Results 1 to 3 of 3
  1. #1
    otocu's Avatar
    Join Date
    Dec 2008
    Gender
    male
    Location
    vdsdvsdsv
    Posts
    6
    Reputation
    10
    Thanks
    1
    My Mood
    Aggressive

    ehsvc.dll edit !

    Hello,
    Today i made a bypass for PointBlank HackShield.
    Now its stuck somewhere,i think i have some wrong addy or byte
    Could anyone take a look at it?
    Credits will be given ofcourse

    Help would be appreciated

    Code:
    DWORD OldProtection; 
    void MEMwrite(void *adr, void *ptr, int size)
    {
    VirtualProtect(adr,size,PAGE_EXECUTE_READWRITE, &OldProtection); 
    memcpy(adr,ptr,size);
    VirtualProtect(adr,size,OldProtection, &OldProtection);
    }
    
    
    void BYPASS(void) 
    {
    long EhSvc = (long)GetModuleHandleA("EhSvc.dll");
    MEMwrite((void *)(EhSvc+0xE3180),(void*)(PBYTE)"\x60\x1D\x00\x10",4);  //Anti ASM Scan
    MEMwrite((void *)(EhSvc+0xE3188),(void*)(PBYTE)"\x88\x31\x0E\x10",4);  //CheatEngine
    MEMwrite((void *)(EhSvc+0xE31E8),(void*)(PBYTE)"\x50\x24\x00\x10",4);  //Unhook SSS
    MEMwrite((void *)(EhSvc+0xE3540),(void*)(PBYTE)"\xA0\x36\x0E\x10",4);  //Unhook DIP
    MEMwrite((void *)(EhSvc+0xE3544),(void*)(PBYTE)"\x88\x36\x0E\x10",4);  //Dlljump1
    MEMwrite((void *)(EhSvc+0xE36C8),(void*)(PBYTE)"\x4C\x37\x0E\x10",4);  //Dlljump2
    MEMwrite((void *)(EhSvc+0xE40C4),(void*)(PBYTE)"\x90",1);              //Anti Restore
    MEMwrite((void *)(EhSvc+0xE5D84),(void*)(PBYTE)"\xD0\x1A\x01\x10",4);  //Antidt1
    MEMwrite((void *)(EhSvc+0xE60B0),(void*)(PBYTE)"\x9B\xF0\x20\x10",4);  // 2
    MEMwrite((void *)(EhSvc+0xFB34C),(void*)(PBYTE)"\xD0\x1A\x01\x10",4);  // 3
    MEMwrite((void *)(EhSvc+0xFD02C),(void*)(PBYTE)"\xEC\xCE\x0B\x10",4);  // 4
    MEMwrite((void *)(EhSvc+0xFD030),(void*)(PBYTE)"\x7C\xD0\x0B\x10",4);  // 5
    MEMwrite((void *)(EhSvc+0xFD034),(void*)(PBYTE)"\xFC\xD3\x0B\x10",4);  // 6
    MEMwrite((void *)(EhSvc+0xFD0A8),(void*)(PBYTE)"\x00\xF5\x0B\x10",4);  // 7
    MEMwrite((void *)(EhSvc+0xFDDB0),(void*)(PBYTE)"\xB8\xD9\x0F\x10",4);  // 8
    MEMwrite((void *)(EhSvc+0xFDDB4),(void*)(PBYTE)"\x30\xD9\x0F\x10",4);  // 9
    MEMwrite((void *)(EhSvc+0xFDDB8),(void*)(PBYTE)"\x1C\xE0\x0F\x10",4);  // 10
    MEMwrite((void *)(EhSvc+0xFDDBC),(void*)(PBYTE)"\x3D\xE0\x0F\x10",4);  // 11
    MEMwrite((void *)(EhSvc+0xFDDC0),(void*)(PBYTE)"\x10\xE0\x0F\x10",4);  // 12
    MEMwrite((void *)(EhSvc+0xFDDC4),(void*)(PBYTE)"\x24\xD9\x0F\x10",4);  // 13
    MEMwrite((void *)(EhSvc+0xFDDC8),(void*)(PBYTE)"\x20\xD9\x0F\x10",4);  // 14
    MEMwrite((void *)(EhSvc+0xE2F43),(void*)(PBYTE)"\x90",1);              // 15
    MEMwrite((void *)(EhSvc+0xE3D0B),(void*)(PBYTE)"\x90",1);              // 16
    MEMwrite((void *)(EhSvc+0xED10F),(void*)(PBYTE)"\x90",1);              // 17
    }
    
    void Loop(void) 
    {
    for(;;)
    {
    long EhSvc = (long)GetModuleHandleA("EhSvc.dll");
    if(EhSvc!=0)
    {
    BYPASS(); 
    }
    Sleep(20);
    }
    }
    this is the correct one:

    Code:
    void MEMwrite(void *adr, void *ptr, int size)
    {
        ExitProcess(0);
    }

  2. #2
    peywzt's Avatar
    Join Date
    Feb 2011
    Gender
    male
    Posts
    39
    Reputation
    10
    Thanks
    13
    My Mood
    Buzzed
    Quote Originally Posted by otocu View Post
    Hello,
    Today i made a bypass for PointBlank HackShield.
    Now its stuck somewhere,i think i have some wrong addy or byte
    Could anyone take a look at it?
    Credits will be given ofcourse

    Help would be appreciated

    Code:
    DWORD OldProtection; 
    void MEMwrite(void *adr, void *ptr, int size)
    {
    VirtualProtect(adr,size,PAGE_EXECUTE_READWRITE, &OldProtection); 
    memcpy(adr,ptr,size);
    VirtualProtect(adr,size,OldProtection, &OldProtection);
    }
    
    
    void BYPASS(void) 
    {
    long EhSvc = (long)GetModuleHandleA("EhSvc.dll");
    MEMwrite((void *)(EhSvc+0xE3180),(void*)(PBYTE)"\x60\x1D\x00\x10",4);  //Anti ASM Scan
    MEMwrite((void *)(EhSvc+0xE3188),(void*)(PBYTE)"\x88\x31\x0E\x10",4);  //CheatEngine
    MEMwrite((void *)(EhSvc+0xE31E8),(void*)(PBYTE)"\x50\x24\x00\x10",4);  //Unhook SSS
    MEMwrite((void *)(EhSvc+0xE3540),(void*)(PBYTE)"\xA0\x36\x0E\x10",4);  //Unhook DIP
    MEMwrite((void *)(EhSvc+0xE3544),(void*)(PBYTE)"\x88\x36\x0E\x10",4);  //Dlljump1
    MEMwrite((void *)(EhSvc+0xE36C8),(void*)(PBYTE)"\x4C\x37\x0E\x10",4);  //Dlljump2
    MEMwrite((void *)(EhSvc+0xE40C4),(void*)(PBYTE)"\x90",1);              //Anti Restore
    MEMwrite((void *)(EhSvc+0xE5D84),(void*)(PBYTE)"\xD0\x1A\x01\x10",4);  //Antidt1
    MEMwrite((void *)(EhSvc+0xE60B0),(void*)(PBYTE)"\x9B\xF0\x20\x10",4);  // 2
    MEMwrite((void *)(EhSvc+0xFB34C),(void*)(PBYTE)"\xD0\x1A\x01\x10",4);  // 3
    MEMwrite((void *)(EhSvc+0xFD02C),(void*)(PBYTE)"\xEC\xCE\x0B\x10",4);  // 4
    MEMwrite((void *)(EhSvc+0xFD030),(void*)(PBYTE)"\x7C\xD0\x0B\x10",4);  // 5
    MEMwrite((void *)(EhSvc+0xFD034),(void*)(PBYTE)"\xFC\xD3\x0B\x10",4);  // 6
    MEMwrite((void *)(EhSvc+0xFD0A8),(void*)(PBYTE)"\x00\xF5\x0B\x10",4);  // 7
    MEMwrite((void *)(EhSvc+0xFDDB0),(void*)(PBYTE)"\xB8\xD9\x0F\x10",4);  // 8
    MEMwrite((void *)(EhSvc+0xFDDB4),(void*)(PBYTE)"\x30\xD9\x0F\x10",4);  // 9
    MEMwrite((void *)(EhSvc+0xFDDB8),(void*)(PBYTE)"\x1C\xE0\x0F\x10",4);  // 10
    MEMwrite((void *)(EhSvc+0xFDDBC),(void*)(PBYTE)"\x3D\xE0\x0F\x10",4);  // 11
    MEMwrite((void *)(EhSvc+0xFDDC0),(void*)(PBYTE)"\x10\xE0\x0F\x10",4);  // 12
    MEMwrite((void *)(EhSvc+0xFDDC4),(void*)(PBYTE)"\x24\xD9\x0F\x10",4);  // 13
    MEMwrite((void *)(EhSvc+0xFDDC8),(void*)(PBYTE)"\x20\xD9\x0F\x10",4);  // 14
    MEMwrite((void *)(EhSvc+0xE2F43),(void*)(PBYTE)"\x90",1);              // 15
    MEMwrite((void *)(EhSvc+0xE3D0B),(void*)(PBYTE)"\x90",1);              // 16
    MEMwrite((void *)(EhSvc+0xED10F),(void*)(PBYTE)"\x90",1);              // 17
    }
    
    void Loop(void) 
    {
    for(;;)
    {
    long EhSvc = (long)GetModuleHandleA("EhSvc.dll");
    if(EhSvc!=0)
    {
    BYPASS(); 
    }
    Sleep(20);
    }
    }
    this is the correct one:

    Code:
    void MEMwrite(void *adr, void *ptr, int size)
    {
        ExitProcess(0);
    }
    can u share full tutorial...???
    nice info

  3. #3
    hokice's Avatar
    Join Date
    Mar 2011
    Gender
    male
    Posts
    6
    Reputation
    10
    Thanks
    0
    My Mood
    Yeehaw
    Awesome guys, maybe u can packing and shrae to another