Thread: Byapass

Page 1 of 2 12 LastLast
Results 1 to 15 of 29
  1. #1
    demtrios's Avatar
    Join Date
    Jan 2010
    Gender
    male
    Location
    MPGH.Net
    Posts
    870
    Reputation
    10
    Thanks
    1,053
    My Mood
    Amused

    Byapass

    Code:
    HINSTANCE lGetModuleHandle(CHAR *szModule)
    {
    	HINSTANCE hModule = NULL;
    	if(!(hModule = GetModuleHandle(szModule)))
    	{
    		hModule = LoadLibrary(szModule);
    	}
    	return hModule;
    }
    
    INT Memcpy(VOID *lpMem, VOID *lpSrc, size_t len)
    {
    	DWORD flNewProtect = PAGE_READWRITE, lpflOldProtect;
    	unsigned char *pDst = (unsigned char *)lpMem, *pSrc = (unsigned char *)lpSrc;
    
    	if(VirtualProtect(lpMem, len, flNewProtect, &lpflOldProtect))
    	{
    		while(len-- > 0) *pDst++ = *pSrc++;
    		return 0;
    	}
    
    	return 1;
    }
    
    
    
    #define EhsvcSelfCrC	    0x00799EC 
    #define Detection	        0x0009F10 
    #define NanoCheck1 		    0x003C4BE 
    #define NanoCheck2	        0x00398FF 
    #define NanoCheck3		    0x003B976 
    #define AsmDetection		0x002BBC1
    #define HSAntiCrash		    0x003C52E
    
    DWORD WINAPI Bypass(LPVOID)
    {
    	DWORD dwHackshield = NULL;
    	do
    	{
    		Sleep(100);
    		dwHackshield = (DWORD)GetModuleHandle(STRING_EHSVC);
    	} while(!dwHackshield);
    
    	BYTE HSB1[1] = {0x74};
    	BYTE HSB2[1] = {0xD2};
    	BYTE HSB3[3] = {0xC2, 0x04, 0x00};
    	BYTE HSB4[1] = {0x31};
    	BYTE HSB5[2] = {0x90, 0x90};
    
    	Memcpy((VOID *)(dwHackshield + NanoCheck2),	        HSB4, 1);
    	Memcpy((VOID *)(dwHackshield + Detection),	        HSB3, 3);
    	Memcpy((VOID *)(dwHackshield + NanoCheck3),	        HSB4, 1);
    	Memcpy((VOID *)(dwHackshield + AsmDetection),	    HSB5, 2);
    	Memcpy((VOID *)(dwHackshield + EhsvcSelfCrC),	    HSB3, 3);
    	Memcpy((VOID *)(dwHackshield + NanoCheck1 ),	    HSB4, 1);
    	Memcpy((VOID *)(dwHackshield + HSAntiCrash ),       HSB4, 1);
    
    	return NULL;
    }
    Credits

    @luizimloko ->Byapass
    @demtrios ->adresses
    Last edited by demtrios; 10-20-2012 at 04:19 PM.

  2. The Following 2 Users Say Thank You to demtrios For This Useful Post:

    Intellectual (10-20-2012),The Decoder (01-14-2013)

  3. #2
    Intellectual's Avatar
    Join Date
    Jun 2012
    Gender
    male
    Location
    GDI
    Posts
    5,414
    Reputation
    785
    Thanks
    15,937
    My Mood
    Yeehaw
    Quote Originally Posted by demtrios View Post
    Code:
    HINSTANCE lGetModuleHandle(CHAR *szModule)
    {
    HINSTANCE hModule = NULL;
    if(!(hModule = GetModuleHandle(szModule)))
    {
    hModule = LoadLibrary(szModule);
    }
    good job as always ....

  4. #3
    Flengo's Avatar
    Join Date
    May 2010
    Gender
    male
    Location
    Ontario, Canada
    Posts
    15,702
    Reputation
    3319
    Thanks
    11,112
    My Mood
    Happy
    This is detected for NA. We're on a higher HS version.
    I Read All Of My PM's & VM's
    If you need help with anything, just let me know.
     
     
    VM | PM

    Publicist Since 04.04.2015
    Middleman Since Unknown - Unknown
    Global Moderator Since 08.01.2013
    Donator Since 05.29.2013

    Minion+ Since 04.18.2013

    District 187 Minion Since 04.04.2013
    Steam Minion Since 02.26.2013
    WarRock Minion Since 02.19.2013
    A.V.A Minion Since 02.13.2013
    DayZ Minion Since 01.21.2013
    Combat Arms Minion Since 12.26.2012
    Contributor Since 11.16.2012
    Member Since 05.11.2010


  5. #4
    demtrios's Avatar
    Join Date
    Jan 2010
    Gender
    male
    Location
    MPGH.Net
    Posts
    870
    Reputation
    10
    Thanks
    1,053
    My Mood
    Amused
    Quote Originally Posted by Flengo View Post
    This is detected for NA. We're on a higher HS version.
    I tested was running now

  6. #5
    Flengo's Avatar
    Join Date
    May 2010
    Gender
    male
    Location
    Ontario, Canada
    Posts
    15,702
    Reputation
    3319
    Thanks
    11,112
    My Mood
    Happy
    Quote Originally Posted by demtrios View Post
    I tested was running now
    Interesting.
    I Read All Of My PM's & VM's
    If you need help with anything, just let me know.
     
     
    VM | PM

    Publicist Since 04.04.2015
    Middleman Since Unknown - Unknown
    Global Moderator Since 08.01.2013
    Donator Since 05.29.2013

    Minion+ Since 04.18.2013

    District 187 Minion Since 04.04.2013
    Steam Minion Since 02.26.2013
    WarRock Minion Since 02.19.2013
    A.V.A Minion Since 02.13.2013
    DayZ Minion Since 01.21.2013
    Combat Arms Minion Since 12.26.2012
    Contributor Since 11.16.2012
    Member Since 05.11.2010


  7. #6
    luizimloko's Avatar
    Join Date
    Feb 2011
    Gender
    male
    Location
    fs:[0]
    Posts
    1,799
    Reputation
    136
    Thanks
    9,834
    My Mood
    Yeehaw
    Quote Originally Posted by demtrios View Post
    I tested was running now
    try use DIP Hook 82
    Contributor Since: 02-18-2012

    WarFace Brazil:


    Crossfire Brazil ( X-Trap ):


    WarRock Brazil ( HackShield ):



  8. The Following User Says Thank You to luizimloko For This Useful Post:

    [MPGH]Flengo (10-20-2012)

  9. #7
    Element™'s Avatar
    Join Date
    Jan 2011
    Gender
    male
    Location
    Brazil / Summoner's Rift
    Posts
    3,208
    Reputation
    81
    Thanks
    978
    My Mood
    Yeehaw
    English, Brazilians don't know how to speak...
    Config :
    - PNY GTX 970 4GB
    - Intel i5 3540
    - Corsair Carbide 200 Series
    - PNY SSD 120GB
    - HDD 1TB Samsung

    Peripherals :
    - Razer Blackwidow Ultimate 2013
    - Razer Deathadder 2013
    - Razer Tiamat 7.1
    - Razer Goliathus Control Big


  10. #8
    arun823's Avatar
    Join Date
    Jun 2010
    Gender
    male
    Location
    Los Angeles, California
    Posts
    524
    Reputation
    151
    Thanks
    1,887
    My Mood
    Amused
    Quote Originally Posted by Element™ View Post
    English, Brazilians don't know how to speak...
    Basically this bypass is old and won't work for DIP Hooks, you will crash after a few minutes or so.
    Reversing is the only way to move forward.

  11. #9
    pDevice's Avatar
    Join Date
    Feb 2012
    Gender
    male
    Location
    d3d9.h
    Posts
    1,306
    Reputation
    15
    Thanks
    337
    My Mood
    Stressed
    BlackLegend EHSVC Logger ?



  12. #10
    EnergizerBunnyyy's Avatar
    Join Date
    Sep 2012
    Gender
    male
    Posts
    32
    Reputation
    10
    Thanks
    2
    My Mood
    In Love
    Good job xD

  13. #11
    wraithkilla's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Posts
    257
    Reputation
    10
    Thanks
    895
    My Mood
    Busy
    lol you dont even need a bypass for any hooks in that game ...

  14. #12
    arun823's Avatar
    Join Date
    Jun 2010
    Gender
    male
    Location
    Los Angeles, California
    Posts
    524
    Reputation
    151
    Thanks
    1,887
    My Mood
    Amused
    Quote Originally Posted by wraithkilla View Post
    lol you dont even need a bypass for any hooks in that game ...
    If you use DIP hook and texture chams you do, but with DIP hook by itself, you're fine.
    Reversing is the only way to move forward.

  15. #13
    wraithkilla's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Posts
    257
    Reputation
    10
    Thanks
    895
    My Mood
    Busy
    Quote Originally Posted by arun823 View Post
    If you use DIP hook and texture chams you do, but with DIP hook by itself, you're fine.
    no you dont


    i use ms detours v3 and it works fine without any bypass

  16. #14
    Flengo's Avatar
    Join Date
    May 2010
    Gender
    male
    Location
    Ontario, Canada
    Posts
    15,702
    Reputation
    3319
    Thanks
    11,112
    My Mood
    Happy
    Quote Originally Posted by wraithkilla View Post
    no you dont


    i use ms detours v3 and it works fine without any bypass
    Where'd you get that shit from?
    I Read All Of My PM's & VM's
    If you need help with anything, just let me know.
     
     
    VM | PM

    Publicist Since 04.04.2015
    Middleman Since Unknown - Unknown
    Global Moderator Since 08.01.2013
    Donator Since 05.29.2013

    Minion+ Since 04.18.2013

    District 187 Minion Since 04.04.2013
    Steam Minion Since 02.26.2013
    WarRock Minion Since 02.19.2013
    A.V.A Minion Since 02.13.2013
    DayZ Minion Since 01.21.2013
    Combat Arms Minion Since 12.26.2012
    Contributor Since 11.16.2012
    Member Since 05.11.2010


  17. #15
    demtrios's Avatar
    Join Date
    Jan 2010
    Gender
    male
    Location
    MPGH.Net
    Posts
    870
    Reputation
    10
    Thanks
    1,053
    My Mood
    Amused
    Quote Originally Posted by Flengo View Post


    Where'd you get that shit from?
    I have this Detours may also be posting

Page 1 of 2 12 LastLast