Blackshot DISCONNECTION BY HACK ADDRESS
here the address and opcode of DISCONNECTION_BY_HACK
Code:
BlackShot.exe+EFE0A - 55 - push ebp
Code:
BlackShot.exe+EFE0B - 8B EC - mov ebp,esp BlackShot.exe+EFE0D - 83 E4 F8 - and esp,-08 248 BlackShot.exe+EFE10 - 81 EC 0C010000 - sub esp,0000010C 268 BlackShot.exe+EFE16 - A1 04CA8B00 - mov eax,[BlackShot.exe+4BCA04] [2528B591] BlackShot.exe+EFE1B - 33 C4 - xor eax,esp BlackShot.exe+EFE1D - 89 84 24 08010000 - mov [esp+00000108],eax BlackShot.exe+EFE24 - 53 - push ebx BlackShot.exe+EFE25 - 56 - push esi BlackShot.exe+EFE26 - 8B 75 08 - mov esi,[ebp+08] BlackShot.exe+EFE29 - 57 - push edi BlackShot.exe+EFE2A - 0FB7 4E 0A - movzx ecx,word ptr [esi+0A] BlackShot.exe+EFE2E - 6A 00 - push 00 BlackShot.exe+EFE30 - 8A 54 31 0C - mov dl,[ecx+esi+0C] BlackShot.exe+EFE34 - 8D 41 01 - lea eax,[ecx+01] BlackShot.exe+EFE37 - 66 89 46 0A - mov [esi+0A],ax BlackShot.exe+EFE3B - 0FB6 C2 - movzx eax,dl BlackShot.exe+EFE3E - 5B - pop ebx BlackShot.exe+EFE3F - BE C8000000 - mov esi,000000C8 200 BlackShot.exe+EFE44 - BF 00020000 - mov edi,00000200 510 BlackShot.exe+EFE49 - 48 - dec eax BlackShot.exe+EFE4A - 10 84 47 01000048 - adc [edi+eax*2+48000001],al BlackShot.exe+EFE51 - 0F84 3B010000 - je BlackShot.exe+EFF92 BlackShot.exe+EFE57 - 48 - dec eax BlackShot.exe+EFE58 - 0F84 ED000000 - je BlackShot.exe+EFF4B BlackShot.exe+EFE5E - 83 E8 04 - sub eax,04 4 BlackShot.exe+EFE61 - 0F84 DD000000 - je BlackShot.exe+EFF44 BlackShot.exe+EFE67 - 83 E8 0F - sub eax,0F 15 BlackShot.exe+EFE6A - 0F84 CD000000 - je BlackShot.exe+EFF3D BlackShot.exe+EFE70 - 83 E8 1C - sub eax,1C 28 BlackShot.exe+EFE73 - 74 41 - je BlackShot.exe+EFEB6 BlackShot.exe+EFE75 - 83 E8 31 - sub eax,31 49 BlackShot.exe+EFE78 - 0F85 42010000 - jne BlackShot.exe+EFFC0 BlackShot.exe+EFE7E - E8 273A0100 - call BlackShot.exe+1038AA BlackShot.exe+EFE83 - 68 04CD8400 - push BlackShot.exe+44CD04 GameExit BlackShot.exe+EFE88 - B9 75050000 - mov ecx,00000575 117 BlackShot.exe+EFE8D - 38 98 89030000 - cmp [eax+00000389],bl BlackShot.exe+EFE93 - 75 03 - jne BlackShot.exe+EFE98 BlackShot.exe+EFE95 - 8D 4F CB - lea ecx,[edi-35] BlackShot.exe+EFE98 - E8 1300F3FF - call BlackShot.exe+1FEB0 BlackShot.exe+EFE9D - 50 - push eax BlackShot.exe+EFE9E - 68 C0B78100 - push BlackShot.exe+41B7C0 BlackShot.exe+EFEA3 - 51 - push ecx BlackShot.exe+EFEA4 - 51 - push ecx BlackShot.exe+EFEA5 - E8 AE2AF1FF - call BlackShot.exe+2958 BlackShot.exe+EFEAA - 8B C8 - mov ecx,eax BlackShot.exe+EFEAC - E8 FE910800 - call BlackShot.exe+1790AF BlackShot.exe+EFEB1 - E9 0A010000 - jmp BlackShot.exe+EFFC0 BlackShot.exe+EFEB6 - E8 5B2AF1FF - call BlackShot.exe+2916 BlackShot.exe+EFEBB - 83 B8 A0080000 07 - cmp dword ptr [eax+000008A0],07 7 BlackShot.exe+EFEC2 - 74 2A - je BlackShot.exe+EFEEE BlackShot.exe+EFEC4 - E8 4D2AF1FF - call BlackShot.exe+2916 BlackShot.exe+EFEC9 - 83 B8 A0080000 06 - cmp dword ptr [eax+000008A0],06 6 BlackShot.exe+EFED0 - 74 1C - je BlackShot.exe+EFEEE BlackShot.exe+EFED2 - E8 3F2AF1FF - call BlackShot.exe+2916 BlackShot.exe+EFED7 - 83 B8 A0080000 05 - cmp dword ptr [eax+000008A0],05 5 BlackShot.exe+EFEDE - 74 0E - je BlackShot.exe+EFEEE BlackShot.exe+EFEE0 - E8 312AF1FF - call BlackShot.exe+2916 BlackShot.exe+EFEE5 - 83 B8 A0080000 09 - cmp dword ptr [eax+000008A0],09 9 BlackShot.exe+EFEEC - 75 0C - jne BlackShot.exe+EFEFA BlackShot.exe+EFEEE - E8 232AF1FF - call BlackShot.exe+2916 BlackShot.exe+EFEF3 - 8B C8 - mov ecx,eax BlackShot.exe+EFEF5 - E8 E3DFFCFF - call BlackShot.exe+BDEDD BlackShot.exe+EFEFA - 68 04CD8400 - push BlackShot.exe+44CD04 GameExit BlackShot.exe+EFEFF - B9 EF060000 - mov ecx, 239 BlackShot.exe+EFF04 - E8 A7FFF2FF - call BlackShot.exe+1FEB0 BlackShot.exe+EFF09 - 50 - push eax BlackShot.exe+EFF0A - 68 C0B78100 - push BlackShot.exe+41B7C0 BlackShot.exe+EFF0F - 51 - push ecx BlackShot.exe+EFF10 - 51 - push ecx BlackShot.exe+EFF11 - E8 422AF1FF - call BlackShot.exe+2958 BlackShot.exe+EFF16 - 8B C8 - mov ecx,eax BlackShot.exe+EFF18 - E8 92910800 - call BlackShot.exe+1790AF BlackShot.exe+EFF1D - 68 10CD8400 - push BlackShot.exe+44CD10 game exit: EcommonError::ERRCODE_DISCONNECTION_BY_HACK BlackShot.exe+EFF22 - E8 FEE1C10F - call multiplay_sg.getWorldPtr BlackShot.exe+EFF27 - 90 - nop BlackShot.exe+EFF28 - 50 - push eax BlackShot.exe+EFF29 - 90 - nop BlackShot.exe+EFF2A - E8 2BE0C10F - call multiplay_sg.IWorld::debugString BlackShot.exe+EFF2F - 59 - pop ecx BlackShot.exe+EFF30 - 59 - pop ecx BlackShot.exe+EFF31 - C6 05 C26B8F00 01 - mov byte ptr [BlackShot.exe+4F6BC2],01 BlackShot.exe+EFF38 - E9 83000000 - jmp BlackShot.exe+EFFC0 BlackShot.exe+EFF3D - B9 68050000 - mov ecx,00000568 1384 BlackShot.exe+EFF42 - EB 56 - jmp BlackShot.exe+EFF9A BlackShot.exe+EFF44 - B9 FE060000 - mov ecx,000006FE 1790 BlackShot.exe+EFF49 - EB 4F - jmp BlackShot.exe+EFF9A BlackShot.exe+EFF4B - B9 83050000 - mov ecx,00000583 131 BlackShot.exe+EFF50 - E8 5BFFF2FF - call BlackShot.exe+1FEB0 BlackShot.exe+EFF55 - 50 - push eax BlackShot.exe+EFF56 - 8D 44 24 14 - lea eax,[esp+14] BlackShot.exe+EFF5A - 50 - push eax BlackShot.exe+EFF5B - E8 87701700 - call BlackShot.exe+266FE7 BlackShot.exe+EFF60 - 59 - pop ecx BlackShot.exe+EFF61 - 59 - pop ecx BlackShot.exe+EFF62 - 53 - push ebx BlackShot.exe+EFF63 - 8D 44 24 14 - lea eax,[esp+14] BlackShot.exe+EFF67 - 50 - push eax BlackShot.exe+EFF68 - 56 - push esi BlackShot.exe+EFF69 - 57 - push edi BlackShot.exe+EFF6A - E8 E929F1FF - call BlackShot.exe+2958 BlackShot.exe+EFF6F - 8B C8 - mov ecx,eax BlackShot.exe+EFF71 - E8 878F0800 - call BlackShot.exe+178EFD BlackShot.exe+EFF76 - E8 DD29F1FF - call BlackShot.exe+2958 BlackShot.exe+EFF7B - 80 B8 7BBC0100 00 - cmp byte ptr [eax+0001BC7B],00 BlackShot.exe+EFF82 - 74 3C - je BlackShot.exe+EFFC0 BlackShot.exe+EFF84 - E8 CF29F1FF - call BlackShot.exe+2958 BlackShot.exe+EFF89 - 8B C8 - mov ecx,eax BlackShot.exe+EFF8B - E8 70350B00 - call BlackShot.exe+1A3500 BlackShot.exe+EFF90 - EB 2E - jmp BlackShot.exe+EFFC0 BlackShot.exe+EFF92 - 6A 02 - push 02 BlackShot.exe+EFF94 - 59 - pop ecx BlackShot.exe+EFF95 - EB 03 - jmp BlackShot.exe+EFF9A BlackShot.exe+EFF97 - 33 C9 - xor ecx,ecx BlackShot.exe+EFF99 - 41 - inc ecx BlackShot.exe+EFF9A - E8 11FFF2FF - call BlackShot.exe+1FEB0 BlackShot.exe+EFF9F - 50 - push eax BlackShot.exe+EFFA0 - 8D 44 24 14 - lea eax,[esp+14] BlackShot.exe+EFFA4 - 50 - push eax BlackShot.exe+EFFA5 - E8 3D701700 - call BlackShot.exe+266FE7 BlackShot.exe+EFFAA - 59 - pop ecx BlackShot.exe+EFFAB - 59 - pop ecx BlackShot.exe+EFFAC - 53 - push ebx BlackShot.exe+EFFAD - 8D 44 24 14 - lea eax,[esp+14] BlackShot.exe+EFFB1 - 50 - push eax BlackShot.exe+EFFB2 - 56 - push esi BlackShot.exe+EFFB3 - 57 - push edi BlackShot.exe+EFFB4 - E8 9F29F1FF - call BlackShot.exe+2958 BlackShot.exe+EFFB9 - 8B C8 - mov ecx,eax BlackShot.exe+EFFBB - E8 3D8F0800 - call BlackShot.exe+178EFD BlackShot.exe+EFFC0 - E8 9329F1FF - call BlackShot.exe+2958 BlackShot.exe+EFFC5 - 88 98 22A40100 - mov [eax+0001A422],bl BlackShot.exe+EFFCB - C7 80 28A40100 00002041 - mov [eax+0001A428],41200000 BlackShot.exe+EFFD5 - 53 - push ebx BlackShot.exe+EFFD6 - 8D 44 24 14 - lea eax,[esp+14] BlackShot.exe+EFFDA - 50 - push eax BlackShot.exe+EFFDB - 56 - push esi BlackShot.exe+EFFDC - 57 - push edi BlackShot.exe+EFFDD - E8 7629F1FF - call BlackShot.exe+2958 BlackShot.exe+EFFE2 - 8B C8 - mov ecx,eax BlackShot.exe+EFFE4 - E8 148F0800 - call BlackShot.exe+178EFD BlackShot.exe+EFFE9 - 8B 8C 24 14010000 - mov ecx,[esp+00000114] BlackShot.exe+EFFF0 - 5F - pop edi BlackShot.exe+EFFF1 - 5E - pop esi BlackShot.exe+EFFF2 - 5B - pop ebx BlackShot.exe+EFFF3 - 33 CC - xor ecx,esp BlackShot.exe+EFFF5 - E8 545F1700 - call BlackShot.exe+265F4E BlackShot.exe+EFFFA - 8B E5 - mov esp,ebp BlackShot.exe+EFFFC - 5D - pop ebp BlackShot.exe+EFFFD - C3 - ret
Example by using byte in Cheat engine
Code:
BlackShot.exe+BB1C6 - Value- JE- 116
Code:
-JNE -value-117
-JNA -value -118
-JMP-235
0 comments: