MOSS 1.18 Bypass

[dmx66_96]

Due for high demand and some time, other kool info about the new version of Moss.
A couple of months ago I tried to chit-chat with the author to give him some tips, he refused and told me that he don't care about this shame.

Compared to the previous version, the new one seems completely recoded.
- Screenshot with BitBlt
- CRC of the log and screenshots
- "Packed" with MPRESS
- Screenshot when stopping the monitoring


Where the screenshot are taken:

Part of the routine that take the screens:

Oh yes, I found this that looks like GetTickCount (but IIRC it's different and I havent seen If it get called)

Conclusions:
- Hook BitBlt to stop your drawings

If I have enough time I will release something for ya guys.

Have phun

[Sneak84]

This was leeched from another site, lol.

[kmanev073]

what is this i dont get it give more info

[giniyat101]

good job ....