BO3 BYPASS

//BO3 Bypass By: OvaKill

#ifndef _BO3_BYPASS_DEFINES_H

#define _BO3_BYPASS_DEFINES_H



#include "stdafx.h"

#include "Vec.h"

#include <time.h>



BYTE IPAddress[4], ConsoleSerial[12], ConsoleIndex[12];

BYTE MachineId[] = { 0xFA, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };

BYTE Enet[] = { 0x00, 0x1D, 0xD8, 0x00, 0x00, 0x00 };



byte Response[] =

{

        0x46, 0x7C, 0x70, 0xB0,                                                                                                                 // IP Address [4 Bytes]

        0xFC, 0x00, 0x00, 0x00, 0xE6, 0xA5, 0xDD, 0xD1,                                                                 // Machine ID [8 Bytes]

        0xF5, 0xD7, 0xDA, 0xF1, 0x46, 0x21, 0x01, 0x10,                                                                 // MAC Address [8 Bytes]

        0x00, 0x00, 0x00, 0x00,                                                                                                                 // ChallengePadding 0 (Read Memory @ func_849AF534(float))

        0x00, 0x00, 0x00, 0x00,                                                                                                                 // ChallengePadding 1 (Read Memory @ func_849AF534 + 0x04(float))

        0x08, 0x60,                                                                                                                                             // ChallengePadding 2 (Read Memory @ func_84629B5C)

        0x03,                                                                                                                                                   // RetailFlag 0x01 = Active | 0x02 = Clean Retail (What Makes it Not?) | 01 + 02 = 0x03 = Active + Clean

        0x30, 0x31, 0x34, 0x32, 0x36, 0x31, 0x37, 0x39, 0x35, 0x32, 0x30, 0x37, 0x00,   // Console Serial [12 Bytes]

        0x30, 0x33, 0x32, 0x37, 0x35, 0x38, 0x31, 0x31, 0x33, 0x30, 0x35, 0x35,                 // Console ID

        0x42, 0xFE                                                                                                                                              // Unknown Padding

};

typedef struct _BO3_ChallengeResponse

{

        unsigned char abOnlineIP[4];//0x00-0x04

        unsigned long long qwMachineId;//0x04-0xC

        unsigned long long qwEnet;//0xC-0x14

        float fRegionLatitude;//0x14-0x18

        float fRegionLongtitude;//0x18-0x1C

        short shFreeAmount;//0x1C-0x1E

        unsigned char bSecurityFlag;//0x1E-0x1F

        char szConsoleSerial[0xD];//0x1F-0x2C

        char szConsoleId[0xC];//0x2C-0x38

        char szConsoleRetail[0x3];//0x01+0x02 = 0x03

        short shKernalVersion;//0x38-0x3A

        WORD Padding1;

        QWORD UnknownVector2;

        WORD UnknownShort;

        BYTE Padding2;

} BO3_ChallengeResponse, *pBO3_ChallengeResponse;



typedef enum BO3_ChallengeFlag : BYTE

{

        ACTIVE = 1,

        VALID = 2,

        INVALIDPRIVILEGE = 8,

        XBDM = 16,

} BO3_ChallengeFlag;

typedef enum _BO3_RenderFlag : BYTE

{

        HIGHLIGHT_RED = 18,

        HIGHLIGHT_HOT = 20,

        HIGHLIGHT_GREEN = 22,

        HIGHLIGHT_CYAN = 24,

        HIGHLIGHT_ORANGE = 26,

        HIGHLIGHT_YELLOW = 28,

        HIGHLIGHT_BLUE = 30,

} BO3_RenderFlag;



int XNetXnAddrToMachineIdHookDASH(XNCALLER_TYPE xnc, XNADDR  pxnaddr, unsigned long long MachineId)

{

        srand((unsigned int)time(0));

        MachineId = 0xFA00000000000000 | (0x2000000 | rand() % 0x7FFFFF);

        *(__int64*)0x8232BE18 = 0x386000014E800020; //BO3 bypass hash

        return 0;

}





inline __declspec() int answerChallenges(int r3, int r4, int r5)

{

        __asm

        {

                nop

                        nop

                        nop

                        nop

                        nop

                        nop

                        nop

                        blr

        }

}



void randomize()

{

        BYTE IPAddress[4], MachineId[8], Enet[8], ConsoleKey[13], ConsoleIndex[12], padding0[2], padding1[8];

        for (int i = 0; i < 2; i++)IPAddress[i] = rand() % 90;

        for (int i = 0; i < 2; i++)MachineId[i] = rand() % 90;

        for (int i = 0; i < 1; i++)Enet[i] = rand() % 90;

        for (int i = 0; i < 3; i++)ConsoleIndex[i] = rand() % 90;

        for (int i = 0; i < 3; i++)ConsoleKey[i] = rand() % 90;

        for (int i = 0; i < 2; i++)padding0[i] = rand() % 90;

        for (int i = 0; i < 8; i++)padding1[i] = rand() % 90;

        memcpy(Response + 0x2, &IPAddress, 2);

        memcpy(Response + 0x6, &MachineId, 2);

        memcpy(Response + 0x10, &Enet, 1);

        memcpy(Response + 0x29, &ConsoleKey, 3);

        memcpy(Response + 0x33, &ConsoleIndex, 3);

        memcpy(Response + 0x1C, &padding0, 2);

        memcpy(Response + 0x14, &padding1, 8);

}



void RandomizeData()

{

        srand((unsigned int)time(0));

        for (int i = 0; i < 4; i++) IPAddress[i] = rand() % 90;

        for (int i = 0; i < 8; i++) MachineId[i] = rand() % 90;

        for (int i = 0; i < 6; i++) Enet[i] = rand() % 90;

        for (int i = 0; i < 12; i++){

                ConsoleSerial[i] = rand() % 90;

                ConsoleIndex[i] = rand() % 90;

        }

}

inline DWORD GoldSpoofHook(DWORD dwUserIndex, XPRIVILEGE_TYPE PrivilegeType, PBOOL pfResult)

{

        if (PrivilegeType == XPRIVILEGE_TYPE::XPRIVILEGE_COMMUNICATIONS_FRIENDS_ONLY

                || PrivilegeType == XPRIVILEGE_TYPE::XPRIVILEGE_PROFILE_VIEWING_FRIENDS_ONLY

                || PrivilegeType == XPRIVILEGE_TYPE::XPRIVILEGE_USER_CREATED_CONTENT_FRIENDS_ONLY

                || PrivilegeType == XPRIVILEGE_TYPE::XPRIVILEGE_PRESENCE_FRIENDS_ONLY

                || PrivilegeType == XPRIVILEGE_TYPE::XPRIVILEGE_VIDEO_COMMUNICATIONS_FRIENDS_ONLY)

                *pfResult = FALSE;

        else

                *pfResult = TRUE;



        return 0;

}



unsigned long XeXGetModuleHandleHook(char* ModuleName)

{

        if (strcmp(ModuleName, "xbdm.xex") == 0)

                return 0;

}



int XNetXnAddrToMachineIdHook(XNCALLER_TYPE xnc, XNADDR  pxnaddr, unsigned long long MachineId)

{

        srand((unsigned int)time(0));

        MachineId = 0xFA00000000000000 | (0x2000000 | rand() % 0x7FFFFF);

        return 0;

}

unsigned long XeKeysGetKeyHook(unsigned short key, unsigned char* buffer, PDWORD len) //

{

        if (key == 0x14)

        {

                srand((unsigned int)time(0));

                for (int i = 0x00; i < 0xC; i++) buffer[i] = rand() % 0x7F;

                return 0L;

        }

        return XeKeysGetKey(key, buffer, len);

}



long XeKeysGetConsoleIDHook(unsigned char* buffer, int Unknown)

{

        srand((unsigned int)time(0));

        for (int i = 0x00; i < 0xC; i++) buffer[i] = rand() % 0x7F;

        return 0;

}

#endif