INIURIA.US | Guardian Dirver Loader

[Guest]

Operation: take down pants the @takedown

Lets the battle begin.
Now u have big problems. Just cuz I've sended it to Gabe.
Srsly. Also Sources too.

ITS VALVE TIME.

Download:

http://www.file-upload.net/download-7128130/GuardianLoader.zip.html

Guardian.sys put in C:\Users\UrUser\AppData\Local\Temp\Guardian.sys

Password:
drvloadguardian

[chiptunegod]

Re: INIURIA.US | Guardian Dirver Loader

If u have problem with this shitty driver:
Go to Iniuria Forum. They can help u ;)

[floxy]

Re: INIURIA.US | Guardian Dirver Loader

  sub_41133E(std__cout, "Enter Password: ");
  sub_41104B(std__cin, &v17);
  if ( (unsigned __int8)sub_4112B2(&v17, "drvloadguardian") )
  {
  }

srsly? Oo

[chiptunegod]

Re: INIURIA.US | Guardian Dirver Loader

  sub_41133E(std__cout, "Enter Password: ");
  sub_41104B(std__cin, &v17);
  if ( (unsigned __int8)sub_4112B2(&v17, "drvloadguardian") )
  {
  }

srsly? Oo

im lazzy to make normal protect. Just 4 fun :D

[fresh]

Re: INIURIA.US | Guardian Dirver Loader

where to put sys for German OS? tried following :
C:\Users\*****\Local\Temp <-- had to create those fodlers.. there were no loacal one
C:\Users\*****\AppData\Local\Temp <-- was already there

neither of those worked.. i had the sys at all 3 paths at same time also (in .exe fodler,and both temps)

But still getting this error:

             INIURIA.US Driver Loader by chiptuneg0d


Clean Up: Waiting
Clean Up: OK!

Loading Driver: Waiting
Start Service Error: 0x4FB

0x01 - Error When Installing Driver.

[chiptunegod]

Re: INIURIA.US | Guardian Dirver Loader

where to put sys for German OS? tried following :
C:\Users\*****\Local\Temp <-- had to create those fodlers.. there were no loacal one
C:\Users\*****\AppData\Local\Temp <-- was already there

neither of those worked.. i had the sys at all 3 paths at same time also (in .exe fodler,and both temps)

But still getting this error:

             INIURIA.US Driver Loader by chiptuneg0d


Clean Up: Waiting
Clean Up: OK!

Loading Driver: Waiting
Start Service Error: 0x4FB

0x01 - Error When Installing Driver.

U dont need this shit.
Stop trying start it.

[feAx]

Re: INIURIA.US | Guardian Dirver Loader

where to put sys for German OS? tried following :
C:\Users\*****\Local\Temp <-- had to create those fodlers.. there were no loacal one
C:\Users\*****\AppData\Local\Temp <-- was already there

neither of those worked.. i had the sys at all 3 paths at same time also (in .exe fodler,and both temps)

But still getting this error:

             INIURIA.US Driver Loader by chiptuneg0d


Clean Up: Waiting
Clean Up: OK!

Loading Driver: Waiting
Start Service Error: 0x4FB

0x01 - Error When Installing Driver.

You dont need to use driver, its useless.

[fresh]

Re: INIURIA.US | Guardian Dirver Loader

oh okay ;) Then im going to my next question : game crashing for me even with crated folder.. what to do?

[wav]

Re: INIURIA.US | Guardian Dirver Loader

.text:00012EE0 aNtprotectvirtu db 'NtProtectVirtualMemory',0
.text:00012EE0 ; DATA XREF: sub_12340:loc_125A2o
.text:00012EF7 align 10h
.text:00012F00 aNtqueryvirtual db 'NtQueryVirtualMemory',0 ; DATA XREF: sub_12340:loc_12572o
.text:00012F15 align 10h
.text:00012F20 aNtreadvirtualm db 'NtReadVirtualMemory',0 ; DATA XREF: sub_12340+201o

sigh

Nt != Zw

[GetJump]

Re: INIURIA.US | Guardian Dirver Loader

.text:00012EE0 aNtprotectvirtu db 'NtProtectVirtualMemory',0
.text:00012EE0 ; DATA XREF: sub_12340:loc_125A2o
.text:00012EF7 align 10h
.text:00012F00 aNtqueryvirtual db 'NtQueryVirtualMemory',0 ; DATA XREF: sub_12340:loc_12572o
.text:00012F15 align 10h
.text:00012F20 aNtreadvirtualm db 'NtReadVirtualMemory',0 ; DATA XREF: sub_12340+201o

sigh

Nt != Zw

xd same antidump shit as like hack.
btw it's just hiding hack module in the process, if i understand it correctly ;)

[wav]

Re: INIURIA.US | Guardian Dirver Loader

Ok looks like it's just doing the lookup to copy the indexes for the funcs, not for anything else.

[Guest]

Re: INIURIA.US | Guardian Dirver Loader

void __cdecl sub_11890()
{
  int v0; // [sp+0h] [bp-4h]@3

  if ( !dword_14054 || !dword_14058 )
  {
    sub_11660(L"\\Registry\\Machine\\Software\\DigitalWorks", (int)L"Start", (int)&dword_14054);
    v0 = sub_11660(L"\\Registry\\Machine\\Software\\DigitalWorks", (int)L"End", (int)&dword_14058);
    if ( dword_14054 )
    {
      if ( dword_14058 )
      {
        DbgPrint("Found Base 0x%X\n", dword_14054);
        DbgPrint("Found End 0x%X\n", dword_14058);
        if ( !sub_11770(L"\\Registry\\Machine\\Software\\DigitalWorks", (int)L"Bin", (int)&dword_141A0) )
          DbgPrint("Error Reg\n");
        sub_11580(v0);
        DbgPrint("oCreateMove 0x%X\n", dword_141A0);
        DbgPrint("newCreateMove 0x%X\n", dword_141A4);
        DbgPrint("patchCreateMove 0x%X\n", dword_141A8);
        DbgPrint("oGetUserCmd 0x%X\n", dword_141AC);
        DbgPrint("newGetUserCmd 0x%X\n", dword_141B0);
        DbgPrint("patchGetUserCmd 0x%X\n", dword_141B4);
        DbgPrint("oKeyEvent 0x%X\n", dword_141B8);
        DbgPrint("newKeyEvent 0x%X\n", dword_141BC);
        DbgPrint("patchKeyEvent 0x%X\n", dword_141C0);
        DbgPrint("oPaintTraverse 0x%X\n", dword_141C4);
        DbgPrint("newPaintTraverse 0x%X\n", dword_141C8);
        DbgPrint("patchPaintTraverse 0x%X\n", dword_141CC);
        DbgPrint("oFrameStageNotify 0x%X\n", dword_141D0);
        DbgPrint("newFrameStageNotify 0x%X\n", dword_141D4);
        DbgPrint("patchFrameStageNotify 0x%X\n", dword_141D8);
        DbgPrint("oGetCursorPosVgui 0x%X\n", dword_141DC);
        DbgPrint("newGetCursorPosVgui 0x%X\n", dword_141E0);
        DbgPrint("patchGetCursorPosVgui 0x%X\n", dword_141E4);
        DbgPrint("oEmitSound 0x%X\n", dword_141E8);
        DbgPrint("newEmitSound 0x%X\n", dword_141EC);
        DbgPrint("patchEmitSound 0x%X\n", dword_141F0);
      }
    }
  }
}

Best I/O driver communication we got here

[wav]

Re: INIURIA.US | Guardian Dirver Loader

hah creating registry entries to communicate with driver? fucking clever ( obvious sarcasm )

sure hope the driver destroys those entries once it's gotten them... ( probably doesn't )