[Information] - Two byte NOP bypass on PB for BF2

[zero_tolerance]

By: strife

So, someone posted awhile ago about a two byte nop that prevented pb from doing anything. I found a two byte nop bypass that prevents pb from ever jumping to their exit process function.

Current offset for two byte nop: PbclBase + 0x6B23B

const BYTE NopTwoBytes[2] = {0x90, 0x90};

void PBSucks()
{
      DWORD PbclBase = (DWORD)GetModuleHandle("pbcl.dll");
      if(PbclBase)
      {
            DWORD dwProtect;
            VirtualProtect((void*)(PbclBase + 0x6B23B), 2, PAGE_EXECUTE_READWRITE, &dwProtect);
            memcpy((void*)(PbclBase + 0x6B23B), &NopTwoBytes, 2);
            VirtualProtect((void*)(PbclBase + 0x6B23B), 2, dwProtect, NULL);
      }
}

NOTE: The bytes have to be nopped repeatedly or else you get kicked. Solution could be to create a thread to control this.

Enjoy!