😎 New 28_3 ByPass (much shorter)

Oookkaay...
So, i was just a bit Hyperactive, and did my crazy experiments on Crossfire...
The story was, as always: I couldn't convert something from C++ to C#, so i made it on my own retard way (but those are always works )
Aannd, i found a new way to bypass that retard 28_3, and its much much shorter, and easier than before...

This is written in C#, but not so hard to convert into C++
(Tested in Cf Eu)

Note:
the 0x1F8 may change during patches (really small chance)...

the "uint ByPass" or in C++: "DWORD ByPass" is the current ByPass addy...

Code:

public static unsafe void CreateBypass(uint CShell, uint ByPass) { uint NewAddress = ByPass - 0x8; *(byte*)(CShell + NewAddress + 0) = 0xE9; *(uint*)(CShell + NewAddress + 1) = 0x1F8; *(byte*)(CShell + NewAddress + 5) = 0x90; }

Good luck everyone...

Originally Posted by rabir007

Oookkaay...
So, i was just a bit Hyperactive, and did my crazy experiments on Crossfire...
The story was, as always: I couldn't convert something from C++ to C#, so i made it on my own retard way (but those are always works )
Aannd, i found a new way to bypass that retard 28_3, and its much much shorter, and easier than before...

This is written in C#, but not so hard to convert into C++
(Tested in Cf Eu)

Note:
the 0x1F8 may change during patches (really small chance)...

the "uint ByPass" or in C++: "DWORD ByPass" is the current ByPass addy...

Code:

public static unsafe void CreateBypass(uint CShell, uint ByPass) { uint NewAddress = ByPass - 0x8; *(byte*)(CShell + NewAddress + 0) = 0xE9; *(uint*)(CShell + NewAddress + 1) = 0x1F8; *(byte*)(CShell + NewAddress + 5) = 0x90; }

Good luck everyone...

ehehehe

go and try playing 10 minutes GM then tell me if it works

Originally Posted by kmanev073

ehehehe go and try playing 10 minutes GM then tell me if it works

I still only tested in TD.. But didn't got any error...
Currently the servers are down -_- can't test in GM...

Originally Posted by rabir007

I still only tested in TD.. But didn't got any error...
Currently the servers are down -_- can't test in GM...

servers are now on... i think you will get 28_4 in GM

Originally Posted by kmanev073

servers are now on... i think you will get 28_4 in GM

Hmm.. Now same in TD... Didn't got this when i tested -_-
Fuck then, i still working on getting a motherfucker pointer for C# function, and calling it...

Wthat the hell is 28_4 ?

Originally Posted by rabir007

Hmm.. Now same in TD... Didn't got this when i tested -_-
Fuck then, i still working on getting a motherfucker pointer for C# function, and calling it...

Wthat the hell is 28_4 ?

28_4 means the client knows you've tried bypassing 28_3, kinda like a troll error.

Originally Posted by JamesRo

28_4 means the client knows you've tried bypassing 28_3, kinda like a troll error.

Hmm... Fuck then, i will bypass this shit too -_-
Edit:
Umm.. As soon as i find it... Fuck it Smilegate...

Originally Posted by rabir007

Hmm.. Now same in TD... Didn't got this when i tested -_-
Fuck then, i still working on getting a motherfucker pointer for C# function, and calling it...

Wthat the hell is 28_4 ?

well i made my bypass with 2 lines and it was working... then i played a bit and noticed the 28_4 maybe there is some byte checking or kind of keep alive if the check was run

Originally Posted by kmanev073

well i made my bypass with 2 lines and it was working... then i played a bit and noticed the 28_4 maybe there is some byte checking or kind of keep alive if the check was run

I will look into it, since i can't make the ByPass in C# (the working one) the managed-native code conversion have some trouble...

Whats uint bypass?

Code:

void createBypass(DWORD cshell,DWORD bypass)
{
	DWORD newAddress = bypass - 8;
	*(BYTE*)(cshell + newAddress) = 0xE9;
	*(DWORD*)(cshell + newAddress) = 0x1F8;
	*(BYTE*)(cshell + newAddress) = 0x90;
}

c++ equivalent. if there are any glaring errors, feel free to correct me.

Thank you for this

much shorter indeed, but other one works better.

not working

Originally Posted by rabir007

Wthat the hell is 28_4 ?

Most Possible that somewhere in 28_3, is hided a litel call , or memory place where there is saved some data, then 28_4 come's and check's that place , how you kill'd the 28_3 the memory place is empty =>> 28_4.

Or there is a call inside the 28_3 to 28_4 retarting it's timer, 28_4 has a timmer with +/- 6-10's to give error, then 28_3 come's and restart this timer, how you killd 28_3 =>> timer is not restarted =>> 28_4.

Best solution without to many search is to let 28_3 alive just make some change's inside it, but ofc if you have time you can search around 28_4 and kill it to .

😎 New 28_3 ByPass (much shorter)

Similar Threads