Results 1 to 1 of 1
  1. #1
    Dwar
    Dwar is offline
    Veteran Dwar's Avatar
    Join Date
    2010 Mar
    Posts
    2,222
    Thanks Thanks Given 
    211
    Thanks Thanks Received 
    2,230
    Thanked in
    292 Posts
    Rep Power
    10

    GameGuard rev.1512 Unpacked Modules

    The unpacked files are a good reference for people wanting to understand how GameGuard works + eventually making a bypass.

    All of the files are unpacked and the executable code is fully readable with all of the APIs resolved. There is just one thing stripped. GameGuard main module, GameMon.exe, uses Themida VMs. Unfortunately unable to resolve Themida VMs so they are stripped, and as a result - the virtualized memory is not available.

    List of unpacked files:
    • GameGuard.exe (nProtect GameGuard Launcher)
    • GameMon.exe (nProtect Game Monitor)
    • ggerror.exe (nProtect GameGuard Error Report)
    • ggscan.dll (nProtect Scan Module)
    • npgg9x.dll (nProtect GameGuard Module)
    • npggNT.dll (nProtect GameGuard Module)
    • npsc.dll (nProtect SpeedCheck Module)
    • npscan.dll (nProtect GameGuard Scan Engine)

    Reversed by: HellSpider


    Russian

    Здесь представлены распакованные файлы GameGuard, что будет полезно для понимания принципов работы данной защиты, а также для написания байпоссов

    VirusTotal result: clean

    Please register or login to download attachments.

    Please, post your questions on forum, not by PM or mail

    I spend my time, so please pay a little bit of your time to keep world in equilibrium

  2. The Following User Says Thank You to Dwar For This Useful Post:


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •