Codex anti-hack system - V4 (C++ Source code)

=========================================
Codex.dll v4 (C++ Source code) - by VertexBrasil


V4 Anti-hack features:


=========================================


- Easy ON/OFF switch to all features on START.cpp


- Splash Screen on start.


- Hack detect splash screen = english, portuguese, silent, or browser website that register user IP


- Server name easy configuration for all splash messages


- Hack detect Log generation = Gameguard/Log.txt (For configuration purposes only)


=========================================


Load external files:


- Minimizer.dll (Shortcut: F9)


- Glow.dll Mu v97


=========================================


- Protected mxmain.exe serial, version, ip and data using realloc and memoryset.


=========================================


All Functionality programs are included:


- Minimizer.dll
- HTTP and FTP Server side stuff
- Kill Me (Full system working for test only)
- Codex.dll ready to use with some detectors active (English and Portuguese splash)


Applications:


- CRC Generator (portable)
- Dll hooker (portable)
- Dump generator (portable)
- Security packer (portable)
- Handler / GetWindowText (portable)


=========================================


Hack detection:


- WN-Scan - Window Title scan. This one close Game window.
- WN-Close - Same detection as WN-Scan (empty hack database). This one close hack window silently, if can't close hack window, close game.
- CN-Scan - Class window scan close Game window
- CN-Close - Same detection as CN-Scan (empty hack database), this one close Hack window silently, if can't close hack window, close game.
- D-Scan - Dump - Entrypoint + 8 hex Dump
- PID-Scan - Process ID
- H-Scan - Heuristic - Bad Words
- HW-Scan - Heuristic - Windowtext Bad Words, Detect any "bad word" on WindowName, object and parent.
- HC-Scan - Heuristic - Classwindow Bad Words, Detect any "bad word" on WindowClass, detect any "generic" WindowsForms
- HNC-Scan - Heuristic - Bad Words Non-case sensitive
- HT-Scan - Hide tools - Detect generic Hide Tools like Cheat engine, Hide Toolz, etc.
- VM-Scan - Virtual memory - Detect virtual memory code changes
=========================================


Speed detection:
- ST-Scan - Detect game speed and system freeze by Tickcount
- SP-Scan - Detect game speed by hardware performance
=========================================


Injection:
- I-Scan - Detect dll injection using dll illegal names blacklist
- API Injection protection - Silently detector, protect API entry from code injection. [Don't work for some applications, including MU Online main.exe]
- Delete ModuleHandle - Silently detector, delete ModuleHandle after loading, protect from code injection. [Don't work for some applications, including MU Online main.exe]
=========================================


Anti-Kill:
- Launcher / Main active protection - Uses your launcher to protect system from kill or freeze
- AKS-Scan - Protect system from kill by Scanner count
- AKT-Scan - Protect system from kill or inject code by process thread count. [Don't work for some applications, including MU Online main.exe. Don't work with some detectors active]
- Rebuild main data - Allow destroy Main.exe hexadecimal data sections and rebuild it again on virtual memory with Memset. [Main don't work without Codex.dll]
- Main.exe one single instance - If Launcher / Main active protection are active, just one main instance are alowed at time.
=========================================


Ban:
- Hardware Ban (FTP) - Server side blacklist that ban Users hardware: Mac adress, hard drive serial, computer name or computer user name
- Hack detection log file upload (FTP) - Upload file when size are more than "x" lines
- Server Ban (PHP) - Server side protection, ban user account or character using SQL database. Protect Anti-Hack from bypass or kill process [Mu Server "ConnectStat" need to work withowt bugs]
=========================================


Files protection:
- L-Scan - Launcher alwais ON check
- FN-Scan - File name Scan - Check file folder names existence and check file Handler for dlls (Launcher/Codex) and exe files (Main/Launcher) Game only start with correct name.
- CRC-Scan - CRC files scan protection:
-Launcher.exe
-Protect.bmp file
-Player.bmd
-WebZenLogo.OZJ
-Terrain 1 to 7


=========================================


Tanks to:


f1x = Dump codes
Suzana ADM = Heuristic codes
ARIES (Dark Crow) = HeuristicNC codes


RaGEZONE - MMO development community
RaGEZONE foruns users




=========================================


Download Codex V4:
https://www.youtube.com/watch?v=y55_Mg7VQOw

https://www.youtube.com/watch?v=qRYPEVbhDS8
I have a problem , How can i fix?

Anti-Kill
Game Over And Close

First thing, disable this message on START.cpp adding lines intersection: this way:

Code:

---

carrega.Log_Txt_Hack    = 1;  // On/Off = Creates a hack log ("GameGuard/Log.txt")

//if (carrega.Log_Txt_Hack == 1){
//MessageBoxA(NULL,"Public HACK DETECTION LOG are active in START.cpp!\n\nWARNING! .....

---

This is just an alert for the first start, it causes i time delay on Main.exe, i think this is your problem.

If this don't work, try to find problem using lines intersection, add and remove then, also, try to start detectors one by one, from bottom to top utill find problem.

Try to get original files, and start from this. Also, start detectors one by one, make configuration step by step, if you have some problem you will know is there in that place you have started.

If someone are having problems with windows text names on fake files, i think a good idea enable this lines (removing lines intersection) on START.cpp, do it for both files, Codex and Launcher:

Launcher:

Code:

---

string title = _T("Launcher");
SetConsoleTitle(title.c_str());

---

Codex:

Code:

---

//string title = _T("Mxmain"); 
//SetConsoleTitle(title.c_str());



---

This will set window text name for fake files. But don't forget to disable that before configuration, Game Main and Launcher have your own window text names, this are just for fake files.

I trying for this But still not fix and i still another trying

I will try to help you grim

Thanks I'll be waiting

Detecta_Heuristica_Win.cpp
Detecta_Heuristica_Class.cpp

Two new fucking crazy detectors ! ! ! !

- HW-Scan - Heuristic - Windowtext Bad Words:
Detect any "bad word (full or partial)" on WindowName, object and parent.

- HC-Scan - Heuristic - Classwindow Bad Words:
Detect any "bad word (full or partial)" on WindowClass, detect any "generic" WindowsForms

This detectors are realy awesome.

Link updated ! ! ! !

Support RF Online ?

Interview, i think there is no problem. A dll file can be hooked in any windows aplication, and also, you can easy turn on and off all features Make any code changes you wish and add your own hack database.

- - - Updated - - -

Someone try to use Virtual memory protect to block [Mu graphical Speed]?

This feature (Virtual Memory Protection) are made to do that... watch video tutorial, are the same thing!

Replace Main.exe serial, version and IP with memset
https://www.youtube.com/watch?v=Y0MjSu2s3oo
or
Protect Codex.dll from unload / break
https://www.youtube.com/watch?v=hKRRLfeJKYQ

I don't have any client where this cheat works to get buffer value for you. But is so simple to do.

START.cpp

Code:

---

carrega.Virtual_Memory_Protect        = 1;

---

Detecta_Virtual_Memory.cpp

Code:

---

(*(unsigned short*)0x4E9B6E != xxxxx)){ //buffer

---

To easy find adrees to get buffer value to protect:

Start Main.exe > Start HxD.exe > open Main.exe (HxD virtual memory) > ctrl+F (search) > ctrl+G (Go to...) >> 004E9B6E >> buffer

can you please me how to get virtual memory of this? Attachment 150582
then what to change in source thanks

i don't understand what you mean. You wanto to block this file?

I got that error on this file: MFC71.DLL is missing from your computer.

Quote:

---

Originally Posted by Cogito Ergo Sum

i don't understand what you mean. You wanto to block this file?

I got that error on this file: MFC71.DLL is missing from your computer.

---

I want to hex this file and make it as a sample program..how do i get virtual memory of that file

Please Help this error

[IMG]http://i.imgur.com/rTzEzNm.jpg?1[/IMG]

Please Help this error

Disable all detectors, enable aks-scan, start detectors one by one untill find problem.

You can use this codes below on Detecta_AntiKill_Scans.cpp with mxmain fake to find problem

removeve: /* */

Code:

---

cout << "DAka1:            "<<DAka1<<endl;   
    cout << "DAkb1:            "<<DAkb1<<endl;
    cout << "DKill_t1:          "<<DKill_t1<<endl;
    cout << "CloseClas1:        "<<CloseClas1<<endl;
    cout << "CloseWin1:        "<<CloseWin1<<endl;
    cout << "DClass1:          "<<DClass1<<endl;
    cout << "DDump1:            "<<DDump1<<endl;
    cout << "DHeuri1:          "<<DHeuri1<<endl;
    cout << "DHeuriWin1:        "<<DHeuriWin1<<endl;
    cout << "DHeuriNC1:        "<<DHeuriNC1<<endl; 
    cout << "DHeuriClass1:      "<<DHeuriClass1<<endl;
    cout << "DHide1:            "<<DHide1<<endl;
    cout << "DInject1:          "<<DInject1<<endl;
    cout << "Dname1:            "<<Dname1<<endl;
    cout << "DProcID1:          "<<DProcID1<<endl;
    cout << "DSpeed1:          "<<DSpeed1<<endl;
    cout << "DWin1:            "<<DWin1<<endl;
    cout << "DHard1:            "<<DHard1<<endl;
    cout << "DLauncher1:        "<<DLauncher1<<endl;
    cout << "DBan1:            "<<DBan1<<endl;
    cout << "DVirtualM1:        "<<DVirtualM1<<endl;
    cout << "DSPerf1:          "<<DSPerf1<<endl;
    cout << "DAntiInject1:      "<<DAntiInject1<<endl;
    cout << "DVirtualMLauncher1:"<<DVirtualMLauncher1<<endl;   
    cout << "DTxtFileSize1:    "<<DTxtFileSize1<<endl;
    cout << "Dpipe1:              "<<Dpipe1<<endl;
    cout <<"AntiKill Scans = Antikill: "<<Antikill<<"  Soma: "<<Soma<<endl<<endl; */

---

- - - Updated - - -

Send me yourr: CODEX_V4 DLL and LAUNCHER_V4 DLLGrim, i will try to run with your configurations, remove ipch and debug folder content to reduce size

problem Is My Custom Source Code
My Code Remove and Work! Thanks