[Release] 5 min Gameguard Bypass

[AllesFlauschig]

Hello,

was bored again. Topic says it.

Instructions

Just inject bypass.dll into "Client_Release.exe" as admin on startup - now u have 5 mins without GameGuard active. You can use Extreme Injector or any other injector, just use google.

You will get kicked after 5 mins.

Virustotal

 Spoiler

https://www.virustotal.com/gui/file-analysis/NTQwNTFjNDkyMzgxNWYwYWI3OTUxYmFmNmRlMmQ3Mzk6MTc1Nj M4MDg5OQ==

Btw. it updates itself. If they don't change to much.

[NocturneCheats]

Useful information: If you rejoin a server 5 min timer resets itself. Goodluck.

[cracksuxer200]

Originally Posted by NocturneCheats

Useful information: If you rejoin a server 5 min timer resets itself. Goodluck.

More info, server heartbeat disconnects you because when u disable GG (did not really look into ur code but they all do the same), both GameGuard.des and the shitty x64 wrapper die, thus never replying to CSAUTH_ACK

Rejoining server or sending EU_LOGIN_REQ refreshes player session token, but it just delays the inevitable, they are dumb but not that much.

sig: 55 8B EC 6A ? 68 ? ? ? ? 64 A1 ? ? ? ? 50 83 EC ? A1 ? ? ? ? 33 C5 50 8D 45 ? 64 A3 ? ? ? ? 8B 45 ? 89 45 ? 8B 4D ? 81 E9

...
  v12[1] = a1 - 0x3E9;
  switch ( a1 )
  {
    // These two handle the lost IPC communications
    case 0x3E9:
      ShellExecuteA(0, 0, "GameSubDialog.exe", "GameGuard Comm Error (1001)", 0, 1);
      exit(0);
    case 0x3EA:
      ShellExecuteA(0, 0, "GameSubDialog.exe", "GameGuard Comm Close (1002)", 0, 1);

....
    // this part sends the CS_AUTH_REQ reply
    case 0x3FB:
      v10[1] = a2;
      something(v4, (const char *)(a2 + 8), *(_DWORD *)(a2 + 4));
      v13 = 1;
      if ( sub_4DEA50(v4) ) {
        v7 = unknown_libname_1074(v4);
        init_stuff();
        CS_AUTH_REQ(v4, &v7);
        v6 = 1;
        v13 = 0xFFFFFFFF;
        deconstructor(v4);
        result = v6;
      }
      else {
        MessageBoxA(0, "GameGuard auth data is NULL", "Error", 0);
        v8 = 0;
        v13 = 0xFFFFFFFF;
        deconstructor(v4);
        result = v8;
      }
      break;
....
}

[yhijroie331]

Originally Posted by NocturneCheats

Useful information: If you rejoin a server 5 min timer resets itself. Goodluck.

another way is to change integrity lvl for Cheat Engine & Terminate Thread:GameMon.des+0x23C60

[NocturneCheats]

Originally Posted by yhijroie331

another way is to change integrity lvl for Cheat Engine & Terminate Thread:GameMon.des+0x23C60

That's what i do to prevent GG from starting:

CreateProcessA:
db C3

Client_Release.exe+D0270:
db C3

Client_Release.exe+D0D10:
db C3

Client_Release.exe+91A03 :
db E9 85 01 00 00 90

Game starts without GG, so there is no GG thread

[AllesFlauschig]

Originally Posted by NocturneCheats

That's what i do to prevent GG from starting:

CreateProcessA:
db C3

Client_Release.exe+D0270:
db C3

Client_Release.exe+D0D10:
db C3

Client_Release.exe+91A03 :
db E9 85 01 00 00 90

Game starts without GG, so there is no GG thread

Didnt look into the thread he posted, but im pretty sure he meant the timer thread. But even if u suspend the thread, yes u wont get the kick msg, but u can't join rooms after 5 mins.

[NocturneCheats]

Originally Posted by AllesFlauschig

Didnt look into the thread he posted, but im pretty sure he meant the timer thread. But even if u suspend the thread, yes u wont get the kick msg, but u can't join rooms after 5 mins.

I know, mine prevents GG to be loaded. Technically there shouldn't be any thread related to "GameGuard.des+...", that's what i'm saying.

[yhijroie331]

Originally Posted by AllesFlauschig

Didnt look into the thread he posted, but im pretty sure he meant the timer thread. But even if u suspend the thread, yes u wont get the kick msg, but u can't join rooms after 5 mins.

This thread:close any process that started as high integrity lvl
And change its integ... Lvl
that why i terminate it

Originally Posted by AllesFlauschig

. But even if u suspend the thread, yes u wont get the kick msg, but u can't join rooms after 5 mins.

Did you tested?

[eloscar24]

Where is it?>

[AllesFlauschig]

Originally Posted by eloscar24

Where is it?>

It's attached, lol

[eloscar24]

Originally Posted by AllesFlauschig

It's attached, lol

I tried to inject with extreme DLL, but it doesn't let inject.

[AllesFlauschig]

Did u install all the runtimes? What error are u getting?

[Crack-wtf]

5 Minuten purer Genuss