Mini-bypass Disconnect from Server

Originally Posted by CaiozinhoFC1

no, it bypass all disconnect from server, change_weapon_value, menu_detect, change_memory, remotekill ..

At least here it doesn't take off the DC after 28_3 / 28_4 bypass from emiedumalasa.

Originally Posted by luizimloko

Apparently you doesn't know how this AC works, since you has used 12 address, placing JMPs opcodes on all conditionals instructions only to stop him, without know the real impacts of these modifications.

every check has its call
hackDetect_1 = check if you changed the original function (d / c 10min)
hackDetect_3 = check if you have modified some value
hackDetect_6 = ban on your account
hackDetect_5 = call messagebox
hackDetect_2 = channel
hackDetect_4 = in room
jmp overrides the function of hackDetect_1

Originally Posted by CaiozinhoFC1

every check has its call
hackDetect_1 = check if you changed the original function (d / c 10min)
hackDetect_3 = check if you have modified some value
hackDetect_6 = ban on your account
hackDetect_5 = call messagebox
hackDetect_2 = channel
hackDetect_4 = in room
jmp overrides the function of hackDetect_1

You only need one JMP

And it's my fault, the bypass works perfect.

https:// i65.tinypic.com/14kd3tg.png
its correct check1 address right?? then hackdetect5 and hackdetect6 address are same... cause its same pattern hmmmm @CaiozinhoFC1

ANY AOB FOR CF NA

Originally Posted by [K]akashi

ANY AOB FOR CF NA

already this aobs work cfna lol xd

Originally Posted by gaerGAERHGaerherh

already this aobs work cfna lol xd

WHY DID WHEN I TRY TO LOOK FOR THEM I FIND NO THING !

Originally Posted by [K]akashi

WHY DID WHEN I TRY TO LOOK FOR THEM I FIND NO THING !

beaucse not cshell aobs

Originally Posted by gaerGAERHGaerherh

beaucse not cshell aobs

I'm not idiot to find these AOB on CShell
I Already searched on Crossfire.exe
but thanks my problems solved

Originally Posted by CaiozinhoFC1

Code:

#define check1                          0x1B8F28			// aob: 75 ?? 32 ?? 5B 8B ?? ?? ?? ?? ??
#define check2                          0x1B8F52			// aob: 73 ?? 85 ?? ?? ?? 85 ?? ?? ?? 32
#define check3                          0x1B8F56			// aob: 7E ?? 85 ?? ?? ?? 32 ??
#define check4                          0x1B8F5A			// aob: 75 ?? 32 ?? E9 ?? ?? ?? ?? 55
#define check5                          0x1B8F82			// aob: 7E ?? 57 53 E8 ?? ?? ?? ??
#define check6                          0x1B8F9D			// aob: 7E ?? 57 8D ?? ?? ?? 53 51 E8
#define hackDetect_1			0x1B8F86			// aob: E8 ?? ?? ?? ?? 83 ?? ?? 8B ?? 85 ?? 8B ?? 89 ?? ?? ??
#define hackDetect_2			0x1B920B			// aob: E8 ?? ?? ?? ?? 8D ?? ?? 83 ?? ?? 89 ?? ?? 8B ?? 2B ??
#define hackDetect_3			0x1B9F5B			// aob: E8 ?? ?? ?? ?? ?? ?? A1 ?? ?? ?? ?? 83 C0 ?? 83
#define hackDetect_4			0x1BA782			// aob: E8 ?? ?? ?? ?? 8B ?? ?? ?? 83 ?? ?? 89 ?? 33 ?? 85 ??
#define hackDetect_5			0x1BAB53			// aob: E8 ?? ?? ?? ?? 83 ?? ?? 39 ?? ?? ?? ?? ?? 55
#define hackDetect_6			0x1BACDA			// aob: E8 ?? ?? ?? ?? 83 ?? ?? 39 ?? ?? ?? ?? ?? 55

void WINAPIV DisconectFromServer()
{
	__asm
	{
		MOV ECX, DWORD PTR DS:[ ESP + 0x4 ]
		XOR EAX, EAX
		CMP [ ESP + 0x8 ], EAX
		JMP RET_JE
			RET_JNZ: MOVZX EDX, BYTE PTR DS:[ ECX ]
			DEC [ ESP + 0x8 ]
			XOR EDX, EAX
			AND EDX, 0x0FF
			SHR EAX, 0x8
			XOR EAX, DWORD PTR DS:[ EDX*4 + 0x75A908 ]
			INC ECX
			CMP [ ESP + 0x8 ], 0x0
			JNZ RET_JNZ
		RET_JE: NOT EAX
	}
}

void DetourCreateE8( BYTE *src, DWORD dst, DWORD len )
{
	DWORD OldProtection, RealAddress;
	VirtualProtect( src, len, PAGE_EXECUTE_READWRITE, &OldProtection );
	RealAddress = ( DWORD ) ( ( dst + 1 ) - ( DWORD ) src ) - 5;
	*src = 0xE8;
	*( DWORD * ) ( src + 0x01 ) = RealAddress;
	VirtualProtect( src, len, OldProtection, 0 );
	return;
}

void check ()
{
        DWORD Engine = (DWORD)GetModuleHandleA("crossfire.exe");
        memcpy((VOID*)( Engine + check1 ), "\xEB", 1); 
        memcpy((VOID*)( Engine + check2 ), "\xEB", 1);
	memcpy((VOID*)( Engine + check3 ), "\xEB", 1); 
        memcpy((VOID*)( Engine + check4 ), "\xEB", 1);
	memcpy((VOID*)( Engine + check5 ), "\xEB", 1); 
        memcpy((VOID*)( Engine + check6 ), "\xEB", 1);
}

void CALLBypass ( )
{
        check();
        DWORD Engine = (DWORD)GetModuleHandleA("crossfire.exe");
        DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_1 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_2 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_3 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_4 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_5 ), ( DWORD ) DisconectFromServer, 5 );
	DetourCreateE8( ( PBYTE ) ( Engine + hackDetect_6 ), ( DWORD ) DisconectFromServer, 5 );
}

PS : there's 7 game checks and 9 game dc and 3 AC checks

the code kinda ....
since theres ppls already posting some aob why not sharing mine?
here's some aob's, don't ask me what is what , figure it urself, i'll not reply to any pm or mentions....

Code:

//not in cshell , if you can't use CE don't bother urself, if you don't know ASM don't bother either
// if the aob's r outdated tell me to update it , i've tested those couple months ago and still working since 1st xc3 update ...
89 85 E4 FC FF FF FF 77 18
89 9D E0 FC FF FF 8B 8D EC FC FF FF 3B 59 10
FF 75 14 FF 36 FF 55 10 89 45 FC
C6 45 FC 02 8D 85 58 FF FF FF

enjoy fam

Originally Posted by 96neko

PS : there's 7 game checks and 9 game dc and 3 AC checks

the code kinda ....
since theres ppls already posting some aob why not sharing mine?
here's some aob's, don't ask me what is what , figure it urself, i'll not reply to any pm or mentions....

Code:

//not in cshell , if you can't use CE don't bother urself, if you don't know ASM don't bother either
// if the aob's r outdated tell me to update it , i've tested those couple months ago and still working since 1st xc3 update ...
89 85 E4 FC FF FF FF 77 18
89 9D E0 FC FF FF 8B 8D EC FC FF FF 3B 59 10
FF 75 14 FF 36 FF 55 10 89 45 FC
C6 45 FC 02 8D 85 58 FF FF FF

enjoy fam

make an aob that works on all versions of the game

Originally Posted by 96neko

PS : there's 7 game checks and 9 game dc and 3 AC checks

the code kinda ....
since theres ppls already posting some aob why not sharing mine?
here's some aob's, don't ask me what is what , figure it urself, i'll not reply to any pm or mentions....

Code:

//not in cshell , if you can't use CE don't bother urself, if you don't know ASM don't bother either
// if the aob's r outdated tell me to update it , i've tested those couple months ago and still working since 1st xc3 update ...
89 85 E4 FC FF FF FF 77 18
89 9D E0 FC FF FF 8B 8D EC FC FF FF 3B 59 10
FF 75 14 FF 36 FF 55 10 89 45 FC
C6 45 FC 02 8D 85 58 FF FF FF

enjoy fam

Saving file for future

x3_21_06_18_DUMP_mpgh.net.rar3.2 MB · 172 downloads 2/63 malicious

Download & Thanks

NA

Code:

#define check1 0x1BA228 // aob: 75 ?? 32 ?? 5B 8B ?? ?? ?? ?? ?? #define check2 0x1BA252 // aob: 73 ?? 85 ?? ?? ?? 85 ?? ?? ?? 32 #define check3 0x1BA256 // aob: 7E ?? 85 ?? ?? ?? 32 ?? #define check4 0x1BA25A // aob: 75 ?? 32 ?? E9 ?? ?? ?? ?? 55 #define check5 0x1BA282 // aob: 7E ?? 57 53 E8 ?? ?? ?? ?? #define check6 0x1BA29D // aob: 7E ?? 57 8D ?? ?? ?? 53 51 E8 #define hackDetect_1 0x1BA286 // aob: E8 ?? ?? ?? ?? 83 ?? ?? 8B ?? 85 ?? 8B ?? 89 ?? ?? ?? #define hackDetect_2 0x1BA50B // aob: E8 ?? ?? ?? ?? 8D ?? ?? 83 ?? ?? 89 ?? ?? 8B ?? 2B ?? #define hackDetect_3 0x1BB28B // aob: E8 ?? ?? ?? ?? ?? ?? A1 ?? ?? ?? ?? 83 C0 ?? 83 #define hackDetect_4 0x1BBAD2 // aob: E8 ?? ?? ?? ?? 8B ?? ?? ?? 83 ?? ?? 89 ?? 33 ?? 85 ?? #define hackDetect_5 0x1BBEB3 // aob: E8 ?? ?? ?? ?? 83 ?? ?? 39 ?? ?? ?? ?? ?? 55 #define hackDetect_6 0x1BC03A // aob: E8 ?? ?? ?? ?? 83 ?? ?? 39 ?? ?? ?? ?? ?? 55 XOR EAX, DWORD PTR DS:[ EDX*4 + 0x11AB1A8]

up!!!!!!!!!! status about this??? still working???....

Originally Posted by elements1990

up!!!!!!!!!! status about this??? still working???....

Disconnect bypass is still working for BR. The others are untested.

Similar Threads

Tags for this Thread