llBeastModell

BO3 TU7/TU8 Bypass Plus Cheater

May 15th, 2016
444
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
C++ 3.21 KB | None | 0 0
  1. VOID InitializeRandom()
  2. {
  3. srand(time(NULL));
  4. }
  5. DWORD Random(DWORD Minimum, DWORD Maximum)
  6. {
  7. return rand() % (Maximum - Minimum + 1) + Minimum;
  8. }
  9. DWORD GenerateCRC(DWORD ConsoleID)
  10. {
  11. DWORD _ConsoleID = ConsoleID >> 4;
  12. DWORD CRC, CNT = 12;
  13. while(CNT != 0)
  14. {
  15. CRC += ((_ConsoleID % 10) & 0xF);
  16. _ConsoleID /= 10;
  17. CNT--;
  18. }
  19. return (CRC % 10) & 0xF;
  20. }
  21. VOID GenerateID(PBYTE ConsoleID, DWORD Year, DWORD Month, BYTE M3, BYTE M4, BYTE M5)
  22. {
  23. DWORD Date = ((Month << 12) | (Year << 8) | M3) & 0xFFFFF;
  24. *ConsoleID += Date << 20;
  25. *ConsoleID += M4 << 12;
  26. *ConsoleID += M5 << 4;
  27. *ConsoleID += GenerateCRC(*ConsoleID);
  28. }
  29. VOID XeKeysGetKeyHook(WORD KeyID, PBYTE pbKey, DWORD cbKey)
  30. {
  31. XeKeysGenerateRandomKey(0x14, pbKey);
  32. }
  33. VOID XeKeysGetConsoleIDHook(PBYTE pbConsoleID, PCHAR szConsoleID)
  34. {
  35. GenerateID(pbConsoleID, Random(2006, 2013), Random(1, 12), Random(0, 255), Random(0, 255), Random(0, 255));
  36. if(szConsoleID != NULL)
  37. { sprintf(szConsoleID, "%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X", pbConsoleID[0], pbConsoleID[1], pbConsoleID[2], pbConsoleID[3], pbConsoleID[4], pbConsoleID[5], pbConsoleID[6], pbConsoleID[7], pbConsoleID[8], pbConsoleID[9]); }
  38. }
  39.  
  40. int XNetXnAddrToMachineIdHook(XNCALLER_TYPE xnc, XNADDR * pxnaddr, ULONGLONG * MachineId)
  41. {
  42. if(XamGetCurrentTitleId() == COD_BLACK_OPS_3)
  43. {
  44. srand((unsigned int)time(0));
  45. *MachineId = 0xFA00000000000000 | (0x2000000 | rand() % 0x7FFFFF);
  46. return 0;
  47. }
  48. return NetDll_XNetXnAddrToMachineId(xnc, pxnaddr, MachineId);
  49. }
  50.  
  51. byte Response[] =
  52. {
  53. 0x46, 0x7C, 0x70, 0xB0,
  54. 0xFC, 0x00, 0x00, 0x00, 0xE6, 0xA5, 0xDD, 0xD1,
  55. 0xF5, 0xD7, 0xDA, 0xF1, 0x46, 0x21, 0x01, 0x10,
  56. 0x00, 0x00, 0x00, 0x00,
  57. 0x00, 0x00, 0x00, 0x00,
  58. 0x08, 0x60,
  59. 0x03,
  60. 0x30, 0x31, 0x34, 0x32, 0x36, 0x31, 0x37, 0x39, 0x35, 0x32, 0x30, 0x37, 0x00,
  61. 0x30, 0x33, 0x32, 0x37, 0x35, 0x38, 0x31, 0x31, 0x33, 0x30, 0x35, 0x35,
  62. 0x42, 0xFE
  63. };
  64.  
  65. VOID randomizedata()
  66. {
  67. BYTE IPAddress[4], MachineId[8], Enet[8], ConsoleKey[13], ConsoleIndex[12], padding0[2], padding1[8];
  68. for (int i = 0; i < 2; i++)IPAddress = rand() % 90;
  69. for (int i = 0; i < 2; i++)MachineId = rand() % 90;
  70. for (int i = 0; i < 1; i++)Enet = rand() % 90;
  71. for (int i = 0; i < 3; i++)ConsoleIndex = rand() % 90;
  72. for (int i = 0; i < 3; i++)ConsoleKey = rand() % 90;
  73. for (int i = 0; i < 2; i++)padding0 = rand() % 90;
  74. for (int i = 0; i < 8; i++)padding1 = rand() % 90;
  75. memcpy(Response + 0x2, &IPAddress, 2);
  76. memcpy(Response + 0x6, &MachineId, 2);
  77. memcpy(Response + 0x10, &Enet, 1);
  78. memcpy(Response + 0x29, &ConsoleKey, 3);
  79. memcpy(Response + 0x33, &ConsoleIndex, 3);
  80. memcpy(Response + 0x1C, &padding0, 2);
  81. memcpy(Response + 0x14, &padding1, 8);
  82. }
  83.  
  84. VOID BO3Bypass()
  85. {
  86. *(__int64*)0x82332018 = 0x386000014E800020;// TU7/8
  87.  
  88. randomizedata();
  89.  
  90. PatchInJump((PDWORD)0x82A920F4, (DWORD)XeKeysGetKeyHook, FALSE); // TU7/8
  91. PatchInJump((PDWORD)0x82A92114, (DWORD)XeKeysGetConsoleIDHook, FALSE); // TU7/8
  92. PatchInJump((PDWORD)0x82A92A54, (DWORD)XNetXnAddrToMachineIdHook, false); // TU7/8
  93.  
  94. *(int *)0x826B81D0 = 0x60000000;// TU7/8
  95.  
  96. ////////////////////////
  97.  
  98. // Little cheater // TU7/8
  99. *(int*)0x82610920 = 0x60000000; // Red box 1
  100. *(int*)0x82610948 = 0x60000000; // Red box 2
  101. *(int*)0x82279CB8 = 0x60000000; // Recoil
  102. *(int*)0x8228BC78 = 0x60000000; // UAV
  103. }
Advertisement
Add Comment
Please, Sign In to add comment