Th1nkCh3ck

Th1nkCh3ck commented on issue Krock/dawn#336

Could this news be about the patch ? (virus abuse)

No it actually isn't about the patch but it looks like the anti cheat could be changed due to this piece of news

1 year ago

Th1nkCh3ck opened issue Krock/dawn#336

Could this news be about the patch ?

1 year ago

Th1nkCh3ck commented on issue Krock/dawn#242

Rework project

Hi @rohzuk.im not to say that your PR isn't useful, however, I wonder the use case of using sh for OpenWRT and Android (game has official support for Android already).

2 years ago

Th1nkCh3ck commented on issue Krock/GI-on-Linux#41

[Suggestion] Let the launcher.bat check for prober hosts configuration

I've seeked how to achieve this and I think there is a quick way to make sure that the hosts configuration is correct using this command (and making sure it returns 0).

3 years ago

Th1nkCh3ck commented on issue Krock/GI-on-Linux#28

Solution for Game download problems

Maybe I'm very wrong (and you already did) but did you remove from the `/etc/hosts` file the servers that are blocked when we apply the patch ? (I had issue with downloading the game from the launcher because of them, once I cleared my `/etc/hosts`, I no longer encountered any issues for downloading the game).

3 years ago

Th1nkCh3ck commented on issue Krock/GI-on-Linux#23

White screen freeze - virtual_setup_exception

The same issue is happening for me, after having tried the patch and launched the game a dozen of times, where it worked (but there was an issue about my keyboard's input not being always registered).

3 years ago

Th1nkCh3ck commented on issue Krock/GI-on-Linux#15

Task: Find suspicious WinAPI backtraces

Is there any way to test this on Linux ? Also, why does there seem to be more needed than that ? (Is it like some layered security, like given the progress you've made, that is already quite impressive to me, I thank you for your hard work, I guess we are getting closer to making GI run on Linux).

3 years ago

Th1nkCh3ck commented on issue Krock/GI-on-Linux#13

Kernel driver support for Wine

I know that some kind of emulation of Windows syscall is supposed to land in the Kernel 5.11, here is more information about it :

3 years ago

Th1nkCh3ck commented on issue Krock/GI-on-Linux#11

Alternative approach: Mobile game

If we can semi-automate the process (and detail a bit more the process) I might have the correct hardware (I have some servers with two Intel Xeon CPUs (each 16 cores) that I could use to go through that data) and the storage for that as well.

3 years ago

Th1nkCh3ck commented on issue Krock/GI-on-Linux#6

Task: Analyze what mhyprot2.sys does

[This tool Mhyprot2DrvControl](https://github.com/kagurazakasanae/Mhyprot2DrvControl) could allow some investigation as it is tailored to be used against `mhyprot2.sys`.

3 years ago

Th1nkCh3ck commented on issue Krock/GI-on-Linux#5

Task: Decode global-metadata.dat

I've also found others tools that could be of use from them, [this tool](https://github.com/kagurazakasanae/Il2CppAssemblyUnhollower-YuanShen) could be used to better analyze `UserAssembly.dll`.

3 years ago

Th1nkCh3ck commented on issue Krock/GI-on-Linux#5

Task: Decode global-metadata.dat

They have updated recently and changed some values, I might give a try to build their app when I have time to try out what would happen with this tool.

3 years ago

Th1nkCh3ck commented on issue Krock/GI-on-Linux#11

Alternative approach: Mobile game

If this is true then yeah I agree it would be interesting, there is also the fact that [in the 3rd and last blog post](https://medium.com/@xplodwild/reverse-engineering-of-a-mobile-game-part-3-now-its-obfuscated-9c31e29c386b), he has to work around obfuscated code by the BeeByte obfuscator, the same one we're dealing with.

3 years ago

Th1nkCh3ck opened issue Krock/GI-on-Linux#11

An interesting approach to discuss but that might be useless

3 years ago

Th1nkCh3ck commented on issue Krock/GI-on-Linux#5

Task: Decode global-metadata.dat

Here is a PDF resource about reversing obfuscated binaries:

3 years ago

Th1nkCh3ck commented on issue Krock/GI-on-Linux#6

Task: Analyze what mhyprot2.sys does

It seems I cannot upload the file for some reason dumping the info in this comment :

3 years ago

Th1nkCh3ck commented on issue Krock/GI-on-Linux#6

Task: Analyze what mhyprot2.sys does

I've taken a quick look at the assembly code, there are a lot of [int3](https://en.wikipedia.org/wiki/INT_(x86_instruction)#INT3) instruction but I'm not sure what they are supposed to do especially since sometimes there are a lot of them in succession.

3 years ago

Th1nkCh3ck commented on issue Krock/GI-on-Linux#5

Task: Decode global-metadata.dat

Oh nice, thanks for the deobfuscators, I'll give them a try.

3 years ago

Th1nkCh3ck commented on issue Krock/GI-on-Linux#5

Task: Decode global-metadata.dat

I've found this tool but it works only with IDA and only on Windows it seems with Wine it crashes.

3 years ago

Th1nkCh3ck commented on issue Krock/GI-on-Linux#5

Task: Decode global-metadata.dat

Okay so the information binwalks spits is not relevant.

3 years ago