SC 4in1 by Qmoainx™

tarafından **Hello EMO** Cuma Ağus. 12, 2011 3:37 am

[QUOTE=qmoainx;4877312]Source Code No Respown,Defuse,Pasang,Invisible Kill

if the base is already detected, you live search its own base, if it can be .... you only live input on turtor below,for the build use DEV C++

for you are confused after getting numbers, maybe this can help you
and live in Edit bit by the way you,and already I also provide security if you dll rename.

Kod:: /* Name: Qmoainx-Project™ Copyright: Copyright © 2002-2011. MPGH/Qmoainx. All rights reserved Date: 12/08/2011 */ #include <windows.h> #include "stdio.h" #include "stdlib.h" //************************************************************************************************************************// LPTSTR Brother = "PointBlank.i3exec"; // Target DWORD dwBase, adrRESPAWN1, adrRESPAWN2, adrDEFUSE, adrSETUP, adrINVICIBLE1, adrINVICIBLE2, adrINVICIBLE3 , CheckProtection; //************************************************************************************************************************// int snHDD (void) { } UCHAR szFileSys[255],szVolNameBuff[255]; DWORD dwMFL,dwSysFlags; DWORD dwSerial; LPCTSTR szHD = "C:\\"; // location HWID //========================Offset=========================// #define No_Respawn 0x3CFF74 // replace as new #define No_Respawn_Map_4vs4 0x3CCE50 // replace as new #define Defuse 0x3C60A2 // replace as new #define Pasang 0x3CFF74 // replace as new #define InvicibleTime 0x3C5CFC // replace as new #define InvicibleTime_4vs4 0x3CCE60 // replace as new #define InvicibleTime_4vs4b 0x3CCE70 // replace as new //=======================================================// //************************************************************************************************************************// //Check Whether the address in the protected ? void InProtectAndModify(DWORD Offset, DWORD Pointer, DWORD Length){ VirtualProtect((int*)Offset, Length, PAGE_EXECUTE_READWRITE, &CheckProtection); // check whether the address they will be locked / protected ? if so, do unprotect RtlMoveMemory((int*)Offset, (const int*)Pointer, Length); // change the address they will be writeable, and do the patch with MEMpatch VirtualProtect((int*)Offset, Length, CheckProtection, &CheckProtection); // TSB protect again address the security guard let me not taxable } // Apply the patch to the memory int MEMhack( BYTE *Offset, BYTE *ByteArray, DWORD Length){ InProtectAndModify((DWORD)Offset , (DWORD)ByteArray , 1); } //************************************************************************************************************************// int Qmoainx (void *adr, void *ptr, int size) { unsigned long CheckProtection; VirtualProtect((int*)adr,size,PAGE_READWRITE, &CheckProtection); RtlMoveMemory((int*)adr,(const int*)ptr,size); VirtualProtect((int*)adr,size,CheckProtection, 0); } //***************************************ByPass HS************************************************************************// int __fastcall QmoainxProtection(void){ return 0; // unhook } //************************************************************************************************************************// DWORD __stdcall ThreadStarter(LPCVOID MCR) { while (1) { QmoainxProtection(); QmoainxProtection(); QmoainxProtection(); QmoainxProtection(); QmoainxProtection(); QmoainxProtection(); QmoainxProtection(); QmoainxProtection(); QmoainxProtection(); QmoainxProtection(); //============================================NO RES,Invisible KILL,No Defuse,No Pasang============================================// if (GetAsyncKeyState(VK_HOME)&1) { MessageBeep(MB_ICONINFORMATION);// time at the push sound Trining DWORD HAMIMGANTENG =(DWORD)GetModuleHandleA("PointBlank.i3exec"); adrRESPAWN1 = QMOGANTENG + (DWORD)No_Respawn; Qmoainx((void *)(adrRESPAWN1),(void*)(PBYTE)"\x00\x00\x00\x00", 4); adrRESPAWN2 = QMOGANTENG + (DWORD)No_Respawn_Map_4vs4; Qmoainx™((void *)(adrRESPAWN2),(void*)(PBYTE)"\x00\x00\x00\x00", 4); adrDEFUSE = QMOGANTENG + (DWORD)Defuse; Qmoainx™((void *)(adrDEFUSE),(void*)(PBYTE)"\x00\x00\x00\x00", 4); adrSETUP = QMOGANTENG + (DWORD)Pasang; Qmoainx™((void *)(adrSETUP),(void*)(PBYTE)"\x00\x00\x00\x00", 4); adrINVICIBLE1 = QMOGANTENG + (DWORD)InvicibleTime; Qmoainx™((void *)(adrINVICIBLE1),(void*)(PBYTE)"\x00\x00\x00\x00", 4); adrINVICIBLE2 = QMOGANTENG + (DWORD)InvicibleTime_4vs4; Qmoainx™((void *)(adrINVICIBLE2),(void*)(PBYTE)"\x00\x00\x00\x00", 4); adrINVICIBLE3 = QMOGANTENG + (DWORD)InvicibleTime_4vs4b; Qmoainx™((void *)(adrINVICIBLE3),(void*)(PBYTE)"\x00\x00\x00\x00", 4); } Sleep(15); } return (0); } BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved ) { switch(dwReason) { case DLL_PROCESS_ATTACH: DisableThreadLibraryCalls(hDll); // if the Hardware ID in the switch to remove the sign : /* behind GetVolume /*GetVolumeInformation(szHD,(LPTSTR)szVolNameBuff,255,&dwSerial, &dwMFL,&dwSysFlags,(LPTSTR)szFileSys,255); if (dwSerial== 1352882290){// Serial Number or your HWID MessageBox (0, "|============•••HWID SUKSES REGISTRASI•••============|"," Qmoainx HWID",MB_ICONINFORMATION) ; }else{ // when HWID accepted MessageBox (0, "|============•••HWID Is Not Registered•••============|","[C]2011 | HWID IS NOT REGISTERED | Qmoainx™ |",MB_ICONWARNING); ExitProcess(0);// if HWID not accepted }//* MessageBox (0," Special For MPGH","MPGH/Qmoainx™", MB_OK); CreateThread(0, 0, (LPTHREAD_START_ROUTINE)ThreadStarter, 0, 0, 0); MessageBox (0,"HAVING FUN","MPGH/Qmoainx™", MB_OK); CreateThread(0, 0, (LPTHREAD_START_ROUTINE)ThreadStarter, 0, 0, 0); break; } char strDLLName [_MAX_PATH]; GetModuleFileName(hDll, strDLLName , _MAX_PATH); if (strstr(strDLLName, "ScarLetZer.dll") <= 0) { // Notice Kalau DLL Sudah di Rename MessageBox(0, "way you rename", "MPGH/Qmoainx™", MB_OK + MB_ICONSTOP ); MessageBox(0, "dont rename ,f#ck you leecher", "MPGH/Qmoainx™", MB_OK + MB_ICONSTOP ); ExitProcess(0);//PB g jalan }

And this is his placement
Pointer to the result of what you can from the CE or Olly and PE
could probably fill in here:

Kod:: //========================Offset=========================// #define No_Respawn 0x3CFF74 // replace as new #define No_Respawn_Map_4vs4 0x3CCE50 // replace as new #define Defuse 0x3C60A2 // replace as new #define Pasang 0x3CFF74 // replace as new #define InvicibleTime 0x3C5CFC // replace as new #define InvicibleTime_4vs4 0x3CCE60 // replace as new #define InvicibleTime_4vs4b 0x3CCE70 // replace as new //=======================================================//

this to you via HWID security dll. (Get Hardware Identifier) :

Kod:: BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved ) { switch(dwReason) { case DLL_PROCESS_ATTACH: DisableThreadLibraryCalls(hDll); // if the Hardware ID in the switch to remove the sign : /* behind GetVolume /*GetVolumeInformation(szHD,(LPTSTR)szVolNameBuff,255,&dwSerial, &dwMFL,&dwSysFlags,(LPTSTR)szFileSys,255); if (dwSerial== 1352882290){// Serial Number or your HWID MessageBox (0, "|============•••HWID SUKSES REGISTRASI•••============|"," Qmoainx HWID",MB_ICONINFORMATION) ; }else{ // when HWID accepted MessageBox (0, "|============•••HWID Is Not Registered•••============|","[C]2011 | HWID IS NOT REGISTERED | Qmoainx™ |",MB_ICONWARNING); ExitProcess(0);// if HWID not accepted

* Respect other people's work
* if you can appreciate the work of someone else then you will get something valuable[/QUOTE]