#define WIN32_LEAN_AND_MEAN //buang yg tidak berguna
#include <windows.h> // include untuk createthread
#include <stdio.h>
#include <stdlib.h>

#define OFS_MAP 0xD851CE
#define OFS_PF 0x5179E6
#define OFS_BU 0x529D01
#define OFS_PFBR 0x517A24
#define OFS_PANG 0x52C124
#define OFS_OTP 0x52BC2B
#define OFS_BB 0x52A0C8
#define OFS_AK1 0x364515
#define OFS_AK2 0x3644F8
#define OFS_BYPASS 0x4E3820
LPTSTR ModulGame = "Audition.exe";

//////////////assembly /////////////////////
void Patch(void *adr, void *ptr, int size)
{
DWORD OldProtection;
VirtualProtect(adr,size,PAGE_EXECUTE_READWRITE, &OldProtection);
memcpy(adr,ptr,size);
VirtualProtect(adr,size,OldProtection, &OldProtection);
}
///////////write memory////////////////////
void WritePointer(unsigned long ulBase, int iOffset, int iValue)
{
if (!IsBadReadPtr((VOID*)ulBase, sizeof(unsigned long)))
{
if (!IsBadWritePtr((void*)(*(unsigned long*)ulBase + iOffset), sizeof(unsigned long)))
{
*(int*)(*(unsigned long*)ulBase + iOffset) = iValue;
}
}
}
DWORD WINAPI MemPacth(LPVOID param) // Perulangan
{
while (1) { // Jika nilai 1 atau True jalankan fungsi dibawah ini !

if (GetAsyncKeyState(VK_F1)&1) {
DWORD adrMin1, adrMin2 = 0;
DWORD dwPB = (DWORD)GetModuleHandleA(ModulGame);
if (dwPB > 0) {
adrMin1 = dwPB + (DWORD)OFS_MAP;
Patch((void *)(adrMin1),(void*)(PBYTE)"\x07", 1);
}
}
if (GetAsyncKeyState(VK_F3)&1) {
MessageBeep(MB_ICONINFORMATION);
DWORD adrMin1, adrMin2 = 0;
DWORD dwPB = (DWORD)GetModuleHandleA(ModulGame);
if (dwPB > 0) {
adrMin1 = dwPB + (DWORD)OFS_PF;
Patch((void *)(adrMin1),(void*)(PBYTE)"\x00\x00\x00\x00\x7D\x3F\x33\x33", 8);
adrMin1 = dwPB + (DWORD)OFS_PFBR;
Patch((void *)(adrMin1),(void*)(PBYTE)"\x99\x99\x99\x99", 4);
adrMin1 = dwPB + (DWORD)OFS_BU;
Patch((void *)(adrMin1),(void*)(PBYTE)"\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x14", 28);
adrMin1 = dwPB + (DWORD)OFS_OTP;
Patch((void *)(adrMin1),(void*)(PBYTE)"\xFF", 1);
adrMin1 = dwPB + (DWORD)OFS_PANG;
Patch((void *)(adrMin1),(void*)(PBYTE)"\xFF", 1);
adrMin1 = dwPB + (DWORD)OFS_BB;
Patch((void *)(adrMin1),(void*)(PBYTE)"\xFF", 1);
}
}
if (GetAsyncKeyState(VK_F4)&1) {
MessageBeep(MB_ICONINFORMATION);
DWORD adrMin1, adrMin2 = 0;
DWORD dwPB = (DWORD)GetModuleHandleA(ModulGame);
if (dwPB > 0) {
adrMin1 = dwPB + (DWORD)OFS_PF;
Patch((void *)(adrMin1),(void*)(PBYTE)"\x7D\x3F\x33\x33\x73\x3F\x9A\x99", 8);
adrMin1 = dwPB + (DWORD)OFS_PFBR;
Patch((void *)(adrMin1),(void*)(PBYTE)"\x03\x02\x01\x00\x01\x02\x03\x00\x01", 9);
adrMin1 = dwPB + (DWORD)OFS_BU;
Patch((void *)(adrMin1),(void*)(PBYTE)"\x00\x00\x00\x0F\x00\x00\x00\x1B\x00\x00\x00\x28\x00\x00\x00\x37\x00\x00\x00\x03\x00\x00\x00\x08\x00\x00\x00\x14", 28);
adrMin1 = dwPB + (DWORD)OFS_OTP;
Patch((void *)(adrMin1),(void*)(PBYTE)"\x3F", 1);
adrMin1 = dwPB + (DWORD)OFS_PANG;
Patch((void *)(adrMin1),(void*)(PBYTE)"\x05", 1);
adrMin1 = dwPB + (DWORD)OFS_BB;
Patch((void *)(adrMin1),(void*)(PBYTE)"\xFF", 1);
}
}
if (GetAsyncKeyState(VK_F5)&1) {
MessageBeep(MB_ICONINFORMATION);
DWORD adrMin1, adrMin2 = 0;
DWORD dwPB = (DWORD)GetModuleHandleA(ModulGame);
if (dwPB > 0) {
adrMin1 = dwPB + (DWORD)OFS_AK1;
Patch((void *)(adrMin1),(void*)(PBYTE)"\x8B\x37\x89\x31\x85\xF6\x74\x2D\x8B\x44", 10);
adrMin1 = dwPB + (DWORD)OFS_AK2;
Patch((void *)(adrMin1),(void*)(PBYTE)"\x0C\x38\x89\x08\x90\x90\x42\x83\xC0\x04", 10);
}
}
if (GetAsyncKeyState(VK_F6)&1) {
MessageBeep(MB_ICONINFORMATION);
DWORD adrMin1, adrMin2 = 0;
DWORD dwPB = (DWORD)GetModuleHandleA(ModulGame);
if (dwPB > 0) {
adrMin1 = dwPB + (DWORD)OFS_AK1;
Patch((void *)(adrMin1),(void*)(PBYTE)"\x3B\x37\x75\x31\x85\xF6\x74\x2D\x8B\x44\x24\x10\x48\x3B\xF0\x7C", 16);
adrMin1 = dwPB + (DWORD)OFS_AK2;
Patch((void *)(adrMin1),(void*)(PBYTE)"\x08\x3B\x0C\x07\x75\x08\x42\x83\xC0\x04\x3B\xD6\x72\xF1\x3B\xD6", 16);
}
}

DWORD adrMin1, adrMin2 = 0;
DWORD dwPB = (DWORD)GetModuleHandleA(ModulGame);
if (dwPB > 0) {
adrMin1 = dwPB + (DWORD)OFS_BYPASS;
Patch((void *)(adrMin1),(void*)(PBYTE)"\x00\x00", 2);
}

Sleep(5); // Berikan jeda
}
return (0); // unhook
}


BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
if (dwReason == DLL_PROCESS_ATTACH)
{
DisableThreadLibraryCalls(hDll);
if(dwReason == DLL_PROCESS_ATTACH){
MessageBox(0, "facebook.com/chien.hack", "Pesan", MB_OK);
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)MemPacth, 0, 0, 0);
//kuncinama
char strDLLName [_MAX_PATH];
GetModuleFileName(hDll, strDLLName , _MAX_PATH);
if (strstr(strDLLName, "sellovfa.dll") <= 0) { //nama dll asli
// tampilkan pesan, kalo dll nya sdh bukan asli / sudah di rename
MessageBox(0, "Exit Process....!
Debug 4361", "Pesan", MB_TOPMOST);
ExitProcess(0);//ERROR
}
}
else if(dwReason == DLL_PROCESS_DETACH)
{
}
}
return TRUE;
}