No Cooldown + Zoomhack without bypass?

[joxof]

i hope we can use this without a bypass, but how to search no cooldown + zoomhack addresses without a bypass ?

maybe, we can use ollydbg to doing that

[drax189]

no cooldown idk

[joxof]

right now, i have 5 addresses of no cooldown & 2 addresses of zoom hack...
i will tested ASAP

Originally Posted by drax189

no cooldown idk

--> it's just for cabal bypassed /fixedmain.exe

[PierceTheGreat]

Originally Posted by joxof

right now, i have 5 addresses of no cooldown & 2 addresses of zoom hack...
i will tested ASAP



--> it's just for cabal bypassed /fixedmain.exe

Make it in .dll file?

[joxof]

unfortunately, Gameguard already blocked array of bytes & NOP function

Originally Posted by PierceTheGreat

Make it in .dll file?

yup, i make it in .dll file to hack unbypassed cabal/cabalmain.exe

[кev]

Originally Posted by joxof

unfortunately, Gameguard already blocked array of bytes & NOP function

Actually the reason why code section modifications (nops & overwriting) doesn't work is because GameGuard periodically scans code section and closes the game if it finds that anything in there has been touched. I've got a theory on how to bypass the integrity check but haven't had time to test it yet.

Another option is to absolutely destroy GameGuard and cripple it's functionality from ring0.

BTW, one way to bypass cooldown is to edit the skills directly. Haven't looked into zooming much yet.

[joxof]

--> is this tutorial for bypass the integrity check of GameGuard?

[bartbilf]

Originally Posted by кev

Another option is to absolutely destroy GameGuard and cripple it's functionality from ring0.

BTW, one way to bypass cooldown is to edit the skills directly. Haven't looked into zooming much yet.

The zooming can't be programmend into a .dll file, it will always close the game. And you know how to get rid of GG on kernel level? Wtf o.O

Originally Posted by joxof

unfortunately, Gameguard already blocked array of bytes & NOP function

yup, i make it in .dll file to hack unbypassed cabal/cabalmain.exe

This is why you need a bypassed client, if you have a bypassed client of the current cabalmain, the addresses will be the same. So you can find your addresses on the bypassed client, then code that into a .dll file and inject it into the 'normal' client.

[кev]

Originally Posted by joxof

--> is this tutorial for bypass the integrity check of GameGuard?

Haven't seen that one before and don't have time to read it through at the moment. But by quick look I got an impression that it's talking about jmp detours which are opcode modifications and as such are picked up by GG as much as any other opcode patches. I may be wrong though, I haven't jmp detoured anything in ages.

Originally Posted by bartbilf

The zooming can't be programmend into a .dll file, it will always close the game. And you know how to get rid of GG on kernel level? Wtf o.O

It will close the game only if you do it by patching opcodes. And even then only if it finds your modifications, which it won't if you (for example) redirect it's scans to a unmodified copy of the section. But naturally you need to be on ring0 to do that along with doing some other kernel level hooking of your own. I won't go in to details however because I have no interest nor time to start researching GG again.

So I'd rather evade it and it's detection routines from userland as much as possible. Going down to kernel level just to cheat in a game sounds.. stupid. Plus it's unfeasible to most people.

Besides, there's more challenge to it and proves what a piece of **** GG really is despite all of its rootkitish behavior. It's a pain in the ass for any gamer (legit or not) due to it's aggressiveness yet it accomplishes nothing in the end.