shooter @KurosunCo @GLSSWRKSGG | @jor4c @badisafk @rrewnd
Joined July 2021
- Tweets 2,330
- Following 1,099
- Followers 11,357
- Likes 13,836
249 Photos and videos
so the reason valorant makes me use IOMMU on almost every account is because they think i'm god tier thanos ultra omega dma cheater. LFGG #goat
May 22
Well, that escalated quickly.
There’s been a wave of claims by cheaters about Vanguard “bricking” their PCs, so let’s clear that up: Vanguard does not damage hardware or disable your devices.
The photo we posted is a picture of cheat hardware devices that are sold explicitly for cheating in VALORANT (not normal PCs or PC components). Through our latest updates, Vanguard now makes those devices worthless for VAL, but does not in any way brick PCs or PC components or PC software.
Our latest update enforces standard platform security features, like the Input-Output Memory Management Unit (IOMMU), on accounts identified as using Direct Memory Access (DMA) cheating devices. These protections are already part of modern systems and when enabled, they block DMA cheat devices (such as those shown in the photo) from accessing memory in downstream applications, like our games.
If a cheat setup continues attempting to cheat after those protections are enabled, the system may generate hardware faults or instability. This is expected behavior under IOMMU when attempts are made to read protected memory.
Disabling IOMMU allows the cheat device to function again, but IOMMU will still be required to play our games. This means the cheat device won’t work with our games, but your PC isn’t “bricked.” We would not, and cannot, impact your PC’s functionality in any other fashion.
This functionality only applies to systems attempting to use DMA cheat devices, and players who are not using DMA-based cheat setups are not affected.
We’ll keep investing in anti-cheat to protect competitive integrity, and we’ll keep being as transparent as possible about how those systems work.
5
98
27,754
router retweeted
May 20
I had some people DM me and tag me on this post to determine if it's malware or "slop".
Using the software requires providing billing information prior to downloading the trial. I got mildly annoyed by this and contacted support. I requested access to the binary without needing to provide billing information.
Their support team was ... actually very, very, very polite and nice. I was kind of taken back by how polite they were. They provided me the software with a 60 day trial. I can't tell if they know I do malware development and reverse engineering because (usually) places are hesitant to just give me the stuff like this on a platter.
I would feel bad if I was hyper-critical of this product because of how polite the person running this profile is, they're just a chill dude.
To be direct:
- Is this malware? No.
- Is this slop? Probably not, no.
- Does this actually improve FPS? Yes, unironically. However, it is very important you realize this software is changing the voltage and clock speed on your machine (among other things). They're achieving this in a legitimate way by working with AMD and Intel with actual SDK (Software Development Kit) documentation.
This product went to great lengths to secure its source code. It has junk code insertion, in-memory patching (stubs), junk variables, control flow obfuscation, and it also does device finger-printing to ensure you don't steal their product. All of this was performed using professional anti-reverse engineering products.
It was a real pain in my balls to deal with. I got mildly irritated at several points. Some strings are AES256 encrypted and decrypted when needed (run-time lazy loading) making static-analysis even more difficult.
Despite all of this, none of it is malicious. They just don't want nerds stealing their stuff. At first glance however it does use methods similar to malware to avoid reverse engineering.
The application UI is also incredibly heavy. It is using the latest and great .NET UI stuff to make it look super cool and gamer-like. It launches from HyperTune.exe which then loads the actual (super obfuscated) HyperTune.dll using HOSTFXR (Google it). The obfuscation tools they used disassembled and fractionated the application entry point (and subsequent functionality) down into 1,618 other functions (see attached image)
The only saving grace was the visibility into it's dependencies and other 3rd party libraries it uses (Realm for local settings savings, Sentry for logging errors, SimpleInjector for handling classes they use, etc).
I won't go into full details on how their product actually works, I would feel bad because of support dude being a chill dude, but here is my main criticism:
- Loading of kernel-mode drivers from vendors for overclocking. They load AMD and Intel drivers based on your hardware profile on your machine. However, the driver configuration settings are set to AUTOSTART. Hence, once you use this software these kernel-mode components will auto-start even if HyperTune is not running. Additionally, uninstalling HyperTune will not uninstall these kernel-mode components. These kernel-mode components come by default with the installer in a directory called /3p/ but move to SYSTEM32 after installation (as they should be).
- For reasons I do not understand, HyperTune modifies HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU ... it disables automatic updates from Windows. I don't know why. My presumption is this could prevent potential driver conflicts, but if not managed correctly this exposes users to security vulnerabilities.
Did they actually spend $1,000,000 developing this? With a full development team, infrastructure they're using (Sentry, VERCEL, enterprise and professional anti-reverse engineering tools, etc) ...maybe...?
May 18
75% of gamers are limited by their FPS.
We spent $1,000,000 to even those odds.
39
72
1,681
148,253
router retweeted
May 18
75% of gamers are limited by their FPS.
We spent $1,000,000 to even those odds.
92
114
852
1,673,467
router retweeted
May 11
Lowest to Highest Rank. 7 FPS Games. Gaming Marathon.
214
532
17,211
1,862,168
please help my brother out if anyone has work available inside the US. he's a very hard working disciplined individual that isn't afraid to take on tasks no matter how difficult. dedication like his does not come by often so do not miss out giving this guy an opportunity.
I really wanna stay in the US but my Visa expires soon :/
Anyone know of any jobs in the Dallas/LA areas (Construction/Project Management, Civil Engineer, E-Sports, Media Marketting, Editting, PA, anything)
It’s impossible to get hired over US citizens without a connect :/
1
7
2,878
I really wanna stay in the US but my Visa expires soon :/
Anyone know of any jobs in the Dallas/LA areas (Construction/Project Management, Civil Engineer, E-Sports, Media Marketting, Editting, PA, anything)
It’s impossible to get hired over US citizens without a connect :/
28
24
767
139,054
full video with great music here ^~^
youtu.be/mGMgfMobV38
youtu.be/mGMgfMobV38
2
4
1,158
not going to lie some days my aim is literally identical to this. "perfect recoil control then it goes to shit" looks like if i take a break for a couple days and rush my recoil reset or start shooting while moving. the rest of the "snaps" look like they are good micros. saying this guy is cheating is a stretch but always possible. as of now i stand with you @Quevrys.
Apr 20
we caught u bro @Quevrys #VALORANT
@ItsGamerDoc @VALORANT pls take care of him thank you :)
note: he deleted all his recents vods from the last few days. (I took the one from yesterday)
apparently he got a new PC :DDD
23
1
306
51,721
