Cheat Engine :: View topic - Task Manager Processes

Cheat Engine Forum Index

Cheat Engine
The Official Site of Cheat Engine

FAQ

Usergroups

Register

Log in to check your private messages

Task Manager Processes

Cheat Engine Forum Index -> General programming

View previous topic :: View next topic

Author

Message

EvilMonster
Newbie cheater

Reputation: 0

Joined: 02 Jul 2007
Posts: 11

Posted: Thu Jul 26, 2007 1:18 am Post subject: Task Manager Processes

i was wondering if there is anyway i could bring up processes that has been hide by gameguard or some other things?? i could bypass the GG but as soon as the game finish loading gameguard, the client process jus disappear so i cant attach to an UCE..any1 got suggestions?

Send private message

Kevin
Grandmaster Cheater Supreme

Reputation: 0

Joined: 07 Mar 2007
Posts: 1139
Location: Spiderman-World

Posted: Thu Jul 26, 2007 8:09 am Post subject:

i'm not sure i understand you 100% ... but you can't attach a UCE because GG loads to fast or something? Try AutoAttach ...

Send private message

MSN Messenger

UnLmtD
Grandmaster Cheater

Reputation: 0

Joined: 13 Mar 2007
Posts: 894
Location: Canada

Posted: Thu Jul 26, 2007 8:29 am Post subject: Re: Task Manager Processes

Reply with quote

EvilMonster wrote:

i was wondering if there is anyway i could bring up processes that has been hide by gameguard or some other things?? i could bypass the GG but as soon as the game finish loading gameguard, the client process jus disappear so i cant attach to an UCE..any1 got suggestions?

MapleStory and GameGuard are hidden using the DKOM (Direct Kernel Object Manipulation) method to hide themself. DKOM relies on unlinking the EPROCESS link pointers. So if you want to unhide them, you need to restore the link pointers. I already tried to unhide them myself, they showed up on Process Explorer but in a few seconds I got a BSOD, maybe it was an error in the code.

Besides, even if you unhide GameMon.des (or what ever it is) it won't help you to bypass it.
_________________

Send private message

EvilMonster
Newbie cheater

Reputation: 0

Joined: 02 Jul 2007
Posts: 11

Posted: Thu Jul 26, 2007 10:37 pm Post subject: Re: Task Manager Processes

Reply with quote

UnLmtD wrote:

EvilMonster wrote:

i was wondering if there is anyway i could bring up processes that has been hide by gameguard or some other things?? i could bypass the GG but as soon as the game finish loading gameguard, the client process jus disappear so i cant attach to an UCE..any1 got suggestions?

MapleStory and GameGuard are hidden using the DKOM (Direct Kernel Object Manipulation) method to hide themself. DKOM relies on unlinking the EPROCESS link pointers. So if you want to unhide them, you need to restore the link pointers. I already tried to unhide them myself, they showed up on Process Explorer but in a few seconds I got a BSOD, maybe it was an error in the code.

Besides, even if you unhide GameMon.des (or what ever it is) it won't help you to bypass it.

So if thats the case, then that means even the UCE bypassed the GG i still cant attach the process to the UCE.... so, is there anyway tat allows me to
attach the game to the UCE?

Send private message

UnLmtD
Grandmaster Cheater

Reputation: 0

Joined: 13 Mar 2007
Posts: 894
Location: Canada

Posted: Fri Jul 27, 2007 8:34 am Post subject:

Well then it most be some sort of a protection from the game. _________________

Send private message

Simsgy
Grandmaster Cheater

Reputation: 0

Joined: 07 May 2007
Posts: 581
Location: My new avatar <3

Posted: Fri Jul 27, 2007 9:09 am Post subject: Re: Task Manager Processes

Reply with quote

EvilMonster wrote:

Besides, even if you unhide GameMon.des (or what ever it is) it won't help you to bypass it.

Maybe he is trying to make a program which close MapleStory at an exact time like zomgiownyou did.
Or maybe trying to make a bot using SendMessage / PostMessage?
_________________

Designer, WebMaster and a Delphi programmer.
TrPlayer, my biggest Delphi project hosted on SourceForge.net

Send private message

Visit poster's website

AIM Address

Yahoo Messenger

UnLmtD
Grandmaster Cheater

Reputation: 0

Joined: 13 Mar 2007
Posts: 894
Location: Canada

Posted: Fri Jul 27, 2007 9:18 am Post subject: Re: Task Manager Processes

Reply with quote

Simsgy wrote:

EvilMonster wrote:

Besides, even if you unhide GameMon.des (or what ever it is) it won't help you to bypass it.

Maybe he is trying to make a program which close MapleStory at an exact time like zomgiownyou did.

I'm zomgiownyou, and what you do is you do a OpenProcess while GameGuard is initializing and save the handle for later. And even if you make MapleStory reappear, OpenProcess is going to fail.

Quote:

Or maybe trying to make a bot using SendMessage / PostMessage?

Those function are not failing because MapleStory is hidden.
_________________

Send private message

Simsgy
Grandmaster Cheater

Reputation: 0

Joined: 07 May 2007
Posts: 581
Location: My new avatar <3

Posted: Fri Jul 27, 2007 9:47 am Post subject: Re: Task Manager Processes

Sorry... Btw - Isn't he trying to unhide Maple's process? Maybe for PostMessages? _________________ Designer, WebMaster and a Delphi programmer. TrPlayer, my biggest Delphi project hosted on SourceForge.net

Send private message

Visit poster's website

AIM Address

Yahoo Messenger

appalsap
Moderator

Reputation: 0

Joined: 27 Apr 2006
Posts: 6753
Location: Pakistan

Posted: Fri Jul 27, 2007 9:48 am Post subject:

PostMessage is window based, not process based. Un-hiding the process does nothing.

Send private message

Simsgy
Grandmaster Cheater

Reputation: 0

Joined: 07 May 2007
Posts: 581
Location: My new avatar <3

Posted: Fri Jul 27, 2007 10:17 am Post subject:

Reply with quote

appalsap wrote:

PostMessage is window based, not process based. Un-hiding the process does nothing.

Alright Appalsap, sorry for being noobish Embarassed

Embarassed

Well, Iv'e learned another thing today, thanks =]
_________________

Designer, WebMaster and a Delphi programmer.
TrPlayer, my biggest Delphi project hosted on SourceForge.net

Send private message

Visit poster's website

AIM Address

Yahoo Messenger

EvilMonster
Newbie cheater

Reputation: 0

Joined: 02 Jul 2007
Posts: 11

Posted: Fri Jul 27, 2007 11:03 pm Post subject:

hmm is there anywhere to unhide the process so that it could be attach to UCE???

Send private message

UnLmtD
Grandmaster Cheater

Reputation: 0

Joined: 13 Mar 2007
Posts: 894
Location: Canada

Posted: Sat Jul 28, 2007 8:15 am Post subject:

Search for a tool called R.A.I.D.E Not promising anything. _________________

Send private message

EvilMonster
Newbie cheater

Reputation: 0

Joined: 02 Jul 2007
Posts: 11

Posted: Sat Jul 28, 2007 8:18 am Post subject:

Thx, i'll try it I downloaded the Beta version but how do i use it? i got it from rootkit dot com

Send private message

Display posts from previous:

	Cheat Engine Forum Index -> General programming	All times are GMT - 6 Hours
Page 1 of 1

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum

Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki IRC (#CEF) Twitter
Third party websites