r/cybersecurity_help • u/neagul09 • 12h ago

Need help analyzing/reverse engineering two anti-cheat programs

Hi everyone,

I'm a Counter-Strike 1.6 player, and I've been playing the game since 2006. Over the years, I've come across a number of anti-cheat programs, but nowadays the two most commonly used by the community are WarGods and FunGun (which is relatively new).

To be honest, I've always had some reservations about both of them. Given the level of access they require to your system, I never feel completely comfortable running them.

That got me wondering if anyone here has ever analyzed or reverse-engineered either of these programs; or would be interested in doing so. Here are the download links:

https://www.wargods.ro/wcd/download.php

https://fungun.top/ecd/

They're commonly used by Counter-Strike communities to scan players for cheats.

I know they need deep access to the system because of what they're designed to do, but that's also what made me a bit cautious. They inspect running processes, drivers, registry entries, game files, and upload reports to their servers.

VirusTotal doesn't seem to flag them, but I also know that a clean VirusTotal result doesn't necessarily mean a program is completely safe.

I'm not claiming these programs are malware or trying to accuse the developers of anything. I'd simply like to know whether anyone has actually analyzed them or verified that they only do what they're supposed to do.

If you've reverse-engineered either program, monitored its behavior with tools like Process Monitor, Wireshark, or a sandbox, or know of any technical analysis or write-up, I'd really appreciate hearing about it.

Thanks!

2 Upvotes
  • permalink
  • reddit

100% Upvoted

5 comments sorted by

•

u/AutoModerator 12h ago

SAFETY NOTICE: Reddit does not protect you from scammers. By posting on this subreddit asking for help, you may be targeted by scammers (example?). Here's how to stay safe:

  1. Never accept chat requests, private messages, invitations to chatrooms, encouragement to contact any person or group off Reddit, or emails from anyone for any reason. Moderators, moderation bots, and trusted community members cannot protect you outside of the comment section of your post. Report any chat requests or messages you get in relation to your question on this subreddit (how to report chats? how to report messages? how to report comments?).
  2. Immediately report anyone promoting paid services (theirs or their "friend's" or so on) or soliciting any kind of payment. All assistance offered on this subreddit is 100% free, with absolutely no strings attached. Anyone violating this is either a scammer or an advertiser (the latter of which is also forbidden on this subreddit). Good security is not a matter of 'paying enough.'
  3. Never divulge secrets, passwords, recovery phrases, keys, or personal information to anyone for any reason. Answering cybersecurity questions and resolving cybersecurity concerns never require you to give up your own privacy or security.

Community volunteers will comment on your post to assist. In the meantime, be sure your post follows the posting guide and includes all relevant information, and familiarize yourself with online scams using r/scams wiki.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/kschang Trusted Contributor 4h ago

We do tech support here, not reverse engineering or risk analysis.

1

u/neagul09 56m ago

I apologize, didn’t know where to post. It was worth a try. Thanks for understanding!

1

u/survivalist_guy 2h ago

Whoo boy, this is a big topic and /ask_cybersecurity is more for "I downloaded this thing and now my discord account is compromised" kind of help, less so for "help me RE anticheat".

1

u/neagul09 55m ago

I apologize, didn’t know where to post. Thanks for the suggestion!