Disabled Client Error 28_3 and Client Error 28_4 100% Working and undetected

Posts 1–15 of 67 · Page 1 of 5

Tested and working fine, around more or less 35 minutes ingame, no disconnected from server and no more client errors received. Using this you are free to modified the weapon range, recoil, reload, or do onehitkill, weapon binder, and etc., without getting any client error.

Code:

#define dwBypassWeaponHack 0x000000; //need to update it
#define ADDR_WeaponMgrPointer 0x000000; //need to update it

typedef struct _WEAPON
{
    unsigned char Data[0xC3C0];
} WEAPON, *PWEAPON;

PWEAPON pOldWeapons[1600];

PWEAPON GetWeaponByIndex(int index)
{
    return pOldWeapons[index];
}

void CreateBackup(DWORD dwCShell, DWORD dwWeaponMgr)
{
    DWORD pWeaponMgr = *(DWORD*)(dwCShell + dwWeaponMgr );
    for(int i = 0; i < 1600; i++)
    {
        DWORD dwWeapon = *(DWORD*)(pWeaponMgr + (4 * i));
        if (dwWeapon)
        {
            pOldWeapons[i] = new WEAPON;
            memcpy(pOldWeapons[i], (void*)(dwWeapon), sizeof(WEAPON));
        }
    }
}

how to use:
void clientkiller()
{
CreateBackup(CShellModule, ADDR_WeaponMgrPointer)
DWORD dwOldProtect;
VirtualProtect((void*)(dwBypassWeaponHack + 0x1), sizeof(DWORD), PAGE_EXECUTE_READWRITE, &dwOldProtect);
*(DWORD*)(dwBypassWeaponHack + 0x1) = (DWORD)GetWeaponByIndex - dwBypassWeaponHack - 5;
VirtualProtect((void*)(dwBypassWeaponHack + 0x1), sizeof(DWORD), dwOldProtect, NULL);
}

credits:
@Biesi - for the source.
@yaago - for the latest offset addy
@HardHaxing - for starting/posting the thread of 28_4, so that it gives me the courage to conduct a test on the said client error.

How do I use this though? I don't understand when there's code realses.

Originally Posted by xzediise

How do I use this though? I don't understand when there's code realses.

Just call clientkiller maybe?

edit: which address is the right one to make it work?

Code:

106E59BA   . 83F8 FF        CMP EAX,-0x1
106E59BD   . 0F84 F7010000  JE cshell.106E5BBA  <----- this?
106E59C3   . 56             PUSH ESI
106E59C4   . 50             PUSH EAX
106E59C5   . E8 660CD7FF    CALL cshell.10456630  <------this?
106E59CA   . 8BF0           MOV ESI,EAX
106E59CC   . 83C4 04        ADD ESP,0x4
106E59CF   . 85F6           TEST ESI,ESI
106E59D1   . 0F84 E2010000  JE cshell.106E5BB9 <------- or this?

Originally Posted by vaisefud3

Just call clientkiller maybe?

edit: which address is the right one to make it work?

Code:

106E59BA   . 83F8 FF        CMP EAX,-0x1
106E59BD   . 0F84 F7010000  JE cshell.106E5BBA  <----- this?
106E59C3   . 56             PUSH ESI
106E59C4   . 50             PUSH EAX
106E59C5   . E8 660CD7FF    CALL cshell.10456630  <------this?
106E59CA   . 8BF0           MOV ESI,EAX
106E59CC   . 83C4 04        ADD ESP,0x4
106E59CF   . 85F6           TEST ESI,ESI
106E59D1   . 0F84 E2010000  JE cshell.106E5BB9 <------- or this?

Code:

106E59BA   . 83F8 FF        CMP EAX,-0x1
106E59BD   . 0F84 F7010000  JE cshell.106E5BBA  
106E59C3   . 56             PUSH ESI
106E59C4   . 50             PUSH EAX
106E59C5   . E8 660CD7FF    CALL cshell.10456630  <------this
106E59CA   . 8BF0           MOV ESI,EAX
106E59CC   . 83C4 04        ADD ESP,0x4
106E59CF   . 85F6           TEST ESI,ESI
106E59D1   . 0F84 E2010000  JE cshell.106E5BB9

I still don't understand, If you want to help you can add me on skype xd. Thanks for trying I guess.
I just wanna know how to get it work so that I get trough anticheat and also client/disconnected from servers issues.

Originally Posted by vaisefud3

Just call clientkiller maybe?

edit: which address is the right one to make it work?

Code:

106E59BA   . 83F8 FF        CMP EAX,-0x1
106E59BD   . 0F84 F7010000  JE cshell.106E5BBA  <----- this?
106E59C3   . 56             PUSH ESI
106E59C4   . 50             PUSH EAX
106E59C5   . E8 660CD7FF    CALL cshell.10456630  <------this?
106E59CA   . 8BF0           MOV ESI,EAX
106E59CC   . 83C4 04        ADD ESP,0x4
106E59CF   . 85F6           TEST ESI,ESI
106E59D1   . 0F84 E2010000  JE cshell.106E5BB9 <------- or this?

It's the call, but in CFBR you need a bypass for a DC.

Originally Posted by dreek1

Now you need bypass for 30_1

Until today I did not find this disgrace

Now you need bypass for 30_1

Thank you for that.
What you did was a very noble gesture, in a medium where programmers do not help themselves, someone posting something that has even people who sell is noble.

Originally Posted by M4Z3

Thank you for that.
What you did was a very noble gesture, in a medium where programmers do not help themselves, someone posting something that has even people who sell is noble.

Maze, how did you do the Fast Plant? I thought it was patched in CFBR.

Ok bro, thanks for it.
I'll test now and i'll back with results. @emiedumalasa

- - - Updated - - -

Originally Posted by vaisefud3

Maze, how did you do the Fast Plant? I thought it was patched in CFBR.

is the same of defuse ninja, but with another offset

Originally Posted by HardHaxing

Ok bro, thanks for it.
I'll test now and i'll back with results. @emiedumalasa

- - - Updated - - -

is the same of defuse ninja, but with another offset

going to give it a try, bcause I tried before and it was just visual.