Jump to content

Recommended Posts

Posted

Recently, I have been playing Counter-Strike 1.6 in server that is protected with the following anticheat "Flex Anticheat". This anticheat is written in Delphi 7. Surprised It is something like Cheating-Death ... What does it have and what does it do:

- it has an .exe file called Flex Anticheat Loader, which checks for updates in a site, and also loads an .ex file. [Flex Anticheat Loader.exe is packed/compressed with the UPX packer, so I unpacked it successfully, but actually I don't need the .exe file]. Shocked

- it has an .ex file called Flex Anticheat. That file is packed/compressed with EXECryptor 2.2.x - 2.3.x. It also has a self-check, so if you corrupt it, you'll get and error, that says: "File corrupted!" Embarassed

- it has a file called flex.qrs [in it, you can see the current version of the anticheat].

- Flex Anticheat generates an .ini file, which contains the path to your gamefolder, and also it contains the parametres, related to hl.exe.

 

The game must be started through the anticheat!  :'(  :(

 

What does it do:

The anticheat generates a new hl.exe file like flexhl.exe [using a .rc to .res ]and then renames it to random.exe. [that means that each time you start Flex Anticheat, your Counter-Strike 1.6's hl.exe will be renamed to a different name, with ending .exe].

Now the hard things begin:

If you try to inject a .dll with any injector in the new proccess, called random.exe [for example 139248345893242893131892.exe], it detects your cheat and says: "Code Error" and then terminates your game, because it detects the "changes" / "hacking function" that are made in your system dll files.

There was a way to inject the cheat engine wallhack table, using procexp.exe and cheat engine, and then killing several threads in the Counter-Strike 1.6's process, using procexp.exe. Very Happy But now, new features were added...  :( ... all the hacking tools were detected [of course they were detected because of their hacking functions...], so when you try to use a hacking tool [for example cheat engine 5.4 by dark byte, you receive an error which says: "Hacking tool detected" and then the anticheat and the game terminate...

 

Question So is there a way to

- unpack the .ex file?

- remove the check for "hacking tools".

- stop renaming the game to random.exe

- patch the functions of checking for cheats [glBegin and glDepthTest], so playing with cheats will be ok...  :D

 

I will give a link, so all of you will be able to download it, and try to hack it/or hack it [i hope] !!!  ;)

 

http://rapidshare.com/files/201595444/FlexAnticheat1.01.0Installer.exe

 

Posted

......so when you try to use a hacking tool [for example cheat engine 5.4 by dark byte, you receive an error which says: "Hacking tool detected" and then the anticheat and the game terminate... :O Other way?

  • 7 years later...
Posted

Recently, I have been playing Counter-Strike 1.6 in server that is protected with the following anticheat "Flex Anticheat". This anticheat is written in Delphi 7. Surprised It is something like Cheating-Death ... What does it have and what does it do:

- it has an .exe file called Flex Anticheat Loader, which checks for updates in a site, and also loads an .ex file. [Flex Anticheat Loader.exe is packed/compressed with the UPX packer, so I unpacked it successfully, but actually I don't need the .exe file]. Shocked

- it has an .ex file called Flex Anticheat. That file is packed/compressed with EXECryptor 2.2.x - 2.3.x. It also has a self-check, so if you corrupt it, you'll get and error, that says: "File corrupted!" Embarassed

- it has a file called flex.qrs [in it, you can see the current version of the anticheat].

- Flex Anticheat generates an .ini file, which contains the path to your gamefolder, and also it contains the parametres, related to hl.exe.

 

The game must be started through the anticheat!  :'(  :(

 

What does it do:

The anticheat generates a new hl.exe file like flexhl.exe [using a .rc to .res ]and then renames it to random.exe. [that means that each time you start Flex Anticheat, your Counter-Strike 1.6's hl.exe will be renamed to a different name, with ending .exe].

Now the hard things begin:

If you try to inject a .dll with any injector in the new proccess, called random.exe [for example 139248345893242893131892.exe], it detects your cheat and says: "Code Error" and then terminates your game, because it detects the "changes" / "hacking function" that are made in your system dll files.

There was a way to inject the cheat engine wallhack table, using procexp.exe and cheat engine, and then killing several threads in the Counter-Strike 1.6's process, using procexp.exe. Very Happy But now, new features were added...  :( ... all the hacking tools were detected [of course they were detected because of their hacking functions...], so when you try to use a hacking tool [for example cheat engine 5.4 by dark byte, you receive an error which says: "Hacking tool detected" and then the anticheat and the game terminate...

 

Question So is there a way to

- unpack the .ex file?

- remove the check for "hacking tools".

- stop renaming the game to random.exe

- patch the functions of checking for cheats [glBegin and glDepthTest], so playing with cheats will be ok...  :D

 

I will give a link, so all of you will be able to download it, and try to hack it/or hack it [i hope] !!!  ;)

 

http://rapidshare.com/files/201595444/FlexAnticheat1.01.0Installer.exe

:-\

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



  • Posts

    • I am selling my l2jeternity high five (all inclusive option $300) license+daily $50(mission) mod, autofarm, this is a very good and stable H5 assembly on market if you know how to run it properly, project developer LordWinter also a very passionate person and active in daily basis, because I am no longer using it, selling this out to put in good use for new h5 l2project. I am selling this for $180, pm me for details/offer. thanks *Sale and rebinding with the consent of the developer LordWinter payment option : paypal/crypto telegram: @arcadin77  
    • Hello friends, good morning, good afternoon or good evening, depending on the time you are seeing this! I have been trying to decompile and compile again with only the classes that I want LineageEffect.u for a few days now, but I have not been successful. Could someone help me by clearing up some doubts about how I can do this work and be successful?!
    • **INTERLUDE REMASTERED** Moonland is a server that's been running for about three years without wipe, and they don't plan on wiping it anytime soon. I'm selling my items or even the account due to not having much time to play anymore. I'm selling only for $$$. Not going to disclose my nickname in the server, but here are some of the items: Lvl 5 equipment for both mage and fighter +100 mage pvp set 2mastery jewels for fighter, 2 for mage, blessed antharas, blessed queen ant, ring of fallen angel, earring of fafurion. 1k + col, VIP cosmetics for armor, agathion and weapons(duals + mage wep)   I'm only selling for real money via paypal or cs2 skins so don't offer me anything else.
    • ➡ Discount for your purchase: MAY2025 (10% discount) ➡ Our Online Shop: https://socnet.store  ➡ Our SMM-Boosting Panel: https://socnet.pro  ➡ Telegram Shop Bot: https://socnet.shop  ➡ Telegram Support: https://t.me/solomon_bog  ➡ Telegram Channel: https://t.me/accsforyou_shop  ➡ Discord Support: @AllSocialNetworksShop  ➡ Discord Server: https://discord.gg/y9AStFFsrh  ➡ WhatsApp Support: https://wa.me/79051904467 ➡ WhatsApp Channel: https://whatsapp.com/channel/0029Vau0CMX002TGkD4uHa2n  ➡ Email Support: solomonbog@socnet.store 
  • Topics

×
×
  • Create New...