Cheat Engine bypass GameGuard

GameGuard sometimes called GG) is an anti-cheating software developed by INCA Internet. It is installed alongside many Asian massively multiplayer online roleplaying games (MMORPGs) such as Lineage II, 9Dragons, Cabal Online, Phantasy Star Universe, GunZ: The Duel, Flyff, Pangya and Ragnarok Online to block malicious applications and common methods of cheating. nProtect GameGuard provides B2B2C (Business to Business to Consumer) security services for online game companies and portal sites.

GameGuard hides the game application process, monitors the entire memory range, terminates applications defined by the game vendor and INCA Internet to be cheats (QIP for example), blocks certain calls to DirectX functions and Windows APIs, and auto-updates itself to change as new threats surface.

GameGuard possesses a database on game hacks based on security references from more than 260 game clients. Some editions of GameGuard are now bundled with INCA Internet's Tachyon anti-virus/anti-spyware library, and others with nProtect KeyCrypt, an anti-keylogger software that protects the keyboard input information.

If it Happen. Go around changing the dlls' names in CE directory, change the names in hex-editor. After that, look for Cheat Engine, and change all Cheat Engine into blahblahblah or something random.

So, let's see here.

1. Rename Cheat Engine.exe to blahblahblah.exe (or other 12-letter)
2. Rename CEHook.dll to blahbl.dll (or other 6-letter)
(optional) Rename Cheat Engine Client.exe to blahblahblahblahbla.exe (or other 19-letter)
3. Open up XVI32 or other hex-editor or Reshack
4. Change all the Cheat Engine in any of the renamed files to blahblahblah (Yes, even the Cheat Engine - not only Cheat Engine.exe)

5. Change all the CEHook.dll to blahbl.dll in any of the renamed files
(optional) Change all the Cheat Engine Client to blahblahblahblahbla in any of the renamed files
6. Open up RegHack
7. Go to Version Info
8. Change the
Code:

1 VERSIONINFO
FILEVERSION 4,3,0,6631
PRODUCTVERSION 4,3,0,6631
FILEOS 0x4
FILETYPE 0x1
{
BLOCK "StringFileInfo"
{
BLOCK "040904E4"
{
VALUE "CompanyName", ""
VALUE "FileDescription", "Cheat Engine 4.3"
VALUE "FileVersion", "4.3.0.6631"
VALUE "InternalName", "CheatEngine"
VALUE "LegalCopyright", "none"
VALUE "LegalTrademarks", "-"
VALUE "OriginalFilename", "Cheat Engine.EXE"
VALUE "ProductName", ""
VALUE "ProductVersion", "4.3"
VALUE "Comments", "report bugs and or suggestions to dark_byte@hotmail.com"
}
}

BLOCK "VarFileInfo"
{
VALUE "Translation", 0x0409 0x04E4
}
}

into
Code:


1 VERSIONINFO
FILEVERSION 4,3,0,6631
PRODUCTVERSION 4,3,0,6631
FILEOS 0x4
FILETYPE 0x1
{
BLOCK "StringFileInfo"
{
BLOCK "040904E4"
{
VALUE "CompanyName", ""
VALUE "FileDescription", ""
VALUE "FileVersion", ""
VALUE "InternalName", "blahblahblah"
VALUE "LegalCopyright", ""
VALUE "LegalTrademarks", ""
VALUE "OriginalFilename", "blahblahblah.EXE"
VALUE "ProductName", ""
VALUE "ProductVersion", ""
VALUE "Comments", ""
}
}

BLOCK "VarFileInfo"
{
VALUE "Translation", 0x0409 0x04E4
}
}

Related Post :