DARK • BYPASS
Open in Telegram
Network:No data
Subscribers
+424 hours
+417 days
+45730 days
Posts Archive
BGMI 3.8 STABLE SAFE BYPASS 32BIT
PATCH_LIB("libanogs.so","0xA9D1C","00 20 70 47");//10Min
PATCH_LIB("libanogs.so","0xB3574","00 20 70 47");//Case 35
PATCH_LIB("libanogs.so","0x2D0B88","00 20 70 47"); //Offline 10Y
PATCH_LIB("libanogs.so","0x2A51A8","00 20 70 47"); //Online 10Y
PATCH_LIB("libanogs.so","0x8E688 ","00 20 70 47");//1 day
PATCH_LIB("libanogs.so","0x8E7A4","00 20 70 47");//1 day
PATCH_LIB("libanogs.so","0x8EA34","00 20 70 47");//1 day
PATCH_LIB("libanogs.so","0x8F954","00 20 70 47");//1 day
PATCH_LIB("libanogs.so","0x72B6C","00 20 70 47");//GetReport3
PATCH_LIB("libanogs.so","0x98E9C ","00 20 70 47");//Memory checks
PATCH_LIB("libanogs.so","0x98F10","00 20 70 47");//Other checks
PATCH_LIB("libanogs.so","0x154EC0","00 00 B0 E3 1E FF 2F E1"); //AtExit (for crash)
//CR-@ERROROWNERS
AUTO FEEDBACK CODE PY
CREDIT -- NEOBLADE71 & POWERISLIVEE
ZIP PAAS -- @NEOBLADE71
JOIN FOR MORE
@DARKxSRC__int64 *__fastcall sub_2D92B4(__int64 *result)
{
__int64 *v1; // x19
_QWORD *v2; // x0
if ( *(_DWORD *)result )
{
v1 = result;
v2 = malloc(0x30u);
return sub_2D92A8(v1, v2);
}
return result;
}
HOOK_LIB_NO_ORIG("libTBlueData.so", "0x2D92B4", sub_2D92B4 ); //10mint into day fix azanvoid *(*orig_memcpy)(void *dest, const void *src, size_t n);
void *hooked_memcpy(void *dest, const void *src, size_t n)
{
uintptr_t ret = (uintptr_t)__builtin_return_address(0);
static uintptr_t libanogsBase = get_libanogs_base();
if (ret >= libanogsBase && ret <= libanogsBase + 0x800000) {
memset(dest, 0, n);
return dest;
}
return orig_memcpy(dest, src, n);
}
DobbyHook((void *)(libanogsBase + 0x139560), (void *)hook_memcpy, (void **)&orig_memcpy);
__int64 __fastcall (*osub_1EB7BC)(__int64 a1, const char *a2, char a3);
__int64 __fastcall hsub_1EB7BC(__int64 a1, const char *a2, char a3) {
static char jaat[64];
if (a2 && (strstr(a2, "opcode_crash") ||
strstr(a2, "crash_various_opcode") ||
strstr(a2, "zygisk_module") ||
strstr(a2, "zygisk_stack") ||
strstr(a2, "anti_root"))) {
strcpy(jaat, "bypass_string");
usleep(100 * 1000);
return osub_1EB7BC(a1, jaat, a3);
}
return osub_1EB7BC(a1, a2, a3);
}
HOOK_LIB("libanogs.so","0x1EB7BC",hsub_1EB7BC,osub_1EB7BC);//crash fixer no termination
PATCH_LIB("libUE4.so", "0x6AEADC8", "00 00 80 D2 C0 03 5F D6"); // Ban fix
PATCH_LIB("libUE4.so", "0x6AEADE0", "00 00 80 D2 C0 03 5F D6"); // Ban fix
PATCH_LIB("libUE4.so", "0x5B94638", "00 00 80 D2 C0 03 5F D6"); // 10 years
PATCH_LIB("libUE4.so", "0x60D1EC4", "00 00 80 D2 C0 03 5F D6");// fake daga
PATCH_LIB("libUE4.so", "0x60D2014", "00 00 80 D2 C0 03 5F D6");// fake damage
Pvt
64Bit__int64 osub_144F64(__int64 a1, __int64 a2, __int64 a3, __int64 a4, __int64 a5, __int64 a6, __int64 a7, __int64 a8)
__int64 hsub_144F64(__int64 a1, __int64 a2, __int64 a3, __int64 a4, __int64 a5, __int64 a6, __int64 a7, __int64 a8)
{
*(char *)(get_libanogsBase() + 0x6C5EC0) = 0;
return 0;
}
HOOK_LIB("libanogs.so", "0x144F64",hsub_144F64, osub_144F64); 
__int64 (*osub_1EB7BC)(__int64 a1, const char *a2, char a3);
__int64 hsub_1EB7BC(__int64 a1, const char *a2, char a3) {
static char patched_string[64];
if (a2 && (
strstr(a2, "opcode_crash") ||
strstr(a2, "crash_various_opcode") ||
strstr(a2, "zygisk_module") ||
strstr(a2, "zygisk_stack") ||
strstr(a2, "anti_root")
)) {
strcpy(patched_string, "bypass_string");
usleep(100 * 1000);
return osub_1EB7BC(a1, patched_string, a3);
}
return osub_1EB7BC(a1, a2, a3);
}
HOOK_LIB("libanogs.so","0x1EB7BC",hsub_1EB7BC,osub_1EB7BC); __int64 (__fastcall *case35)(__int64 a1, unsigned __int8 *a2, unsigned int a3);
__int64 __fastcall hcase35(__int64 a1, unsigned __int8 *a2, unsigned int a3)
{
uintptr_t AnogsBase = getAbsoluteAddress("libanogs.so",0x0);
uintptr_t ret = reinterpret_cast<uintptr_t>(__builtin_return_address(0)) - AnogsBase;
LOGI("case35 called | a3: 0x%X | ret: 0x%lX", a3, ret);
if (a3 == 0x4E || a3 == 0x62 || a3 == 0x46) {
LOGI("Blocked a3 = 0x%X to avoid detection!", a3);
return 0;
}
return orig_case35(a1, a2, a3);
}
HOOK_LIB("libanogs.so", "0x4E07B8",hcase35, case35);
