USF String Bypass

I made this an hour ago im looking for new spots to reverse in the usf client.
It is a large assembly patch which should replace all the blacklisted strings.

(example written in C++)
(Client patch in asm->hex)

Code:

BOOL g_bActive = false; BYTE g_bStringScan_Original[0x148] = { 0x6F, 0x6C, 0x6C, 0x79, 0x64, 0x62, 0x67, 0x2E, 0x65, 0x78, 0x65, 0x00, 0x6D, 0x6C, 0x62, 0x2E, 0x65, 0x78, 0x65, 0x00, 0x6D, 0x6C, 0x65, 0x6E, 0x67, 0x69, 0x6E, 0x65, 0x2E, 0x65, 0x78, 0x65, 0x00, 0x00, 0x00, 0x00, 0x7A, 0x69, 0x64, 0x20, 0x65, 0x6E, 0x67, 0x69, 0x6E, 0x65, 0x2E, 0x65, 0x78, 0x65, 0x00, 0x00, 0x72, 0x79, 0x75, 0x20, 0x65, 0x6E, 0x67, 0x69, 0x6E, 0x65, 0x2E, 0x65, 0x78, 0x65, 0x00, 0x00, 0x73, 0x6F, 0x72, 0x61, 0x65, 0x6E, 0x67, 0x69, 0x6E, 0x65, 0x2E, 0x65, 0x78, 0x65, 0x00, 0x00, 0x73, 0x79, 0x73, 0x74, 0x65, 0x6D, 0x63, 0x61, 0x31, 0x31, 0x73, 0x69, 0x67, 0x6E, 0x61, 0x6C, 0x2E, 0x65, 0x78, 0x65, 0x00, 0x00, 0x00, 0x00, 0x73, 0x79, 0x73, 0x74, 0x65, 0x6D, 0x72, 0x65, 0x74, 0x72, 0x69, 0x65, 0x76, 0x65, 0x72, 0x2E, 0x65, 0x78, 0x65, 0x00, 0x6B, 0x65, 0x72, 0x6E, 0x65, 0x6C, 0x6D, 0x6F, 0x64, 0x75, 0x6C, 0x65, 0x75, 0x6E, 0x6C, 0x6F, 0x61, 0x64, 0x65, 0x72, 0x2E, 0x65, 0x78, 0x65, 0x00, 0x00, 0x00, 0x00, 0x65, 0x6D, 0x70, 0x74, 0x79, 0x70, 0x72, 0x6F, 0x63, 0x65, 0x73, 0x73, 0x2E, 0x65, 0x78, 0x65, 0x00, 0x00, 0x00, 0x00, 0x61, 0x62, 0x79, 0x73, 0x73, 0x77, 0x73, 0x2E, 0x65, 0x78, 0x65, 0x00, 0x6D, 0x6F, 0x6F, 0x6E, 0x6C, 0x69, 0x67, 0x68, 0x74, 0x65, 0x6E, 0x67, 0x69, 0x6E, 0x65, 0x2E, 0x65, 0x78, 0x65, 0x00, 0x53, 0x46, 0x48, 0x2E, 0x65, 0x78, 0x65, 0x00, 0x43, 0x68, 0x65, 0x61, 0x74, 0x20, 0x45, 0x6E, 0x67, 0x69, 0x6E, 0x65, 0x20, 0x35, 0x2E, 0x32, 0x20, 0x43, 0x6C, 0x69, 0x65, 0x6E, 0x74, 0x00, 0x43, 0x68, 0x65, 0x61, 0x74, 0x20, 0x45, 0x6E, 0x67, 0x69, 0x6E, 0x65, 0x20, 0x35, 0x2E, 0x32, 0x20, 0x53, 0x65, 0x72, 0x76, 0x65, 0x72, 0x00, 0x43, 0x68, 0x65, 0x61, 0x74, 0x20, 0x45, 0x6E, 0x67, 0x69, 0x6E, 0x65, 0x20, 0x35, 0x2E, 0x33, 0x00, 0x00, 0x00, 0x00, 0x41, 0x64, 0x76, 0x61, 0x6E, 0x63, 0x65, 0x64, 0x20, 0x52, 0x65, 0x64, 0x44, 0x6F, 0x74, 0x20, 0x44, 0x72, 0x61, 0x77, 0x69, 0x6E, 0x67, 0x20, 0x53, 0x79, 0x73, 0x74, 0x65, 0x6D, 0x00, 0x00, 0x49, 0x50, 0x32, 0x00, 0x73, 0x65, 0x73, 0x73, 0x69, 0x6F, 0x6E, 0x20 }; BYTE g_bStringScan_Bypass[0x148]; StringScan_Patch(DWORD *pStringScan) { for( int i = 0; i < sizeof(g_bStringScan_Original); i++ ) { if (g_bStringScan_Original[i] != 0 && g_bStringScan_Original[i] != 0x65) { g_bStringScan_Bypass[i] = 0x78; } else { g_bStringScan_Bypass[i] = g_bStringScan_Original[i]; } } memcpy(pStringScan, g_bStringScan_Bypass, sizeof(g_bStringScan_Bypass) ); g_bActive = true; } StringScan_UnPatch(DWORD *pStringScan) { memcpy(pStringScan, g_bStringScan_Original, sizeof(g_bStringScan_Original) ); g_bActive = false; }

Code:

#define STARTOFSTRINGS 0x9C74F8

Code:

Ollydbg Cheatengine 5.2 and 6.0 (if 6.0 dont work change it to 5.3) kernelmoduleloader Advanced Red Dot Drawing System mlengine.exe zidengine.exe ryuengine.exe soraengine.exe systemcallsignal.exe systemretrieve.exe SFH.exe moonlightengine.exe

Credits:
GuardiansWild (Banned and Did the most)
Dguard (me)
hackerware12

GuardiansWild
Me
and hackerware12 live close together in Denmark so we plan
if got something for USF Codes

Good work. Nice to see more members contributing on making this sub-forum active again. Keep working hard and your threads will pay off.

Dont i appreciate Thanks?
But thanks too you too guys
Will work hard FOR USF!!

DUDE!!!!!! Stop leeching stuff or give the correct credits this is made by Shad0w_ aka Stickleback aka Crosshatch.
You have no right saying this is yours.

Originally Posted by joered

DUDE!!!!!! Stop leeching stuff or give the correct credits this is made by Shad0w_ aka Stickleback aka Crosshatch.
You have no right saying this is yours.

I didnt Leach this GuardiansWild say what to do so i we make it

He's trying to help people out there by posting and leeching other works....so shame...

Great finds these will be very usefull for making hacks great job

Good Job bro. I thanked u btw.

Its Bytes

Alright to all making claims that he is leeching how about you show some evidence or gtfo? He probably worked hard on this and if you call him a leecher you are just a straight up dick :3 or a troll.

Originally Posted by Unicow

Alright to all making claims that he is leeching how about you show some evidence or gtfo? He probably worked hard on this and if you call him a leecher you are just a straight up dick :3 or a troll.

Enough proof for ya?