Mini-bypass Disconnect from Server

Code:

#define check1                          0x1B8F28			// aob: 75 ?? 32 ?? 5B 8B ?? ?? ?? ?? ??
#define check2                          0x1B8F52			// aob: 73 ?? 85 ?? ?? ?? 85 ?? ?? ?? 32
#define check3                          0x1B8F56			// aob: 7E ?? 85 ?? ?? ?? 32 ??
#define check4                          0x1B8F5A			// aob: 75 ?? 32 ?? E9 ?? ?? ?? ?? 55
#define check5                          0x1B8F82			// aob: 7E ?? 57 53 E8 ?? ?? ?? ??
#define check6                          0x1B8F9D			// aob: 7E ?? 57 8D ?? ?? ?? 53 51 E8
#define hackDetect_1			0x1B8F86			// aob: E8 ?? ?? ?? ?? 83 ?? ?? 8B ?? 85 ?? 8B ?? 89 ?? ?? ??
#define hackDetect_2			0x1B920B			// aob: E8 ?? ?? ?? ?? 8D ?? ?? 83 ?? ?? 89 ?? ?? 8B ?? 2B ??
#define hackDetect_3			0x1B9F5B			// aob: E8 ?? ?? ?? ?? ?? ?? A1 ?? ?? ?? ?? 83 C0 ?? 83
#define hackDetect_4			0x1BA782			// aob: E8 ?? ?? ?? ?? 8B ?? ?? ?? 83 ?? ?? 89 ?? 33 ?? 85 ??
#define hackDetect_5			0x1BAB53			// aob: E8 ?? ?? ?? ?? 83 ?? ?? 39 ?? ?? ?? ?? ?? 55
#define hackDetect_6			0x1BACDA			// aob: E8 ?? ?? ?? ?? 83 ?? ?? 39 ?? ?? ?? ?? ?? 55

void WINAPIV DisconectFromServer()
{
	__asm
	{
		MOV ECX, DWORD PTR DS:[ ESP + 0x4 ]
		XOR EAX, EAX
		CMP [ ESP + 0x8 ], EAX
		JMP RET_JE
			RET_JNZ: MOVZX EDX, BYTE PTR DS:[ ECX ]
			DEC [ ESP + 0x8 ]
			XOR EDX, EAX
			AND EDX, 0x0FF
			SHR EAX, 0x8
			XOR EAX, DWORD PTR DS:[ EDX*4 + 0x75A908 ]
			INC ECX
			CMP [ ESP + 0x8 ], 0x0
			JNZ RET_JNZ
		RET_JE: NOT EAX
	}
}

void DetourCreateE8( BYTE *src, DWORD dst, DWORD len )
{
	DWORD OldProtection, RealAddress;
	VirtualProtect( src, len, PAGE_EXECUTE_READWRITE, &OldProtection );
	RealAddress = ( DWORD ) ( ( dst + 1 ) - ( DWORD ) src ) - 5;
	*src = 0xE8;
	*( DWORD * ) ( src + 0x01 ) = RealAddress;
	VirtualProtect( src, len, OldProtection, 0 );
	return;
}

void check ()
{
        DWORD Engine = (DWORD)GetModuleHandleA("crossfire.exe");
        memcpy((VOID*)( Engine + check1 ), "\xEB", 1); 
        memcpy((VOID*)( Engine + check2 ), "\xEB", 1);
	memcpy((VOID*)( Engine + check3 ), "\xEB", 1); 
        memcpy((VOID*)( Engine + check4 ), "\xEB", 1);
	memcpy((VOID*)( Engine + check5 ), "\xEB", 1); 
        memcpy((VOID*)( Engine + check6 ), "\xEB", 1);
}

void CALLBypass ( )
{
        check();
        DWORD Engine = (DWORD)GetModuleHandleA("crossfire.exe");
        DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_1 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_2 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_3 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_4 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_5 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_6 ), ( DWORD ) DisconectFromServer, 5 );
}

Originally Posted by CaiozinhoFC1

Code:

#define check1                          0x1B8F28			// aob: 75 ?? 32 ?? 5B 8B ?? ?? ?? ?? ??
#define check2                          0x1B8F52			// aob: 73 ?? 85 ?? ?? ?? 85 ?? ?? ?? 32
#define check3                          0x1B8F56			// aob: 7E ?? 85 ?? ?? ?? 32 ??
#define check4                          0x1B8F5A			// aob: 75 ?? 32 ?? E9 ?? ?? ?? ?? 55
#define check5                          0x1B8F82			// aob: 7E ?? 57 53 E8 ?? ?? ?? ??
#define check6                          0x1B8F9D			// aob: 7E ?? 57 8D ?? ?? ?? 53 51 E8
#define hackDetect_1			0x1B8F86			// aob: E8 ?? ?? ?? ?? 83 ?? ?? 8B ?? 85 ?? 8B ?? 89 ?? ?? ??
#define hackDetect_2			0x1B920B			// aob: E8 ?? ?? ?? ?? 8D ?? ?? 83 ?? ?? 89 ?? ?? 8B ?? 2B ??
#define hackDetect_3			0x1B9F5B			// aob: E8 ?? ?? ?? ?? ?? ?? A1 ?? ?? ?? ?? 83 C0 ?? 83
#define hackDetect_4			0x1BA782			// aob: E8 ?? ?? ?? ?? 8B ?? ?? ?? 83 ?? ?? 89 ?? 33 ?? 85 ??
#define hackDetect_5			0x1BAB53			// aob: E8 ?? ?? ?? ?? 83 ?? ?? 39 ?? ?? ?? ?? ?? 55
#define hackDetect_6			0x1BACDA			// aob: E8 ?? ?? ?? ?? 83 ?? ?? 39 ?? ?? ?? ?? ?? 55

void WINAPIV DisconectFromServer()
{
	__asm
	{
		MOV ECX, DWORD PTR DS:[ ESP + 0x4 ]
		XOR EAX, EAX
		CMP [ ESP + 0x8 ], EAX
		JMP RET_JE
			RET_JNZ: MOVZX EDX, BYTE PTR DS:[ ECX ]
			DEC [ ESP + 0x8 ]
			XOR EDX, EAX
			AND EDX, 0x0FF
			SHR EAX, 0x8
			XOR EAX, DWORD PTR DS:[ EDX*4 + 0x75A908 ]
			INC ECX
			CMP [ ESP + 0x8 ], 0x0
			JNZ RET_JNZ
		RET_JE: NOT EAX
	}
}

void DetourCreateE8( BYTE *src, DWORD dst, DWORD len )
{
	DWORD OldProtection, RealAddress;
	VirtualProtect( src, len, PAGE_EXECUTE_READWRITE, &OldProtection );
	RealAddress = ( DWORD ) ( ( dst + 1 ) - ( DWORD ) src ) - 5;
	*src = 0xE8;
	*( DWORD * ) ( src + 0x01 ) = RealAddress;
	VirtualProtect( src, len, OldProtection, 0 );
	return;
}

void check ()
{
        DWORD Engine = (DWORD)GetModuleHandleA("crossfire.exe");
        memcpy((VOID*)( Engine + check1 ), "\xEB", 1); 
        memcpy((VOID*)( Engine + check2 ), "\xEB", 1);
	memcpy((VOID*)( Engine + check3 ), "\xEB", 1); 
        memcpy((VOID*)( Engine + check4 ), "\xEB", 1);
	memcpy((VOID*)( Engine + check5 ), "\xEB", 1); 
        memcpy((VOID*)( Engine + check6 ), "\xEB", 1);
}

void CALLBypass ( )
{
        check();
        DWORD Engine = (DWORD)GetModuleHandleA("crossfire.exe");
        DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_1 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_2 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_3 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_4 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_5 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_6 ), ( DWORD ) DisconectFromServer, 5 );
}

what is this : 0x75A908

Originally Posted by M4Z3

what is this : 0x75A908

are you kid ? self find

- - - Updated - - -

Originally Posted by CaiozinhoFC1

Code:

#define check1                          0x1B8F28			// aob: 75 ?? 32 ?? 5B 8B ?? ?? ?? ?? ??
#define check2                          0x1B8F52			// aob: 73 ?? 85 ?? ?? ?? 85 ?? ?? ?? 32
#define check3                          0x1B8F56			// aob: 7E ?? 85 ?? ?? ?? 32 ??
#define check4                          0x1B8F5A			// aob: 75 ?? 32 ?? E9 ?? ?? ?? ?? 55
#define check5                          0x1B8F82			// aob: 7E ?? 57 53 E8 ?? ?? ?? ??
#define check6                          0x1B8F9D			// aob: 7E ?? 57 8D ?? ?? ?? 53 51 E8
#define hackDetect_1			0x1B8F86			// aob: E8 ?? ?? ?? ?? 83 ?? ?? 8B ?? 85 ?? 8B ?? 89 ?? ?? ??
#define hackDetect_2			0x1B920B			// aob: E8 ?? ?? ?? ?? 8D ?? ?? 83 ?? ?? 89 ?? ?? 8B ?? 2B ??
#define hackDetect_3			0x1B9F5B			// aob: E8 ?? ?? ?? ?? ?? ?? A1 ?? ?? ?? ?? 83 C0 ?? 83
#define hackDetect_4			0x1BA782			// aob: E8 ?? ?? ?? ?? 8B ?? ?? ?? 83 ?? ?? 89 ?? 33 ?? 85 ??
#define hackDetect_5			0x1BAB53			// aob: E8 ?? ?? ?? ?? 83 ?? ?? 39 ?? ?? ?? ?? ?? 55
#define hackDetect_6			0x1BACDA			// aob: E8 ?? ?? ?? ?? 83 ?? ?? 39 ?? ?? ?? ?? ?? 55

void WINAPIV DisconectFromServer()
{
	__asm
	{
		MOV ECX, DWORD PTR DS:[ ESP + 0x4 ]
		XOR EAX, EAX
		CMP [ ESP + 0x8 ], EAX
		JMP RET_JE
			RET_JNZ: MOVZX EDX, BYTE PTR DS:[ ECX ]
			DEC [ ESP + 0x8 ]
			XOR EDX, EAX
			AND EDX, 0x0FF
			SHR EAX, 0x8
			XOR EAX, DWORD PTR DS:[ EDX*4 + 0x75A908 ]
			INC ECX
			CMP [ ESP + 0x8 ], 0x0
			JNZ RET_JNZ
		RET_JE: NOT EAX
	}
}

void DetourCreateE8( BYTE *src, DWORD dst, DWORD len )
{
	DWORD OldProtection, RealAddress;
	VirtualProtect( src, len, PAGE_EXECUTE_READWRITE, &OldProtection );
	RealAddress = ( DWORD ) ( ( dst + 1 ) - ( DWORD ) src ) - 5;
	*src = 0xE8;
	*( DWORD * ) ( src + 0x01 ) = RealAddress;
	VirtualProtect( src, len, OldProtection, 0 );
	return;
}

void check ()
{
        DWORD Engine = (DWORD)GetModuleHandleA("crossfire.exe");
        memcpy((VOID*)( Engine + check1 ), "\xEB", 1); 
        memcpy((VOID*)( Engine + check2 ), "\xEB", 1);
	memcpy((VOID*)( Engine + check3 ), "\xEB", 1); 
        memcpy((VOID*)( Engine + check4 ), "\xEB", 1);
	memcpy((VOID*)( Engine + check5 ), "\xEB", 1); 
        memcpy((VOID*)( Engine + check6 ), "\xEB", 1);
}

void CALLBypass ( )
{
        check();
        DWORD Engine = (DWORD)GetModuleHandleA("crossfire.exe");
        DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_1 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_2 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_3 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_4 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_5 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_6 ), ( DWORD ) DisconectFromServer, 5 );
}

thanks + rep

Originally Posted by gaerGAERHGaerherh

are you kid ? self find

I made the search your mental weak.
I got one JE
Now go back to the eggs of RamoXO.

Originally Posted by M4Z3

I made the search your mental weak.
I got one JE
Now go back to the eggs of RamoXO.

you only idiot always want help and money beacuse you idiot maybe you not know cheat engine what only leech go to self learn and find

#define hackDetect_5 0x1BAB53 // aob: E8 ?? ?? ?? ?? 83 ?? ?? 39 ?? ?? ?? ?? ?? 55
#define hackDetect_6 0x1BACDA // aob: E8 ?? ?? ?? ?? 83 ?? ?? 39 ?? ?? ?? ?? ?? 55

same pattern then its same address?

Works fine CFBR, but this is only for DC - HD Ban, not for DC - 28_3 bypass (not a question, just a note).

Originally Posted by gaerGAERHGaerherh

you only idiot always want help and money beacuse you idiot maybe you not know cheat engine what only leech go to self learn and find

Stop despise the people you DON'T IS BETTER THAN THEY

Originally Posted by M4Z3

I made the search your mental weak.
I got one JE
Now go back to the eggs of RamoXO.

These comedy that survives with the code of RamoXo wanting media and fame

Originally Posted by Slashv2

These comedy that survives with the code of RamoXo wanting media and fame

When a person who has always asked for help (and still asks) tries to reduce someone, it is very ridiculous. Other than that, he really thinks he knows something with his wise knowledge of the RamoXo codes. People as they learn everything they know in a community like mpgh and then want to grow up on it are known by a name

L E E C H E R

Originally Posted by gaerGAERHGaerherh

you only idiot always want help and money beacuse you idiot maybe you not know cheat engine what only leech go to self learn and find

As you can see, I'm not alone.
Many share the same idea as me, and why would I kill myself day after day programming except for making money?
You took a joking remark asking "BTC" for the personal side and so it is attracting a negative attention.
Review your attitudes and concepts, you have already arrived here asking how to open C ++.
You're no better than anyone for being with RamoXO.

Originally Posted by M4Z3

lol you what feature self make ? can you tell me only copy paste i not said im better than you or another but you know 10 btc what ?

As I said: You took 1 ironical comment (meaning zoeira in Brazil) as something serious.
Continue this way, after all, you're just a shadow of the ramoxo
Zoeira: a healthy joke.

Originally Posted by vaisefud3

Works fine CFBR, but this is only for DC - HD Ban, not for DC - 28_3 bypass (not a question, just a note).

no, it bypass all disconnect from server, change_weapon_value, menu_detect, change_memory, remotekill ..

Apparently you doesn't know how this AC works, since you has used 12 address, placing JMPs opcodes on all conditionals instructions only to stop him, without know the real impacts of these modifications.

Mini-bypass Disconnect from Server

Post a Reply

Similar Threads

Tags for this Thread