u/Dribble_3

Free undetek source code! for file message me on discord dribble_3

typedef struct _s__RTTIClassHierarchyDescriptor _s__RTTIClassHierarchyDescriptor, *P_s__RTTIClassHierarchyDescriptor;

typedef struct _s__RTTIClassHierarchyDescriptor RTTIClassHierarchyDescriptor;

struct _s__RTTIClassHierarchyDescriptor {

dword signature;

dword attributes; // bit flags

dword numBaseClasses; // number of base classes (i.e. rtti1Count)

RTTIBaseClassDescriptor *32 __((image-base-relative)) *32 __((image-base-relative)) pBaseClassArray; // ref to BaseClassArray (RTTI 2)

};

typedef ulonglong __uint64;

typedef struct _s__RTTICompleteObjectLocator _s__RTTICompleteObjectLocator, *P_s__RTTICompleteObjectLocator;

typedef struct _s__RTTICompleteObjectLocator RTTICompleteObjectLocator;

struct _s__RTTICompleteObjectLocator {

dword signature;

dword offset; // offset of vbtable within class

dword cdOffset; // constructor displacement offset

ImageBaseOffset32 pTypeDescriptor; // ref to TypeDescriptor (RTTI 0) for class

ImageBaseOffset32 pClassDescriptor; // ref to ClassHierarchyDescriptor (RTTI 3)

};

https://preview.redd.it/byy469c5kx0h1.png?width=2006&format=png&auto=webp&s=030019ef9e9cdd3ab74ac678729230095ffada7e

https://preview.redd.it/ykej9je6kx0h1.png?width=1580&format=png&auto=webp&s=390b7ff891777fce258dc50023422a9b4e6367c0

https://preview.redd.it/rxoya3z8kx0h1.png?width=1586&format=png&auto=webp&s=f8ce65707afaeb4855f918866a1f9bbb521174a6

i have cracked undeteck, its a rat. look at this

local_28b0 = *(undefined8 *)((longlong)local_4930 + 0x468);
*(longlong *)((longlong)local_4930 + 0x468) = (longlong)local_4950 + 0x4520;
WriteProcessMemory(DAT_14003ce70, local_4928, local_4930, 0x800, (SIZE_T *)0x0);

This is V-Table Hooking. It is stealing a function pointer from a legitimate process and replacing it with its own code (local_4950 + 0x4520). Every time the system tries to call a normal function, it actually runs the cheat's code first. This is how it hides from Task Manager and Antivirus.

https://preview.redd.it/652jt6xb0r0h1.png?width=664&format=png&auto=webp&s=ab46255a78b8a117e5e1b189b5d6e92e2544951f

this is just a warning. do not use undetek. its a proffesional virus