Jump to content

dEvilKinG

Members
  • Posts

    571
  • Joined

  • Last visited

  • Feedback

    0%

Everything posted by dEvilKinG

  1. Hydro blast for bishop in oly and pwns
  2. Amazing :) Good job really helpful for a lot people ..
  3. When it will be ready:)
  4. add me in msn. i can do it. devilking@**.com
  5. I don't like it so much.. :/
  6. Hello people, i just started working with l2j server files and i have a suggestion for you.. I was working on MU Online and we used a way to block "hackers", we coded a dll with Bump codes of cheats and the antihack if detects the "illegal prog" just close l2.exe and the hack. The dump code can be taken with a debuger.. E.G. ollydbg {0x40970E, {0x68, 0xB4, 0x98, 0x40, 0x00, 0x64, 0xA1, 0x00, 0x00, 0x00, 0x00, 0x50, 0x64, 0x89, 0x25, 0x00, 0x00, 0x00, 0x00, 0x83, 0xEC, 0x68, 0x53, 0x56, 0x57, 0x89, 0x65, 0xE8, 0x33, 0xDB, 0x89, 0x5D}}, // Speed Gear 5 Take a look // ---------------------------------------------------- // File name: AntiHack.cpp // Date: 2008-06-26 // Author: f1x / f1ksiu@hotmail.com // ---------------------------------------------------- #ifndef PDC_ANTIHACK_H #define PDC_ANTIHACK_H #define MAX_DUMP_OFFSETS 2 #define MAX_DUMP_SIZE 32 #define MAX_PROCESS_DUMP 2 typedef struct ANITHACK_PROCDUMP { unsigned int m_aOffset; unsigned char m_aMemDump[MAX_DUMP_SIZE]; } *PANITHACK_PROCDUMP; extern ANITHACK_PROCDUMP g_ProcessesDumps[MAX_PROCESS_DUMP]; void SystemProcessesScan(); bool ScanProcessMemory(HANDLE hProcess); #endif //PDC_ANTIHACK_H //--------------------------------------------------------------------------------------------- // ---------------------------------------------------- // File name: AntiHack.cpp // Date: 2008-06-26 // Author: f1x / f1ksiu@hotmail.com // ---------------------------------------------------- #include "stdafx.h" #include "AntiHack.h" #include <windows.h> #include <tlhelp32.h> #include <stdlib.h> ANITHACK_PROCDUMP g_ProcessesDumps[MAX_PROCESS_DUMP] = { {0x40970E, {0x68, 0xB4, 0x98, 0x40, 0x00, 0x64, 0xA1, 0x00, 0x00, 0x00, 0x00, 0x50, 0x64, 0x89, 0x25, 0x00, 0x00, 0x00, 0x00, 0x83, 0xEC, 0x68, 0x53, 0x56, 0x57, 0x89, 0x65, 0xE8, 0x33, 0xDB, 0x89, 0x5D}}, // Speed Gear 5 }; void SystemProcessesScan() { HANDLE hProcessSnap = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0); if(hProcessSnap != INVALID_HANDLE_VALUE) { PROCESSENTRY32 pe32; pe32.dwSize = sizeof(PROCESSENTRY32); if(Process32First(hProcessSnap, &pe32)) { do { HANDLE hProcess = OpenProcess(PROCESS_ALL_ACCESS, FALSE, pe32.th32ProcessID); if(hProcess != NULL) { if(ScanProcessMemory(hProcess)) { MessageBoxA(0, "Found hack software in your system.\n\nHint: Close all illegal programs and run application again.", "Software guard", MB_OK | MB_ICONSTOP); ExitProcess(0); } } } while(Process32Next(hProcessSnap, &pe32)); } } CloseHandle(hProcessSnap); } bool ScanProcessMemory(HANDLE hProcess) { for(int i = 0; i < MAX_PROCESS_DUMP; i++) { char aTmpBuffer[MAX_DUMP_SIZE]; SIZE_T aBytesRead = 0; ReadProcessMemory(hProcess, (LPCVOID)g_ProcessesDumps[i].m_aOffset, (LPVOID)aTmpBuffer, sizeof(aTmpBuffer), &aBytesRead); if(memcmp(aTmpBuffer, g_ProcessesDumps[i].m_aMemDump, MAX_DUMP_SIZE) == 0) { return true; break; } } return false; } So when this will detect running speedgear 5 it will close the l2.exe.. I don't have VC++ knowledge so i cannot develop it for l2... *** THIS CODE IS FOR MU ONLINE Client so you will have to change some little variables. *** FULL ANTIHACK SOURCE EDIT: Changed [sUGGESTION] Tag to [Developement]
  7. Not much worked template.. Its a template of rockettheme.com(Premium Template, Illegal use), with rotated backround of style 3 and added one render of lineage.. Anyway, it looks good.
  8. i dont like it much, but good try
  9. I dont like them all but most of them good job :)
  10. LoL, haha amazing :D
  11. You can't even log with walker, or l2net but i think its something with the l2.exe :/
  12. re ston L2 ownage trww dc.. ti na kanw?
×
×
  • Create New...

AdBlock Extension Detected!

Our website is made possible by displaying online advertisements to our members.

Please disable AdBlock browser extension first, to be able to use our community.

I've Disabled AdBlock