Th1nkCh3ck

Th1nkCh3ck okomentoval úkol Krock/dawn#476

Future WW patch

I believe anti-cheats will die as time goes on https://steamdeckhq.com/news/we-may-see-end-of-kernel-level-anti-cheat/

před 6 měsíci

Th1nkCh3ck okomentoval úkol Krock/dawn#336

Could this news be about the patch ? (virus abuse)

No it actually isn't about the patch but it looks like the anti cheat could be changed due to this piece of news

před 2 roky

Th1nkCh3ck vytvořil úkol Krock/dawn#336

Could this news be about the patch ?

před 2 roky

Th1nkCh3ck okomentoval úkol Krock/dawn#242

Rework project

Hi @rohzuk.im not to say that your PR isn't useful, however, I wonder the use case of using sh for OpenWRT and Android (game has official support for Android already).

před 3 roky

Th1nkCh3ck okomentoval úkol Krock/GI-on-Linux#41

[Suggestion] Let the launcher.bat check for prober hosts configuration

I've seeked how to achieve this and I think there is a quick way to make sure that the hosts configuration is correct using this command (and making sure it returns 0).

před 4 roky

Th1nkCh3ck okomentoval úkol Krock/GI-on-Linux#28

Solution for Game download problems

Maybe I'm very wrong (and you already did) but did you remove from the `/etc/hosts` file the servers that are blocked when we apply the patch ? (I had issue with downloading the game from the launcher because of them, once I cleared my `/etc/hosts`, I no longer encountered any issues for downloading the game).

před 4 roky

Th1nkCh3ck okomentoval úkol Krock/GI-on-Linux#23

White screen freeze - virtual_setup_exception

The same issue is happening for me, after having tried the patch and launched the game a dozen of times, where it worked (but there was an issue about my keyboard's input not being always registered).

před 4 roky

Th1nkCh3ck okomentoval úkol Krock/GI-on-Linux#15

Task: Find suspicious WinAPI backtraces

Is there any way to test this on Linux ? Also, why does there seem to be more needed than that ? (Is it like some layered security, like given the progress you've made, that is already quite impressive to me, I thank you for your hard work, I guess we are getting closer to making GI run on Linux).

před 4 roky

Th1nkCh3ck okomentoval úkol Krock/GI-on-Linux#13

Kernel driver support for Wine

I know that some kind of emulation of Windows syscall is supposed to land in the Kernel 5.11, here is more information about it :

před 4 roky

Th1nkCh3ck okomentoval úkol Krock/GI-on-Linux#11

Alternative approach: Mobile game

If we can semi-automate the process (and detail a bit more the process) I might have the correct hardware (I have some servers with two Intel Xeon CPUs (each 16 cores) that I could use to go through that data) and the storage for that as well.

před 4 roky

Th1nkCh3ck okomentoval úkol Krock/GI-on-Linux#6

Task: Analyze what mhyprot2.sys does

[This tool Mhyprot2DrvControl](https://github.com/kagurazakasanae/Mhyprot2DrvControl) could allow some investigation as it is tailored to be used against `mhyprot2.sys`.

před 4 roky

Th1nkCh3ck okomentoval úkol Krock/GI-on-Linux#5

Task: Decode global-metadata.dat

I've also found others tools that could be of use from them, [this tool](https://github.com/kagurazakasanae/Il2CppAssemblyUnhollower-YuanShen) could be used to better analyze `UserAssembly.dll`.

před 4 roky

Th1nkCh3ck okomentoval úkol Krock/GI-on-Linux#5

Task: Decode global-metadata.dat

They have updated recently and changed some values, I might give a try to build their app when I have time to try out what would happen with this tool.

před 4 roky

Th1nkCh3ck okomentoval úkol Krock/GI-on-Linux#11

Alternative approach: Mobile game

If this is true then yeah I agree it would be interesting, there is also the fact that [in the 3rd and last blog post](https://medium.com/@xplodwild/reverse-engineering-of-a-mobile-game-part-3-now-its-obfuscated-9c31e29c386b), he has to work around obfuscated code by the BeeByte obfuscator, the same one we're dealing with.

před 4 roky

Th1nkCh3ck vytvořil úkol Krock/GI-on-Linux#11

An interesting approach to discuss but that might be useless

před 4 roky

Th1nkCh3ck okomentoval úkol Krock/GI-on-Linux#5

Task: Decode global-metadata.dat

Here is a PDF resource about reversing obfuscated binaries:

před 4 roky

Th1nkCh3ck okomentoval úkol Krock/GI-on-Linux#6

Task: Analyze what mhyprot2.sys does

It seems I cannot upload the file for some reason dumping the info in this comment :

před 4 roky

Th1nkCh3ck okomentoval úkol Krock/GI-on-Linux#6

Task: Analyze what mhyprot2.sys does

I've taken a quick look at the assembly code, there are a lot of [int3](https://en.wikipedia.org/wiki/INT_(x86_instruction)#INT3) instruction but I'm not sure what they are supposed to do especially since sometimes there are a lot of them in succession.

před 4 roky

Th1nkCh3ck okomentoval úkol Krock/GI-on-Linux#5

Task: Decode global-metadata.dat

Oh nice, thanks for the deobfuscators, I'll give them a try.

před 4 roky

Th1nkCh3ck okomentoval úkol Krock/GI-on-Linux#5

Task: Decode global-metadata.dat

I've found this tool but it works only with IDA and only on Windows it seems with Wine it crashes.

před 4 roky