why base detect!!

#include <windows.h>
#include <stdio.h>
#include <fstream>
#include "hXOR.h"

#define ModuleCShell /*CShell.dll*/XorStr<0xC8,11,0x0AA51C99>("\x8B\x9A\xA2\xAE\xA0\x A1\xE0\xAB\xBC\xBD"+0x0AA51C99).s
#define ModuleCLient /*ClientFX.fxd*/XorStr<0x10,13,0xCBD28674>("\x53\x7D\x7B\x76\x7A\x 61\x50\x4F\x36\x7F\x62\x7F"+0xCBD28674).s

DWORD WallHackArray,SeeGhostPoint,WallHackPoint;
int SeeGhost=1;

bool Compare(const BYTE* pData, const BYTE* bMaskara, const char* szMaskara)
{
for(;*szMaskara;++szMaskara,++pData,++bMaskara)
if(*szMaskara=='x' && *pData!=*bMaskara )
return false;
return (*szMaskara) == NULL;
}
DWORD FindPattern(DWORD dwAddress,DWORD dwLen,BYTE *bMask,char * szMask)
{
for (DWORD x = 0; x < dwLen; x++)
if( Compare( ( BYTE * )( dwAddress + x ), bMask, szMask ) )
return ( DWORD )( dwAddress + x );
return 0;
}

VOID CrossfireFunction()
{
if(!WallHackArray)
{
WallHackArray = FindPattern(0x400000,0xFFFFFF,(BYTE *)"\x75\xFF\x83\x0D\xFF\xFF\xFF\xFF\x01\xB8\xFF\xF F\xFF\xFF\xE8","x?xx????xx????x");
WallHackPoint = *(DWORD *)(WallHackArray + 0xA ) + 0xA4 + 0x68;

if(HackWall)
{
*(BYTE *)(WallHackPoint) = 90;
}
else
{
*(BYTE *)(WallHackPoint) = 4;
}
}
}

BOOL IsGameHooked ()
{
if ( GetModuleHandleA(ModuleCShell) != 0 && GetModuleHandleA( ModuleCLient) != 0 )
return true;
return false;
}

UINT WINAPI Hooked( LPVOID )
{
while (!IsGameHooked())
Sleep(250);
while ( true )
{
CrossfireFunction();
}
}

BOOL WINAPI DllMain ( HINSTANCE hDll, DWORD dwReason, LPVOID lpReserved )
{
if (dwReason == DLL_PROCESS_ATTACH)
{
DisableThreadLibraryCalls(hDll);
CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE) Hooked, hDll, NULL, NULL);
}
return TRUE;
}

Credit Base MPGH.net

someone help

Cuz the 28_3 bypass is patched...
Wallhack patched...

And i'm sure you just inject it into cf without protection...

Originally Posted by rabir007

Cuz the 28_3 bypass is patched...
Wallhack patched...

And i'm sure you just inject it into cf without protection...

-.- WallHack isn't patched, Value 90 work fine!

so why detect ?

i not use bypass 28_3.
but just wallhack.

and xtrap detect.

can u help me?

Originally Posted by Astr3Lune

so why detect ?

i not use bypass 28_3.
but just wallhack.

and xtrap detect.

can u help me?

Remove your findpattern and test. They detect your findpattern string and other things. Remove something and test the hack, you will find what they detected! Also, your method of injection could be what is getting detected.

Originally Posted by leech1122

they don't detect findpattern masks !! anyway u can use xor just to be sure !!!

Originally Posted by I2espect

they don't detect findpattern masks !! anyway u can use xor just to be sure !!!

They indeed do detect findpattern strings and mask. But don't take my word for it!

Originally Posted by leech1122

They indeed do detect findpattern strings and mask. But don't take my word for it!

they never detected my findpattern(s)
my base is auto update !!! i use findpattern and it works well without encryption !

Originally Posted by I2espect

they never detected my findpattern(s)
my base is auto update !!! i use findpattern and it works well without encryption !

i think he is taking the findpattern function

same problem detect by xtrap.

now i use this code

#define crossfrie /*crossfire.exe*/XorStr<0xFC,14,0x05D05ECE>("\x9F\x8F\x91\x8C\x73\x 67\x6B\x71\x61\x2B\x63\x7F\x6D"+0x05D05ECE).s

void Wallhack()
{
DWORD SeeGhost1 = FindPattern((DWORD)GetModuleHandleA(crossfrie), 0x2D7000, (BYTE *)"\x75\xFF\x83\x0D\xFF\xFF\xFF\xFF\x01\xB8\xFF\xF F\xFF\xFF\xE8","x?xx????xx????x");
DWORD HackWall = *(DWORD *)(SeeGhost1 + 0xA4) + 0x68;

if(hack1)
{
*(BYTE *)(HackWall) = 68;
}
}

but stay detect man.

i think DLL main already detect.

howq to fix man please help.

Xtrap detect wall hack i think !!
anyway try an empty dll ,,, simple dll main with msg or anything like that !!

so wich wallhack code undetect?

and i need new dll main .

help please

Originally Posted by Astr3Lune

so wich wallhack code undetect?

and i need new dll main .

help please

wallhack use byte 90 work

BOOL WINAPI DllMain( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls( hDll );
if( dwReason == DLL_PROCESS_ATTACH )
{
Beep (5000,500);
//CreateThread(0, 0, (LPTHREAD_START_ROUTINE)Fuck, 0, 0, 0);
_beginthreadex(0, 0,

, 0, 0, 0);
}
return TRUE;
}
work ^ , do not use messagebox

Originally Posted by sabatbatu

wallhack use byte 90 work

BOOL WINAPI DllMain( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls( hDll );
if( dwReason == DLL_PROCESS_ATTACH )
{
Beep (5000,500);
//CreateThread(0, 0, (LPTHREAD_START_ROUTINE)Fuck, 0, 0, 0);
_beginthreadex(0, 0,, 0, 0, 0);
}
return TRUE;
}
work ^ , do not use messagebox

Indonesia = ane dh coba kek gtu. tapi sama aja detect xtrap bro.
emang source ente tembus?

english = same problem detected by xtrap

Originally Posted by Astr3Lune

Indonesia = ane dh coba kek gtu. tapi sama aja detect xtrap bro.
emang source ente tembus?

english = same problem detected by xtrap

ane pkk injector extreme , fiturnya wallhack itu aja sih
base yg dulu mash work kok

english : i dont know

why base detect!!

Post a Reply

Similar Threads

Tags for this Thread