New Bypass method Error 31_0

Address:

Code:

CFBR // CShell.dll+0x6D1243
FF ?? ?? ?? ?? ?? 80 46 19 01 83 44 24 1C 04

Local:

Code:

106D1243  |> 8046 19 01     |ADD BYTE PTR DS:[ESI+19],1

Bypass:

Code:

memcpy((void*)( CShell + 0x6D1243 ), "\x80\x46\x19\x00", 4);

change 1 to 0 xd, ready for use weaponhack

Good job reputation+

Thanks + REP

For CFPH you can use this guys.
Address:

Code:

CFPH // CShell.dll+0x6AEC6C
FF ?? ?? ?? ?? ?? 80 47 19 01 =>

Code:

106AEC66   . FF15 B093BF10          CALL DWORD PTR DS:[0x10BF93B0]

Local:

Code:

106AEC6C   > 8047 19 01             ADD BYTE PTR DS:[EDI+0x19],0x1

Bypass:

Code:

memcpy((void*)( CShell + 0x6AEC6C ), "\x80\x46\x19\x00", 4);

Fala ae ladrão de TOOLS

Originally Posted by malfac009

Thanks + REP

For CFPH you can use this guys.
Address:

Code:

CFPH // CShell.dll+0x6AEC6C
FF ?? ?? ?? ?? ?? 80 47 19 01 =>

Code:

106AEC66   . FF15 B093BF10          CALL DWORD PTR DS:[0x10BF93B0]

Local:

Code:

106AEC6C   > 8047 19 01             ADD BYTE PTR DS:[EDI+0x19],0x1

Bypass:

Code:

memcpy((void*)( CShell + 0x6AEC6C ), "\x80\x46\x19\x00", 4);

why did you reduced 1
from 8047 19 01 to
memcpy((void*)( CShell + 0x6AEC6C ), "\x80\x46\x19\x00", 4);
i cant quite understand

Originally Posted by ronoazoro1231

why did you reduced 1
from 8047 19 01 to
memcpy((void*)( CShell + 0x6AEC6C ), "\x80\x46\x19\x00", 4);
i cant quite understand

I think that for 01 to 00 , is the reason that the error 31_0 will trigger.
You could ask @CaiozinhoFC1 for better explaination .

Originally Posted by malfac009

I think that for 01 to 00 , is the reason that the error 31_0 will trigger.
You could ask @CaiozinhoFC1 for better explaination .

i mean 8047 19 01 to
47 orig byte
and then when you use memorycopy you reduced one and make it 46 i thought we only need to reduct one byte from the last ?

Sometimes I still get this

Originally Posted by yaago

Sometimes I still get this

Perfect no recoil cause it

@yaago this is caused by norecoil

You could nop the whole instructions since it adds 1 it will just skip that operation which is the same. Looks like you found the flagged count variable. I wonder why they put it clientsided though. That's such a dummy move from smilegate.

Originally Posted by UltraPGNoob

You could nop the whole instructions since it adds 1 it will just skip that operation which is the same. Looks like you found the flagged count variable. I wonder why they put it clientsided though. That's such a dummy move from smilegate.

I think have bypass many client errors with values 1 and 0

After replacing the weapon, 30_1 is not present, but it leaves 28_3. How to be? How do you change weapons?

Originally Posted by N1rvanaRU

After replacing the weapon, 30_1 is not present, but it leaves 28_3. How to be? How do you change weapons?

You need 28_3 bypass ("client error killer") + disconnection bypass

ADD instruction basically increment the variable with x which is 1 in our case so nopping this operation would surely result in the same thing

New Bypass method Error 31_0

Post a Reply

Similar Threads

Tags for this Thread