RealAnonymous kxal.exe

void *(*omemcpy)(void *dest, const void *src, size_t n);
void *hmemcpy(void *dest, const void *src, size_t n)
{
    auto ret = reinterpret_cast<uintptr_t>(__builtin_return_address(0));
    auto AnogsCaller = ret - libanogsBase;

    if ((DWORD)src >= libanogsBase && (DWORD)src <= libanogsBase + libanogsSize) //anogs
    {
        char *temp = (char *)((char *)src - (char *)libanogsBase);
        src = (void *)(temp + libanogsAlloc);
        return omemcpy(dest, src, n);
    }

    if ((DWORD)src >= libUE4Base && (DWORD)src <= libUE4Base + libUE4Size) //ue4
    {
        char *temp = (char *)((char *)src - (char *)libUE4Base);
        src = (void *)(temp + libUE4Alloc);
        return omemcpy(dest, src, n);
    }


    //VIP BYPASS NOROOT
    if(AnogsCaller==0x16947c || AnogsCaller==0x16947c || AnogsCaller==0x1692ec || AnogsCaller==0x22f838  ){
        return 0;
    }
    if(AnogsCaller==0x272368 || AnogsCaller==0x271e30 || AnogsCaller==0x2744d8 || AnogsCaller==0x2745d8 || AnogsCaller==0x27410c ){
        return 0;
    }
    if(AnogsCaller==0x17F244 || AnogsCaller==0x161898F || AnogsCaller==0x3A3920 || AnogsCaller==0x3A39E0 ||
       AnogsCaller==0x3A89B4 || AnogsCaller==0x163760F || AnogsCaller==0x15ACB8  ){
        return 0;
    }


    

    return omemcpy(dest, src, n);
}