Advertisement
Riremito

TWMS v173.1 ~ Aob

Sep 2nd, 2014
827
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.40 KB | None | 0 0
  1. void MSCRCBypass(){
  2. DWORD MSCRC1 = Air::AobScan("3B 8D 70 FF FF FF 0F 85 ?? ?? ?? ?? 6A 00 E9") + 6;
  3. MSCRC1_Ret = Air::AobScan("8A 11 80 C2 01 8B 4D 18");
  4. DWORD MSCRC23 = Air::AobScan("55 8B EC 6A FF 68 ?? ?? ?? ?? 64 A1 00 00 00 00 50 81 EC ?? ?? ?? ?? 53 56 57 A1 ?? ?? ?? ?? 33 C5 50 8D 45 F4 64 A3 00 00 00 00 89 8D ?? ?? ?? ?? 6A 01 8B 8D ?? ?? ?? ?? E8");
  5.  
  6. Air::CreateMemoryDump(&Memory, &Memory_Start, &Memory_End);
  7. Air::FullAccess(MSCRC1, 7);
  8. *(DWORD *)(MSCRC1 + 2) = (DWORD)MSCRC1_Hook - MSCRC1 - 6;
  9. Air::WriteCode(MSCRC23, "31 C0 C3");
  10. }
  11.  
  12. void DisableDetections(){
  13. DWORD DR_Check = Air::AobScan("55 8B EC 81 EC F0 02 00 00 A1 ?? ?? ?? ?? 33 C5 89 45 FC 53 56 57 6A 00 E9");
  14. //DWORD ProcessListPacket = Air::AobScan("6A FF 68 ?? ?? ?? ?? 64 A1 ?? ?? ?? ?? 50 81 EC ?? ?? ?? ?? A1 ?? ?? ?? ?? 33 C4 89 84 24 ?? ?? ?? ?? 53 55 56 57 A1 ?? ?? ?? ?? 33 C4 50 8D 84 24 ?? ?? ?? ?? 64 A3 ?? ?? ?? ?? 8B AC 24 ?? ?? ?? ?? 33 DB 53 8B F9 E9");
  15.  
  16. Air::WriteCode(DR_Check, "31 C0 C3");
  17. //Air::WriteCode(ProcessListPacket, "31 C0 C2 04 00");
  18. }
  19.  
  20. void DisableSecurity(){
  21. DWORD ASPLunchr = Air::AobScan("55 8B EC 83 EC 0C 56 57 6A 00 8B F1 E9");
  22. DWORD mkd25tray = Air::AobScan("55 8B EC 83 EC 0C 56 57 6A 00 8B F1 E9", 2);
  23. DWORD Autoup = Air::AobScan("56 8D 71 2C 8B CE E8");
  24.  
  25. Air::WriteCode(ASPLunchr, "31 C0 C3");
  26. Air::WriteCode(mkd25tray, "31 C0 C3");
  27. Air::WriteCode(Autoup , "31 C0 C3");
  28. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement