UCP Anticheat for MU Online

Full name: Ultra Core Protector (ucp-anticheat.org or ucp-anticheat.ru)

Developer: Endi (at I)

Structure: Only client part (ucp.exe)
File ucp.exe contains within itself the main module main.exe game and when you started, anti-cheat loaded game directly to memory.

Capabilities:
* Check cheksumm files. Working modules *. dll and item.bmd, player.bmd
* Protection from injection libraries. Most cheats to achieve their goals are injected library (*.dll) into the address space of the game. Blocking them can resist all the cheats using this mechanism "injector + cheat module."
* Finding and unloading of prohibited hack utilities.
* Hiding the presence game in the system.
For injected in the game, cheats need to find game. To find use the process name, window title, class name window. UCP anti-cheat modified this data to achieve complete invisibility from 98% of public cheats.

Description:
Since each server the administrator registers the IP address and serial number in the body of the main module Game (main.exe), and in view of the structural features anticheat UCP, it is impossible to make a universal anticheat client for all assemblies.

To compile the anti-cheat at your build the game, should be sent to support@ucp-anticheat.org link to build a fully customized your game client, which will be all the files necessary to complete work on your game server, including uncompressed module main.exe. The application for the same assembly can not send more often than 1 times per week.

Need send clear game-client, without AntiHack.dll or other anti-cheating and without superfluous *.dll the similarity Vcorp.dll!

p.s. ant-cheat ucp completely free ;)
p.p.s. forgive me for my bad english
p.p.p.s. please move topic to the desired section

Additional information can be found here UCP Anti-Cheat | How get anti-cheat for Mu Online?

Thank yuu very much for this! :D
I only have one question that i didnt fully undestand, i downloaded the ucp.exe but i cant find the Mu option in the "Select game type" :(, where is it? Or in order to make we have to send an email to support@ucp-anticheat.org?

Nice release.
Can you send the source of "Hiding the presence game in the system" in a PM?

Very thanks.

Jnioms, What type game? I dont undestand.

Quote:

---

* F8 - on/off click the left mouse button
* F9 - on/off click the right mouse button
* F10 - hide\restore game window
* F11 - minimize\restore game window

---

alpg07, source only my ;)

Can stop Mu Proxy ?
How Much time take add it to the game client ?

Sorry for bad english and Thanks!

dante147, yes. 1-2 days.

Need send clear game-client, without AntiHack.dll or other anti-cheating and without superfluous *.dll the similarity Vcorp.dll!!!!!

So for this, we email them? Or you?

Edit: Email the main only?

Email the main with full client,read better there!
Developer of this anticheat is not a typing machine!

Quote:

---

Originally Posted by R3aL1sT

Email the main with full client,read better there!
Developer of this anticheat is not a typing machine!

---

My bad, and other developers of other things (Server files) aren't typing machines either, they still get bombarded with stupid questions. I admit that was my fault, thank you. >_>

thats good Counter Strike and MuOnline Support :thumbup1:

Why The Website not working for me ?

i made DLL for make main open only with my launcher.. i need remove it before send main or no?

Yes, need full clear client.

is it possible to put 3d camera or glow after putting the anti-hack?

I dont know, and UCP - is anti-CHEAT :)

Our client use our custom DLL for add some items into the game, fix some bugs, change item texts and some things like this... So on, client can't work correctly without this DLL, which doesn't contain any anticheat things. Can your system be applied to our client or this is not really with our DLL?

exelente herramienta
por lo que leo para usarlo debemos pasarte los datos verdad?
o entendi mal
te lo pongo en español ya que por lo que me parece lo hablas :thumbup1:

Quote:

---

Originally Posted by _Endi_

Full name: Ultra Core Protector (UCP Anti-Cheat | Version 6.1 | News)

Developer: Endi (at I)

Structure: Only client part (ucp.exe)
File ucp.exe contains within itself the main module main.exe game and when you started, anti-cheat loaded game directly to memory.

Capabilities:
* Check cheksumm files. Working modules *. dll and item.bmd, player.bmd
* Protection from injection libraries. Most cheats to achieve their goals are injected library (*.dll) into the address space of the game. Blocking them can resist all the cheats using this mechanism "injector + cheat module."
* Finding and unloading of prohibited hack utilities.
* Hiding the presence game in the system.
For injected in the game, cheats need to find game. To find use the process name, window title, class name window. UCP anti-cheat modified this data to achieve complete invisibility from 98% of public cheats.

Description:
Since each server the administrator registers the IP address and serial number in the body of the main module Game (main.exe), and in view of the structural features anticheat UCP, it is impossible to make a universal anticheat client for all assemblies.

To compile the anti-cheat at your build the game, should be sent to support@ucp-anticheat.org link to build a fully customized your game client, which will be all the files necessary to complete work on your game server, including uncompressed module main.exe. The application for the same assembly can not send more often than 1 times per week.

Need send clear game-client, without AntiHack.dll or other anti-cheating and without superfluous *.dll the similarity Vcorp.dll!

p.s. ant-cheat ucp completely free ;)
p.p.s. forgive me for my bad english
p.p.p.s. please move topic to the desired section

Additional information can be found here UCP Anti-Cheat | How get anti-cheat for Mu Online?

---

Request a simple test mode for MUOnline, version 1_02R+ or any version just for make a review.

Thanks.

PS: If some one have the individual folder (installation) of the anti cheat, can upload to me please...

Has a review for what i can see only by the details in the website:

Code:

---

Hiding the presence game in the system.
For injected in the game, cheats need to find game. To find use the process name, window title, class name window. UCP anti-cheat modified this data to achieve complete invisibility from 98% of public cheats.

---

Under x32 with driver via DKOM or other methods. Under x64 editing the patch guard its "ILLEGAL" but this is freeware i would still no worry about legal problems.

Code:

---

Checking api functions from interception.
Interception api functions - it changed the code a particular function with aim substitution data. When you run an anti-cheat restores the original handler api functions and periodically checks them for validity.

---

A little more detailed would be more cool. Stop simple edition of API like the JMP or CALL in the first opcodes? or its a smart API detection?.

Does prevent trampooline hook?, or smart hook? (virtualized methods for the same stuff).

Code:

---

Protection from injection libraries.
Most cheats to achieve their goals are injected library (*.dll) into the address space of the game. Blocking them can resist all the cheats using this mechanism "injector + cheat module."

---

Does it support against manual map?

Those are my questions to the developer, thanks. In order to dont reveal much we can contact via PM.

PS: VMProtect is just too "used" and already defeated too many times by the same unpacking communities (unpack.cn / RCE / Tuts 4 you, etc). The best protection is just hand made one.

Client by email? O.o

THIS IS NOT A DLL

I think that you can send only those files that need to be protected.
For example, if you send main.exe and player.bmd
That the archive should be as follows:
MuOnline \ Data \ Player \ player.bmd
main.exe

Sorr my english :( Russian :)

theunknownguy, You can give me your game-client, i protected your client for testing. And VMProtect good protector ;)
UCP anti-cheat works only in mode ring3.

No send me PM messages, i can reply because

Quote:

---

To be able to send PMs your post count must be 15 or greater.
You currently have 7 posts and you can send PMs to following users only:

---

Quote:

---

Originally Posted by _Endi_

theunknownguy, You can give me your game-client, i protected your client for testing. And VMProtect good protector ;)
UCP anti-cheat works only in mode ring3.

No send me PM messages, i can reply because

---

VMprotect dont work fine on Win 7 :) (it's can work but have alot bugs . I tested it)

Ok someone cand tell me what is this? Wat anti cheat? Wat cheat spos and how i cand used i'm Romain.. i dont understand beather the fist post..

UCP system required:
- MuOnline Server Files Supports : Season 2 , Season 3 , Season 4 , Season 5
Not Support- Old Versions

Thats from mine test

Endi can you give me changelog for anticheats that blocks couse i dont find it

Oh God - no one still understood that the best method is to change encryption of the packets and after that pack the main.exe and update it once a week (including encryption), but besides that also encrypt the client files. Look at AriethMu (Sobieh work) as an example.

P.S. Good job anyways!

diablo71, this is first version of the anti-cheat for mu, no changelog, why is he to you? :)

i'm kind of interested in this secure to test it how is it..is it better than antihack.dll + encryption for main.exe or to use this anticheat..

i'm making more tests for secure now if i found something i will tell

its in development or its already "Finished" fully working? :D
Good luck in this project while its free :P

Yes, fully working.

good :) gimme one server (MuOnline) uses it i wanna test it

insominamu.ru
murred.ru
mu.naco.ro

Endi please if you can just upload the folder, i dont use any MU client. I also dont play the game... just want to test the protection, caused i am too a security developer only that for payment.

Thanks and if you can aswer my questions of the previous post.

@ENDI
if you add ucp anti hack on my client.
i can still add a .dll on it, like 3rd camera dll??

sure UCP anticheat works whit packed main..

I badly understand yours, google translate a bad translation.

theunknownguy, _http://www.megaupload.com/?d=KLMEIGY8 (version 1.02.03 - 3.54 MB)
Apis and checked jmp/call,push-ret and blocked module memory.

revenge09, no, only i can added new .dll

so you can also add a 3d camera and your anti hack?

Yes. vcorp.dll ?

Very fast answer to my email! Best!

Someone could put a tutorial, I can not understands best and it works.

Quote:

---

Originally Posted by _Endi_

I badly understand yours, google translate a bad translation.

theunknownguy, _http://www.megaupload.com/?d=KLMEIGY8 (version 1.02.03 - 3.54 MB)
Apis and checked jmp/call,push-ret and blocked module memory.

revenge09, no, only i can added new .dll

---

Thanks for the link. What about trampooline hook?

Also:

Code:

---

mov REG32, Offset
CALL REG32

mov [esp], Offset
Ret

---

Etc also need to be checked...

About the hiding process, i guess is not supported under x64 does it?.

Ill send you my mail by PM

Endi tell me what launcher to use that will run ucp.exe not main.exe for old versions to connect to server ?

Quote:

---

Originally Posted by diablo71

Endi tell me what launcher to use that will run ucp.exe not main.exe for old versions to connect to server ?

---

Launcer sources there?

about dlls, someone have some solution? i used in my main 3 dlls, have how ucp works with it?

If u want to use yours custom dll's, u must send them to Endi too, and make a mark inside mail, that theese dll's are needed by client. Bcoz inside, Endi creates a list of dll's which can be loaded by main, and all other dll's are rejecting.

theunknownguy, trampooline hooks no check.
UCP Anti-cheat full worked only user mode (ring3). And supported x64.
diablo71, if your launcher no compressed, you can open through WinHex, find string main.exe and change to ucp.exe

i cannot find with HexEdit the main.exe to change it .. can you tell me some launcher for secure ip and port that the users cannot see to use for the ucp.exe for old versions i really need it

i sent yet, but he said without dlls how vcorp antihacker. etc... :/

I need a uncrompessed main 1.07.07 someone have ? :/

is this anticheat better than psafe ?

theunknownguy, you can hacked memory ucp.exe? :)

gj :) if will stay free will be good :P

i am testing it right now, so far it has detected the latest cheat-engine (that most anticheats like ah.dll or GD.dll didnt) and it has detected the hidetoolz (again, that most anti-cheats didnt)
really nice release so far :)

Thanks, I will test it when I will rebuild the server. :):

Endi concerns users not validly. The big thanks that he makes it for free but to become kinder would not prevent. I've sent client and all right, ask pair of questions about using. When I've made launcher, understood that, necessary to put in ucp.exe local IP, but in reply to the request has told: he won't spend on noobs admins 10 mines to compile a new file, don't write more. And now ignore. It is not so beautiful, I did not offend its system, I want use it, but now he make for me a difficult situation.

there is no such a think like uncrackable :wink: once u can run it on PC its can be cracked :ott1:

New rules

Code:

---

Orders do not belong to the review if:
    * lacks the necessary files (*.dll, main.exe, data\local\item.bmd and data\player\player.bmd)
    * main.exe packed, compressed, crypted
    * in main.exe registered .dll, which are not specified in the order as the optional modules
    * in main.exe registered .dll other anticheats (AntiHack.dll, MuGuard.dll etc)

---

Hi , i send my client file support@ucp-anticheat.org , it is approved?

I was wondering how can i make that when someone tries to access main.exe to redirect it to a launcher? Like the original main.exe with redirects to AutoUpdater?

Thanks!

Quote:

---

Originally Posted by Denied

I was wondering how can i make that when someone tries to access main.exe to redirect it to a launcher? Like the original main.exe with redirects to AutoUpdater?

Thanks!

---

you need to restore the mu.exe code in main, check chris05's guide for help.

PATEVRA, if your order correctly, i send to you ucp.exe tomorrow.

i am using it . idk if its that good?

Endi give me support here i'm waiting from 3 weeks for help for old versions...
ucp.exe is not going to start the game..even i try with launcher still the same..

Endi please read this!

Please remove the integrated window mode and autoclicker and allow normal window mode and autoclickers because your windowmode/autoclicker is problematic. Do something about it please or just remove it.

Thanks a lot!

# Denied its not possible because autoclickers need inject in process ;)

Then at least he could try fixing them cause they are not working correctly

_Endi_,I resend my client file,please check and see it :)

90% of my players are gone because autoclickers and window mode does not work

Quote:

---

Originally Posted by Denied

90% of my players are gone because autoclickers and window mode does not work

---

you can use registers to enable/disable the windowmode, they are 1kb .reg files which need 2 clicks and nothing more.

Also this is a freeware and you should use it on your own without judging the creator for eventual problems. You agreed to use it freely and unenforced since you provided a link to the client protected with UCP.

Denied, you cant used normal clicker, because ucp protected game process.

Window mode changer - correctly worked.
Clicker - not always work correctly, but it works.

Why do you repeatedly claim that it's free, so be measured with disabilities? Show though, would be a shareware of anti-cheat for mu, which also protects well as ucp.

Denied, what can i help you? I cant disable protected for other clickers worked.

Someone know how i can replace in mu.exe when i press "Game Start" to run upc.exe not Main.exe ..

Quote:

---

Originally Posted by Tal3nT

Someone know how i can replace in mu.exe when i press "Game Start" to run upc.exe not Main.exe ..

---

i'm asking the same thing for old versions about 3 weeks but Endi dont support old versions

Quote:

---

Originally Posted by Tal3nT

Someone know how i can replace in mu.exe when i press "Game Start" to run upc.exe not Main.exe ..

---

Better would be if we can rename the file ucp.exe to main.exe because...
First: A lot of us, use the AutoUpdate to actualice clients from our users, but if we send ucp.exe the original main don't is replaced, then only left change serial in main to force users to connnect whit ucp.exe

Second: like Tal3nT says, the mu.exe launch the file main.exe, then whe need to change the Mu.exe too on our users clients, forcing to download a new Mu.exe (lot of problems whit noobs players, they don't know nothing about use patches, or stuff like this) Then will be better if whe can change the name ucp.exe to main.exe that will be great..

Don't forget server files, when you try to connect to a server, files check if you have principal files on your client, mu.exe main.exe, etc. then main.exe is really needed.. (at least on my files work that way)

Sorry my bad english.

work for 97 ?

Original post on x-mu.net, on Russian, by Endi:
First of all -> AntiCheat don't hide MU process(ucp process), u can find process in Task Manager, or try to open it in ArtMoney - FIRST FAIL
Next is -> AntiCheat has signature scanner, but u said NOT HAVE - SECOND FAIL
Next is -> NtQueryProcessInformation is not hooking! Nothing is hooked in system, except of some functions in MU(ucp) Process - THIRD FAIL
Next is - > U have wrong information about VMProtect. Code virtualision is the best code protection technology nowadays, and if some cracked/warez versions on the internet, it doesn't something mean.

No ANY AntiCheat today for MU Online, working only in ring3, everybody like memory scannerzzzz....
In Russian, original text with some words about pro-reverser:glare:

Quote:

---

Ваш феникс нуб еще тот наслушался заумных терминов про разновидностей хуков, и корчит из себя знатока.
Он ucp вообще не копал. Пишет мол античит скрывает процесс где он там скрытый процесс увидел? При нажатии ctrl + alt + del = процесс ucp.exe как на ладони. И сканер по сигнатурам в античите присутствует, который детектит всякие cheatengine и прочую нечесть, что он отрицает, и про NtQueryProcessInformation не верно, я вообще ничего в системе не хукаю, только в своём процессе кой какие функции, и эта функцию в этот список не входит. И про VMProtec у него неверная информация, виртуализация кода, это самая передаваемая технология сокрытия кода от взлома на сугоднящний день, и если есть варез версии данного продукта в инете - еще ни о чем не говорит.

В общем я не расист, но эти буржуи такие нубы, и не только феникс
Всё к деньгам сводят, мол халявная, значит надо делать скидку на защиту. Покажите хотябы один платный античит для му в юзермодном режиме который бы защищал также хорошо процесс игры как и ucp. Нынешние вить работают чисто как чит-сканеры, не более.

---

dont post sh!t like that about UCP - this review is being "GAY" wrong from line where article author calls fenix`s a n0ob :)

... i debuged UCP to and for me its looks very easy to bypass/crack thought there is nothing to bypass or crack since its does not block my MuProxy and UCP as a anticheat for MMORPG is not the best chouse + its dont use memory signature scann!


Edited:
Ask your "Pro reverser" (another Deathway?) to show a function where is being scanned process memory by UCP :laugh::laugh::laugh::laugh::laugh: epic... gosh.. wasted 5 mins of my life time reading that crap and writing this crap ^^

RIP

Quote:

---

Originally Posted by mauka

dont post sh!t like that about UCP - this review is being "GAY" wrong from line where article author calls fenix`s n0ob :)

... i debuged UCP to and for me its looks very easy to bypass/crack thought there is nothing to bypass or crack since its does not block my MuProxy and UCP as a anticheat for MMORPG is not the best chouse + its dont use memory signature scann!

---

Mauka Remember UCP is not like your Anticheat launcher
this project is Global and work very much time with Updates...

if for this moment UCP for MU is not great
i think it will be better later

Need to say Thanks for Endi for this work anyway....
He works for free and more people from his Off.Web use His works
and say big Thanks....

Quote:

---

Originally Posted by CaHeK

Mauka Remember UCP is not like your Anticheat launcher
this project is Global and work very much time with Updates...

---

u dont know my level :) and as fact u can ( actualy u cant, but i can (: ) protect my launcher with a VMProtect and its will work same as this UCP 1:1 or even better ^_^
(u know launcher builder where u include main.exe into launcher)

All UCP protection is based on VMProtect (:

Edited:
my reviews can be wrong to :) but i checked UCP from isomania.ru server
PS. launcher cant selfupdate in win7 64bit its always repeat download launcher again and again and again :(

RIP

Quote:

---

Originally Posted by mauka

Edited:
my reviews can be wrong to :) but i checked UCP from isomania.ru server
PS. launcher cant selfupdate in win7 64bit its always repeat download launcher again and again and again :(
RIP

---

Yes, your review is wrong ;) I know 2! topic's on cracklab, where guy's trying to Crack AntiCheat, some of them make some steps to protection elemination, but no one has cracked it.
insomina.mu not isomania.ru, i'll fix module autoupdate(i forget to add sleep in .bat-file commands...), this is my server,with GENS :D

Quote:

---

Originally Posted by tagegor

Yes, your review is wrong ;) I know 2! topic's on cracklab, where guy's trying to Crack AntiCheat, some of them make some steps to protection elemination, but no one has cracked it.

---

there is no such a think like uncrackable ;) once u can run it u can unpack or crack it.. cracklab.. posting thread on cracklab does not means that its gonna be cracked or unpacked! :wink:

Quote:

---

Originally Posted by mauka

u dont know my level :) and as fact u can ( actualy u cant, but i can (: ) protect my launcher with a VMProtect and its will work same as this UCP 1:1 or even better ^_^
(u know launcher builder where u include main.exe into launcher)

All UCP protection is based on VMProtect (:

Edited:
my reviews can be wrong to :) but i checked UCP from isomania.ru server
PS. launcher cant selfupdate in win7 64bit its always repeat download launcher again and again and again :(

RIP

---

Maybe i don't know your level
but i didn't see your Updates
and Some Month/Years of Succes with Project

UCP is not only MU Anticheat
i knew this project very much time
and i see Endi work for free and work Good
and He don't have any reason to create special bugs (http://forum.ragezone.com/5762642-post9.html)

He works for People and for Free
and i say thanks for this

He didn't talk "This Anticheat is best in The World"
But he try to make it better and for 0$...

:glare:

no doubt as long as its free is damn good :) at last MuOnline server owners have Options and something new then simply ah.dll

Its all good :)


Added:

Quote:

---

he try to make it better and for 0$...

---

Its only about the money.. sonner or later all what is free become paid :) as a example see winamp ^^

mauka

Why at once BoR?

I do not speak on behalf of all command, I speak on behalf of Me.

mauka

who are u? who are Fenix?
For me you not who.
I here see that write about a Fenix..

its not about me :) u quoted that article only to diss fenix thought all that article is sh!t and looks like wroted by some VB script kiddie - wannabePRO

mauka You it does not concern

Me interests more why write such about the Fenix or it...?

your useless quote and fenix diss post where deleted :) no point to continue flood this topic!

Defeated by xakum Multi-UP.COM залейте нам один раз - мы зальем всюду ::

mirror: http://rapidshare.com/files/40693370...mm_xmu-net.zip

Quote:

---

Originally Posted by tagegor

Yes, your review is wrong ;) I know 2! topic's on cracklab, where guy's trying to Crack AntiCheat, some of them make some steps to protection elemination, but no one has cracked it.
insomina.mu not isomania.ru, i'll fix module autoupdate(i forget to add sleep in .bat-file commands...), this is my server,with GENS :D

---

Wtf is cracklab that is like an insult to my ears...

Cracklab is like ARTeam, like exetools, etc.

Where is RCE, Unpack.cn, Shadow team, etc.

No one has removed VMP?:

Google

I guess a different shit is that somebody would pay attention to a free anti cheat, with no commercial issue plus no "interesting" challenge.

People have to work, really in the cracking/unpacking area most of "wise" man crack something 1 at month and pick a good challenge to do it.[COLOR="Silver"]

---------- Post added at 06:32 PM ---------- Previous post was at 06:23 PM ----------

Quote:

---

Why at once BoR?
who are u? who are Fenix?
For me you not who.
I here see that write about a Fenix..

---

Well mauka have a free anti cheat project (meaby not the best) but its far good enough, if he payed for VMP or Enigma protector or whatever it will be hard more difficult than remove UCP.

Who am i?. Well lets leave it short... I run a security company while you posting a gaming forum. Happy? :laugh::laugh:

And dont get my wrong if i would have the time for unpack+bypass UCP i would everyday. And same for own you. But guess what i work in "real life" and running a company isnt that simple has you can see on TV.

While you can play to... "nothing" since you dont know anything releated to coding. Some people in fact have work to do. Real work.

UCP for free so Why We want to by pass it :)
Good job Endi :)

Quote:

---

Originally Posted by theunknownguy

Who am i?. Well lets leave it short... I run a security company while you posting a gaming forum. Happy? :laugh::laugh:

---

WoW!! so? who are you? :P

and that make you what?, that make you more important?, im sure that company will be like your Emulator... (still is in standby?)

PD: you didn't write here never, no?, its just a gost...

Quote:

---

Originally Posted by tomatoes

UCP for free so Why We want to by pass it :)
Good job Endi :)

---

Agree, Endi Good job ;)
PD: tomatoes i'll have some free time on friday, i will try to contact you ;)

Quote:

---

Originally Posted by tomatoes

UCP for free so Why We want to by pass it :)
Good job Endi :)

---

Only because author not believe that it can be cracked and saying what UCP best anti-cheat ever... (better then all ...)

If there will be any UCP updates how we can get them ? i already run a server with this security.

Tal3nT, need send again your game-client to my e-mail.

hi everyone
im already using ucp anticheat and im launching the game from launcher ( mauka's) and there are no problems except that after closing the game it shows "error 22 "

Is possible that antihack to crash connect server?
http://img831.imageshack.us/img831/1194/85454258.png i run same server,files,windos and no errors before. but now crash .

i dont think its posible.. :D if its i wanna know how!

could anyone implement this anticheat feature in a season5 client ?

Quote:

---

Originally Posted by sirducu

could anyone implement this anticheat feature in a season5 client ?

---

Read 1st post!

have a "anti run as" protect ?

Endi, keep the good work, is good to see some good job released for free, it reminds me the old good times,,