Strings Bypass
Bom... a algum tempo a Level UP Junto com a NEXON implementou um check nas strings usadas no Menu, tipo Chams, TokolocoSK, luizimloko, xipher, mpgh.net, etc..., bom com esse Bypass irá funcionar todas as strings sem D/C sem precisar encripta-las
Code:
375B2D75 |. 68 E44F7437 PUSH CShell.37744FE4 ; UNICODE "Xipher" 375B2D7A |. 8D4C24 18 LEA ECX,DWORD PTR SS:[ESP+18] 375B2D7E |. E8 0DEEB5FF CALL CShell.37111B90 375B2D83 |. 8D4424 14 LEA EAX,DWORD PTR SS:[ESP+14] 375B2D87 |. 50 PUSH EAX 375B2D88 |. 8BCE MOV ECX,ESI 375B2D8A |. E8 21EEFEFF CALL CShell.375A1BB0 375B2D8F |. 68 CC4F7437 PUSH CShell.37744FCC ; UNICODE "TokolocoSK" 375B2D94 |. 8D4C24 18 LEA ECX,DWORD PTR SS:[ESP+18] 375B2D98 |. E8 F3EDB5FF CALL CShell.37111B90 375B2D9D |. 8D4C24 14 LEA ECX,DWORD PTR SS:[ESP+14] 375B2DA1 |. 51 PUSH ECX 375B2DA2 |. 8BCE MOV ECX,ESI 375B2DA4 |. E8 07EEFEFF CALL CShell.375A1BB0 => 375A1BB0 /$ 51 PUSH ECX 375A1BB1 |. 56 PUSH ESI 375A1BB2 |. 8BF1 MOV ESI,ECX 375A1BB4 |. 8B4E 04 MOV ECX,DWORD PTR DS:[ESI+4] 375A1BB7 |. 57 PUSH EDI 375A1BB8 |. 85C9 TEST ECX,ECX 375A1BBA |. 75 04 JNZ SHORT CShell.375A1BC0
Code:
375CB7AC |. 68 04607437 PUSH CShell.37746004 ; UNICODE "merda" 375CB7B1 |. 8D4C24 38 LEA ECX,DWORD PTR SS:[ESP+38] 375CB7B5 |. E8 D663B4FF CALL CShell.37111B90 375CB7BA |. 68 1C457437 PUSH CShell.3774451C ; UNICODE "**" 375CB7BF |. 8D4C24 54 LEA ECX,DWORD PTR SS:[ESP+54] 375CB7C3 |. E8 C863B4FF CALL CShell.37111B90 375CB7C8 |. 8D4424 34 LEA EAX,DWORD PTR SS:[ESP+34] 375CB7CC |. 50 PUSH EAX 375CB7CD |. 8BCE MOV ECX,ESI 375CB7CF |. E8 4C64FDFF CALL CShell.375A1C20 => 375A1C20 /$ 51 PUSH ECX 375A1C21 |. 53 PUSH EBX 375A1C22 |. 55 PUSH EBP 375A1C23 |. 56 PUSH ESI 375A1C24 |. 57 PUSH EDI 375A1C25 |. 8BF9 MOV EDI,ECX 375A1C27 |. 8B6F 04 MOV EBP,DWORD PTR DS:[EDI+4] 375A1C2A |. 85ED TEST EBP,EBP 375A1C2C |. 75 04 JNZ SHORT CShell.375A1C32
Code:
VOID StringBypass(VOID)
{
DWORD dwAdress = 0x375A1BB0; // Strings do Menu
DWORD pwAdress = 0x375A1C20; // Strings do Chat
__asm
{
MOV ECX, pwAdress;
MOV EAX, dwAdress;
MOV DWORD PTR DS:[EAX], 90h
MOV DWORD PTR DS:[ECX], 90h
}
}
Originally Posted by pDevice
