Bypass (suspender) src

12/31/2012 01:01 PureEnergy3#31
Quote:
Originally Posted by xaras123 View Post
well doesnt work for me ..or i just cant handle it in my brain.exe...
-start the game..log in into the char..respawn.
-minimalizing , turning on ur suspender..
-turning the CE on.
-CE gets minimalized and unable to maxmimalize it
-then Xgin 3third program alert shows up
idk.
Are you able to play when running the game normal and CE closed? i couldn't even do that.. Had to uninstall CE before it let me.

I think you have to DLL inject on the breakpoint this suspender gives.

Either that or figure a way of making CE invisible.
12/31/2012 12:30 Spazman6117#32
Quote:
Originally Posted by Dr.Invisible View Post
Suspending shit is still working O.o
Fortunately yes,

See, xigncode has to actually be running for xigncode to detect if it has been suspended or not and luckily can be suspended during the loading time of xigncode thus letting you activate hacks and modify memory code before xigncode can detect ANYTHING
01/16/2013 13:04 twisted132#33
Quote:
Originally Posted by gawron25 View Post
Code:
#include <NomadMemory.au3>
#include <Array.au3>
#include <Memory.au3>
#include <File.au3>


Call("monster2")

Func monster2()
   
    $list1 = ProcessList()
    $msg1 = _arrayfindall($list1, "Dekaron.exe", 1, $list1[0][0])
    If @error = 6 Then
        Call("monster")
    EndIf
    For $z = 1 To 1
        $listdone1 = _arraycombinations($msg1, $z, "")
    Next
    While 1
        $list = ProcessList()
        $msg = _arrayfindall($list, "Dekaron.exe", 1, $list[0][0])
        For $i = 1 To 1
            $listdone = _arraycombinations($msg, $i, "")
        Next
        If $listdone[0] > $listdone1[0] Then
            $x = $list[$listdone[$listdone[0]]][1]
            While 1
                $handle = _memoryopen($x)
                $test = _memoryread(0x009807AE, $handle, "byte")
                If $test = 204 Then
                    _processsuspend($x)
                    _processsuspend("xxd.xem")
                    _processsuspend("x3.xem")
                    _processsuspend("xmag.xem")
                    _processsuspend("vtany.sys")
                    _memoryclose($handle)
                    Sleep(10)
                    _filewritetoline("PID.txt", 4, $x, 0)
                    MSGBOX ( 44096 , "DEKARON" , "ACTIVE HACKS THEN PRESS OK" ) 
                    _processresume($x)
                    _processresume("xxd.xem")
                    _processresume("x3.xem")
                    _processresume("xnag.xem")
                    Exit 
                EndIf
            WEnd
        EndIf
    WEnd
EndFunc

Func monster()
    While 1
       sleep(100)
        If ProcessExists("Dekaron.exe") Then
            $proces_id = ProcessExists("Dekaron.exe")
            $handle = _memoryopen($proces_id)
            $test = _memoryread(0x009807AE, $handle, "byte")
            If $test = 204 Then
                _processsuspend($proces_id)
                _processsuspend("xxd.xem")
                _processsuspend("x3.xem")
                _processsuspend("xmag.xem")
                _processsuspend("vtany.sys")
                _memoryclose($handle)
                Sleep(10)
                _filewritetoline("PID.txt", 4, $proces_id, 0)
                MSGBOX ( 44096 , "DEKARON" , "ACTIVE HACKS THEN PRESS OK" ) 
                _processresume($proces_id)
                _processresume("xxd.xem")
                _processresume("x3.xem")
                _processresume("xnag.xem")
                Exit 
            EndIf
        EndIf
    WEnd
EndFunc

Func _memorywritemod($adress, $handle, $data)
    $count = StringSplit($data, " ")
    For $i = 0 To Binary($count[0] - 1) Step 1
        $hexcount = "0x" & $count[$i + 1]
        _memorywrite($adress + $i, $handle, Binary($hexcount), "byte")
    Next
EndFunc

Func _processsuspend($processid)
    If $processid Then
        $ai_handle = DllCall("kernel32.dll", "int", "OpenProcess", "int", 2035711, "int", False, "int", $processid)
        $i_sucess = DllCall("ntdll.dll", "int", "NtSuspendProcess", "int", $ai_handle[0])
        DllCall("kernel32.dll", "ptr", "CloseHandle", "ptr", $ai_handle)
        If IsArray($i_sucess) Then
            Return 1
        Else
            SetError(1)
            Return 0
        EndIf
    Else
        SetError(2)
        Return 0
    EndIf
EndFunc

Func _processresume($processid)
    If $processid Then
        $ai_handle = DllCall("kernel32.dll", "int", "OpenProcess", "int", 2035711, "int", False, "int", $processid)
        $i_sucess = DllCall("ntdll.dll", "int", "NtResumeProcess", "int", $ai_handle[0])
        DllCall("kernel32.dll", "ptr", "CloseHandle", "ptr", $ai_handle)
        If IsArray($i_sucess) Then
            Return 1
        Else
            SetError(1)
            Return 0
        EndIf
    Else
        SetError(2)
        Return 0
    EndIf
EndFunc
this still working?
01/16/2013 17:14 janko100#34
Quote:
Originally Posted by twisted132 View Post
this still working?
yes
01/20/2013 00:41 Skate2Moons#35
This work to suspend and resume dekaron, but when you press ok, dekaron detect that....
01/23/2013 19:40 Vincenzik#36
non va sul mio pc
01/24/2013 00:19 freddhy#37
does it work? anyone??
01/24/2013 05:23 janko100#38
Quote:
Originally Posted by freddhy View Post
does it work? anyone??
yes it works
01/24/2013 05:34 Skate2Moons#39
who can send me a private of how is the method for use the scrips hacks?? Cheat engine is off now !!
01/24/2013 17:51 janko100#40
Quote:
Originally Posted by Skate2Moons View Post
who can send me a private of how is the method for use the scrips hacks?? Cheat engine is off now !!
CE still works... idk what u troling around
01/25/2013 15:08 Skate2Moons#41
Quote:
Originally Posted by janko100 View Post
CE still works... idk what u troling around
The problem is that the CE is detected by xingcode as third party programs even using this script. I dont know how to run the CE in a invisible mode for evade this problem. You get to understand me now??
01/25/2013 17:52 janko100#42
Quote:
Originally Posted by Skate2Moons View Post
The problem is that the CE is detected by xingcode as third party programs even using this script. I dont know how to run the CE in a invisible mode for evade this problem. You get to understand me now??
CE still works. Make trainer and run as administrator...
01/25/2013 21:55 pajurpl#43
please pm me hot to use this script
01/26/2013 08:48 bozkurts#44
I have not run the. thirty party tools alert.. how to run this baypass. Im use auto it 64 bit
and convert exe scprit and run after active hack and press ok and detected hack.
01/26/2013 12:58 janko100#45
Quote:
Originally Posted by bozkurts View Post
I have not run the. thirty party tools alert.. how to run this baypass. Im use auto it 64 bit
and convert exe scprit and run after active hack and press ok and detected hack.
U first run this script in this thread. Then u press play and then u enable hacks and exit CE...