function

Code:

mov eax, offset off_D25874
retn

Shad0w just print the functions like this:

Code:

void PrintMethodLocations( PDWORD pdwVMT )
{
DWORD dwIndex = 0;

for ( dwIndex = 0; pdwVMT[ dwIndex ]; dwIndex++ )
{
if ( IsBadCodePtr( ( FARPROC ) pdwVMT[ dwIndex ] ) )
{
break;
}

pLog->log("%i [ 0x%x ]", dwIndex, pdwVMT[dwIndex]);
}

}

Credit:Shad0w

dont thanks me yet just wait for any suggestion about this code.

you use my signature make other for that

---------- Post added at 08:36 AM ---------- Previous post was at 08:35 AM ----------

Originally Posted by Farah[Aisyah]

Expanding a bit more on this anti-cheat.

Code:
void function_list_dump( )
{
dwGameGuardClassBase = GetGameGuard( );

do
{
GGMethodTable = *(PDWORD*)dwGameGuardClassBase;
Sleep(10);
}
while( !GGMethodTable );

while( *(PDWORD)((DWORD)dwGameGuardClassBase + 4) == NULL )
Sleep(10);

do
{
GGMethodTable2 = **(PDWORD**)((DWORD)dwGameGuardClassBase + 4);
}
while( !GGMethodTable2 );

#ifdef LOG_GG
pLog->log("\n-------------\nGG Method Table 1\nsize = %d", dwGetMethodCount(GGMethodTable));
PrintMethodLocations( GGMethodTable );
pLog->log("\n-------------\nGG Method Table 2\nsize = %d", dwGetMethodCount(GGMethodTable2));
PrintMethodLocations( GGMethodTable2 );
ExitProcess(0);
#endif
}

GetGameGuard? Another GG function that's wrapped.

Code:
typedef PVOID (__cdecl* tGetGameGuard)( );
tGetGameGuard GetGameGuard = (tGetGameGuard)GGPTR;

GGPTR? Location of this function

Code:
mov eax, offset off_D25874
retn

Shad0w just print the functions like this:

Code:
void PrintMethodLocations( PDWORD pdwVMT )
{
DWORD dwIndex = 0;

for ( dwIndex = 0; pdwVMT[ dwIndex ]; dwIndex++ )
{
if ( IsBadCodePtr( ( FARPROC ) pdwVMT[ dwIndex ] ) )
{
break;
}

pLog->log("%i [ 0x%x ]", dwIndex, pdwVMT[dwIndex]);
}

}

Credit:Shad0w

dont thanks me yet just wait for any suggestion about this code.

no double post i know you post this in other forum make one post

how to use this? help me.

Originally Posted by newbiedivine

how to use this? help me.

It's A Code Kids

sorce codes

why u puting theus. in this web is soo many who dont know waht to do witch them, why u dont creat fils whitch we can just bypas gg

Originally Posted by arunis

sorce codes

why u puting theus. in this web is soo many who dont know waht to do witch them, why u dont creat fils whitch we can just bypas gg

Ur English PowerFull Let Me Help Source Codes

Why U Putting this.at mpgh so many dont know what to do with them why dont u create files which we can just bypass GG-gameGuard

---------- Post added at 05:57 AM ---------- Previous post was at 05:57 AM ----------

Originally Posted by 777jay

This is a 2012 source code. From a November GameGuard Patch.
Firstly, you're going to need to know your APIs Inside out, like you can trace the Back of your Hand.
You're also going to need to know a Fucking shitload of Assembly & Reversing, That's bassically The minimun.
After that you can start Using the C++ Client to code your Reversed Functions

Actually , you not only you must know standard coding languages such as C or C++, you do also need to know reversing.

Right

Originally Posted by nordin25

Ur English PowerFull Let Me Help Source Codes

Why U Putting this.at mpgh so many dont know what to do with them why dont u create files which we can just bypass GG-gameGuard

---------- Post added at 05:57 AM ---------- Previous post was at 05:57 AM ----------

Right

it patch ?

Originally Posted by Farah[Aisyah]

it patch ?

Yes, long ago. It was a leeched from a november post. Anyway you can't really do shit with it. You need to learn reversing other than having extreme knowledge in C++/C/C# , whatever you're coding your trainer in. NO one will spend time for this antihack as well, it gets patched too quickly.

YOLO

zz

where this code to paste at google chrome or at create notepad file

LOL kids? U must paste this code at C+++ and learn it by urself

Originally Posted by fikrihamzah98

where this code to paste at google chrome or at create notepad file

Old code is old. If I wasn't wrong it is 2012's.

nice anyone can make a bypass or something after a week for sure ^^

This is a 2012 source code. From a November GameGuard Patch.
Firstly, you're going to need to know your APIs Inside out, like you can trace the Back of your Hand.
You're also going to need to know a Fucking shitload of Assembly & Reversing, That's bassically The minimun.
After that you can start Using the C++ Client to code your Reversed Functions

Actually , you not only you must know standard coding languages such as C or C++, you do also need to know reversing.

yeah i agree with the idea,just create a file then attact it

Bypassing Gameguard: Imported functions

Similar Threads

Tags for this Thread