markus92 (09-02-2011)
void MEMwrite(void *adr, void *ptr, int size)
{
DWORD OldProtection;
VirtualProtect(adr,size,PAGE_EXECUTE_READWRITE, &OldProtection);
memcpy(adr,ptr,size);
VirtualProtect(adr,size,OldProtection, &OldProtection);
}
DWORD WINAPI Bypass(LPVOID)
{
DWORD HSEhsvc = 0;
do{
HSEhsvc = (DWORD)GetModuleHandleA("Ehsvc.dll");
Sleep(100);
}while(!HSEhsvc);
MEMwrite((void*)(HSEhsvc+0x71E7C),(PBYTE)"\xC2\x04 \x00",3);
MEMwrite((void*)(HSEhsvc+0x09B30),(PBYTE)"\xC2\x04 \x00",3);
MEMwrite((void*)(HSEhsvc+0x26867),(PBYTE)"\x90\x90 ",2);
MEMwrite((void*)(HSEhsvc+0x15530),(PBYTE)"\x90\x90 ",2);
MEMwrite((void*)(HSEhsvc+0x3626E),(PBYTE)"\x31",1) ;
MEMwrite((void*)(HSEhsvc+0x3372F),(PBYTE)"\x31",1) ;
MEMwrite((void*)(HSEhsvc+0x357A0),(PBYTE)"\x31", 1);
MEMwrite((void*)0x004A8999,(PBYTE)"\x90\x90\x90\x9 0\x90\x90",6) ;
return 1;
}
Big THX:
Directx
Credits: Me (ehsvc addys)
UnknownPK
Last edited by SK1LL0R.; 09-03-2011 at 07:58 AM.
markus92 (09-02-2011)
will this stop my source from crashing? cause mine crashes and the addies seem to be okay
What about publishing the both more needed addys?
or send per pm?
i doubt its yours,no offence
can someone give me the both needed addys? ;D
i cant find them
EDIT:
if someone can give me a dumped ehsvc.dll i can try it myself :/
Last edited by markus92; 09-02-2011 at 09:59 AM.
Doesnt work for me oh well gj
Last edited by MH4CKER; 09-02-2011 at 03:38 PM.
If you need help with coding/programming. PM me, il help anytime :3
It is my bypass.
Today I make my Ehsvc addylogger finished.
Unknownpk only get credits for some shit like:
DWORD WINAPI Bypass(LPVOID)
{
DWORD HSEhsvc = 0;
do{
HSEhsvc = (DWORD)GetModuleHandleA("Ehsvc.dll");
Sleep(100);
}while(!HSEhsvc);
return 1;
}
Other TextStrings:
m1 = "No response from server"
m2 = "Error"
m10 = "Unable to connect to log-in server"
m11 = "Network settings problem"
m12 = "Abnormal gameplay found"
m13 = "Failed to create a room ERROR_CODE"
m125 = "Connection will be terminated because of an abnormal gameplay"
m126 = "Connection error"
m127 = "Connection will be terminated because of an abnormal gameplay ***"
Have fun :P
Ehsvc Download
Virustotal:VirusTotal - Free Online Virus, Malware and URL Scanner
Virustotal²:ehsvc.dll - Jottis Malwarescanner
7sean (09-05-2011),ramsak1771 (09-25-2011)
Usearound you'r code please.Code:Test
Make's it more neat.
SK1LL0R.
PLZ don't leech upk stuff and say its yours ...