How to Hack a Protected Memory Game ? Shows errors while in vb .

hi , just asking something :

First of all : I am not a newbie as some people will think that ...
Second : I Am an expert Internet Games Hacker [Wolfteam/Gunz/Conquer ]

What Problem Faces Me ?

Wolfteam Has made a protection on it's memory and nothing works until i get windows 8 , although they made a new anti-cheat system , Addresses changer and Much more things , But I Discovered a way to hack all those things and make it work Except about the Memory Protection thing , They have made the game like shit , when i code in vb Nothing happens although i am using Proces***** & kernal32.dll method , But When i open the Coded Hack That was made in vb (On Windows 8 ) Works
What i mean is How to make The VB Hack Program Work For other Os Like Windows 7 and other windows ?
How to exactly edit the Game Protection {About Memory Not anything else }

Also a mini-Question : Some Methods like inf ammo has been patched , how to unpatch them or you know , remove a window which is like "Disconnect" or "You've been kicked from game" , How to find these Things ?

Note : The Addresses Changes like that : "csh436.tmp + 93045" then --> "csh328.tmp + 93045" so i hacked the game using the "93045"
with my own way ,

Summary :
-How to Edit the protection of the memory of a process in vb ?
-How to Find The addresses of The Messages like "Disconnect " or "you've been kicked from Game" But without Showing them , Like Using Any other method that is in Cheat engine ? .

Originally Posted by dyaaahmed99

Second : I Am an expert Internet Games Hacker [Wolfteam/Gunz/Conquer ]

If you're such an 'expert' as you say you are, you should know something as simple as to extort process memory access..

On topic, use the OpenProcess function.

Originally Posted by Geometrical

If you're such an 'expert' as you say you are, you should know something as simple as to extort process memory access..

On topic, use the OpenProcess function.

looooooooooooool , i already tried that method -_- , What i want is Editing the Protected Memory ! not the Game memory Because it's protected on all os except win 8 that's why , & Please i didn't mean to be selfish Because of saying "Expert " but because i don't request expert from Expert people

That's all , although do you have any idea about the game messages ? And how to Auto-Disable them

Summary :
-How to Edit the protection of the memory of a process in vb ?

Api Hooks, that work :P (Enumprocess, EnumWindows, K32EnumProcess) i think tha is the best way for Hack a Protected Memory

-How to Find The addresses of The Messages like "Disconnect " or "you've been kicked from Game" But without Showing them , Like Using Any other method that is in Cheat engine ? .

You can use a Packet Editor to avoid the Messages here de info

Also a mini-Question : Some Methods like inf ammo has been patched , how to unpatch them or you know , remove a window which is like "Disconnect" or "You've been kicked from game" , How to find these Things ?

There is always a related address with the decrease of the ammo (can be 1, 2 or 3) the best way will be set a breackpoint but that is protected, so try to use the "Dissect dat/structures"

aww..I didn't think about that xD , Thanks i will try and tell you
Thanks +Rep

Ok :P and with "Dissect dat/structures" you can find ererything related with the address that you une with Dissect dat if u are lucky you can find the reload delay and more things (Y)

Originally Posted by jonnyHS

Ok :P and with "Dissect dat/structures" you can find ererything related with the address that you une with Dissect dat if u are lucky you can find the reload delay and more things (Y)

Dude , I Tried to api Hook it using enum Process , and i failed :/ , I tried to have the full VM write in vb but also failed , Do you have any Idea how to write the working api hook for a game ? if you got a source code i will be very grateful , although there is something else , The Dissect data structures works for single player games , but not for my multiplayer one , Because this game as i told you in the first post changes the "Csh" Which affects on the addresses , so what always stay is the miniaddress (which may not become helpful Btw in the dissect data ) but i will try my hard

Well, for the APIS you must know C++, but if you know C++ here is a source (By slicktor)

Code:

#include "Bypass.h"

DWORD WINAPI InitializeXTrapBypass() { 

   DWORD nBase;
   while(1)
   {

       nBase = (DWORD)GetModuleHandleA("XTrapVa.dll");

       if(nBase){
       Sleep(500);
       BYPASS bypass;
       bypass.Driver64();
       bypass.ProcessDetection();
       break;
       }

   }
   return 0;

}

BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
   DisableThreadLibraryCalls(hDll);
   if( dwReason == DLL_PROCESS_ATTACH)

   {

         _beginthread((void(*)(void*))InitializeXTrapBypass,sizeof(&InitializeXTrapBypass),0);
   }


   return TRUE;
}

Main.h

Code:

#include <Windows.h>
#include <tlhelp32.h>
#include <process.h> 
#include <wchar.h>

class BYPASS
{

public:
int BYPASS::ProcessDetection();
int BYPASS::Driver64();
};
int BYPASS::ProcessDetection()
{

   DWORD K32EnumAddr = (DWORD)GetProcAddress(LoadLibraryA("Kernel32.dll"),"K32EnumProcesses");
   //DWORD EnumAddr = (DWORD)GetProcAddress(LoadLibraryA("Psapi.dll"),"EnumProcesses");
   DWORD old;
   VirtualProtect((LPVOID)K32EnumAddr,sizeof(K32EnumAddr),PAGE_EXECUTE_READWRITE,&old);
   //VirtualProtect((LPVOID)EnumAddr,sizeof(EnumAddr),PAGE_EXECUTE_READWRITE,&old);
   memcpy((LPVOID)K32EnumAddr,(LPVOID)"\xC2\x0C\x00",3);
   //memcpy((LPVOID)EnumAddr,(LPVOID)"\xC2\x0C\x00",3);
   return 0;
}

int BYPASS::Driver64()
{

   wmemcpy((wchar_t*)0x405D0C24,(const wchar_t*)"X6va01",6);
   return 0;
}

you must change: X6va01, XTrapVa.dl and others stuff becasuse this is for Xtrap, so you have to get the modules from the Anti-Cheat

Originally Posted by dyaaahmed99

Hey, by chance did you manage to figure this out? I have the exact same issue right now. I can make hacks for windows 8 but not windows 7.

How to Hack a Protected Memory Game ? Shows errors while in vb .

Post a Reply

Similar Threads

Tags for this Thread