Languages Used: Visual C#.
Type: Server > Client Application.
.NET: 2.0.
Source: Open Source.
Free: Yes.![[GM]Terrorian](/data/avatars/m/492/492356.jpg?1680380605){kind=avatar}
unit uAntiDump;
interface
uses
Winapi.Windows;
procedure FuncInArray; assembler;
procedure WriteShit(MyFunction: Pointer; SizeOfFunction: Cardinal);
implementation
procedure FuncInArray; assembler;
asm
DB $90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90
DB $90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90
DB $90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90
end;
procedure WriteShit(MyFunction: Pointer; SizeOfFunction: Cardinal);
const
instrIncDec : Array[0 .. 3] of Byte = ($40, $48, $43, $4B);
instrMovExx : Array[0 .. 3] of Byte = ($8B, $C0, $8B, $DB);
instrPUSHPOP: Array[0 .. 3] of Byte = ($50, $58, $53, $5B);
instrAntiJMP: Array[0 .. 3] of Byte = ($EB, $00, $8A, $C0);
instrOrOr : Array[0 .. 3] of Byte = ($09, $C9, $09, $D2);
var
OldProtect: Cardinal;
i: Cardinal;
begin
if VirtualProtect(MyFunction, SizeOfFunction, PAGE_EXECUTE_READWRITE, OldProtect) then
begin
for i := 0 to (SizeOfFunction div 4) -1 Do
begin
case Random(4) of
0: PDWORD(Pointer(DWORD(MyFunction) + (i * 4)))^ := PDWORD(@instrIncDec)^;
1: PDWORD(Pointer(DWORD(MyFunction) + (i * 4)))^ := PDWORD(@instrMovExx)^;
2: PDWORD(Pointer(DWORD(MyFunction) + (i * 4)))^ := PDWORD(@instrPUSHPOP)^;
3: PDWORD(Pointer(DWORD(MyFunction) + (i * 4)))^ := PDWORD(@instrAntiJMP)^;
4: PDWORD(Pointer(DWORD(MyFunction) + (i * 4)))^ := PDWORD(@instrOrOr)^;
end;
end;
VirtualProtect(MyFunction, SizeOfFunction, OldProtect, OldProtect)
end;
end;
end.
what a fail, ppl just stuck on memory dumb ^^
i dont remeber who coded it, but i think its DeepBlueSeeCode:unit uAntiDump; interface uses Winapi.Windows; procedure FuncInArray; assembler; procedure WriteShit(MyFunction: Pointer; SizeOfFunction: Cardinal); implementation procedure FuncInArray; assembler; asm DB $90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90 DB $90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90 DB $90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90,$90 end; procedure WriteShit(MyFunction: Pointer; SizeOfFunction: Cardinal); const instrIncDec : Array[0 .. 3] of Byte = ($40, $48, $43, $4B); instrMovExx : Array[0 .. 3] of Byte = ($8B, $C0, $8B, $DB); instrPUSHPOP: Array[0 .. 3] of Byte = ($50, $58, $53, $5B); instrAntiJMP: Array[0 .. 3] of Byte = ($EB, $00, $8A, $C0); instrOrOr : Array[0 .. 3] of Byte = ($09, $C9, $09, $D2); var OldProtect: Cardinal; i: Cardinal; begin if VirtualProtect(MyFunction, SizeOfFunction, PAGE_EXECUTE_READWRITE, OldProtect) then begin for i := 0 to (SizeOfFunction div 4) -1 Do begin case Random(4) of 0: PDWORD(Pointer(DWORD(MyFunction) + (i * 4)))^ := PDWORD(@instrIncDec)^; 1: PDWORD(Pointer(DWORD(MyFunction) + (i * 4)))^ := PDWORD(@instrMovExx)^; 2: PDWORD(Pointer(DWORD(MyFunction) + (i * 4)))^ := PDWORD(@instrPUSHPOP)^; 3: PDWORD(Pointer(DWORD(MyFunction) + (i * 4)))^ := PDWORD(@instrAntiJMP)^; 4: PDWORD(Pointer(DWORD(MyFunction) + (i * 4)))^ := PDWORD(@instrOrOr)^; end; end; VirtualProtect(MyFunction, SizeOfFunction, OldProtect, OldProtect) end; end; end.
This shity 5 lines function bypass your anticheat - i meant add junk code in main cheat func and your shity AH will never, ever will detect cheat.. shame
even PB and GG uses memory signature scaners, its like the best and easy way to block all pub cheats
<setting name="MyCheckFileList" serializeAs="Xml">
<value>
<ArrayOfString xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<string>test.txt,0,323244</string>
<string>test1.txt,12,45343</string>
</ArrayOfString>
</value>
</setting>[Process Memory Write Settings Preview]
<setting name="MyProcMemList" serializeAs="Xml">
<value>
<ArrayOfString xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<string>proc_name:offset1,offset1_val:offset2,offset2_val:Offset3_offset,offset3_val</string>
</ArrayOfString>
</value>
</setting>- Cheat list can be configured from file<string>proc_name
<setting name="MyCheatList" serializeAs="Xml">
<value>
<ArrayOfString xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<string>NotePad,01007395,1801204204204204204106112104830</string>
</ArrayOfString>
</value>
</setting>- Some other options added...
//////////////////////////////////////////////////////////////////
// Blackwolf Antihack Premium Release //
// Version 1.2.x Stable //
// Author TRSi Development //
//////////////////////////////////////////////////////////////////
[ INFO ]
:: Setup
Server will automaticly list on any available IP address on Server, you need to configurate ports and you are ready to go!
[ FEATURES ]
:: Overall
Application is well designed to avoid crashed and deadlock's or similar exceptions.
Programming Languages used: Visual C# 2008 & Visual C++ 2008.
Application requires .NET Framework 2.0 installed on Server and Client Computer.
Server and Client is optimised run on x86 systems, but x64 optimised build is also available.
This antihack grants server owner very big control over the clients computer.
The Application itself is very good protected from debuging, cracking etc.
:: Advanced
-- My Banned IP List --
About: This is simple but powerfull system to prevent banned user ip addreses connect to server.
Configuration: <IP Address,Reason for Ban>.
| |-> Enter reason why he is banned. [ If value Is 'Nothing' then no reason will be displayed! ]
|-> Client IP Address to Ban
-- My Process Write List --
About: With this feature you can manage clients proceses, like edit running proceses memory, for example you can edit 'main.exe' to your server ip address or serial, you choose whatever you want.
Configuration: <Process Name,Offset,Bytes>
| | |-> Bytes to Write to Selected Proccess Offset.
| |-> Process Offset you Want to Edit;
|-> The Running Procces Name you Want to Edit;
-- My File Check List --
About: Using File Check feature you can check every file size on clients computer if it modified or not.
Configuration: <File Location,Size,Checksum>
| | |-> Orginal File checksum;
| |-> Orginal file size;
|-> File Location to check;
|-> Ex: 'c://Client//Main.exe' or './Main.exe' and '../OtherFile'.
| | |-> Search one folder backward where antihack is run.
| |-> Search in same folder Where Antihack Client is Run.
|-> Full file Location.
-- My Cheat List --
About: This scans entire list of clients running proccess and compares their signature to servers database.
Configuration: <Name,Address,Bytes>
| | |-> Cheat Application signature;
| |-> Cheat Application address;
|-> The Cheat Application name;
-- My Hide Process List --
About: Hides Selected process from user and other applications.
Configuration: <Name>
|-> Process Name;
Note: Each Database support over 32000 items.
:: Basic
- Many Configuration Settings to Control your Server as YOU like.
- Database Editor.
- Generate/Add/Edit/Remove items from databases.
- Graphic User Interface.
- Resend Database to All Online Clients.
- Send Message to All Online Clients.
- Send MessageBox Message to All Online Clients.
- Dissconect All online Clients.
- Save Log file.
- Update database without shutting down antihack server.
:: Future Implementations
- United Online Database
- Master Server
