nikazizi97 (10-28-2015)
First let Libraries / includes:
Code:
#include <Windows.h>
#include <process.h>
#include <Tlhelp32.h>
#include <WINBASE.H>
#include <string.h>
Now the updated addresses:
Code:
#define ProblemSolved1 0x40B5F1
#define ProblemSolved2 0x4EFE24
#define ProblemSolved3 0x63F696
#define ProblemSolved4 0x63F65C
now to edit the values in the game to start without problems:
Update the Bytes, eg "\ XEB \ x38".
Code:
VOID BlackShotBypass ()
{
while (1)
{
MemoryWrite ((void) (ProblemSolved1) (void) "\ XEB \ x38", 2); / Sample used.
MemoryWrite ((void) (ProblemSolved2) (void) "\ Xaa \ Xaa" 2); // Update!
MemoryWrite ((void) (ProblemSolved3) (void) "\ Xaa \ Xaa" 2); // update!
MemoryWrite ((void) (ProblemSolved4) (void) "\ Xaa \ Xaa" 2); // update!
}
}
Note: How to handle the Bytes Cyrax? Simple, play the desired address in CheatEngine, or OllyDbg, and go Get Bytes, if not fail me memory.
Writing in the memory ...
Code:
MemoryWrite void (void * adr, void * ptr, int size)
{
DWORD OldProtection;
VirtualProtect (adr, size, PAGE_EXECUTE_READWRITE, & OldProtection);
memcpy (adr, ptr, size);
VirtualProtect (adr, size, OldProtection, & OldProtection);
}
all right so far, to continue the process you have to eliminate some processes that start together with gameguard:
Code:
Killini void (const char * processName)
{
HANDLE hSnapShot = CreateToolhelp32Snapshot (TH32CS_SNAPALL, NULL);
PROCESSENTRY32 pEntry;
pEntry.dwSize = sizeof (pEntry);
BOOL hRes = Process32First (hSnapShot, & pEntry);
while (hRes)
{
if (strcmp (pEntry.szExeFile, processName) == 0)
{
HANDLE hProcess = OpenProcess (PROCESS_TERMINATE, 0, (DWORD) pEntry.th32ProcessID);
if (hProcess! = NULL)
{
TerminateProcess (hProcess, 9);
CloseHandle (hProcess);
}
}
hRes = Process32Next (hSnapShot, & pEntry);} CloseHandle (hSnapShot);
}
WHAT will be eliminated:
Code:
ToKill void ()
{
while (1)
{
KillGG ("GameMon.des");
****************KillGG ("GameGuard.des");
KillGG ("GameMon64.des");
Sleep (100);
}
}
Create a DLL Main:
Code:
BOOL WINAPI DllMain (HMODULE hModule, dwReason DWORD, LPVOID lpReserved)
{
UNREFERENCED_PARAMETER (hModule);
if (dwReason == DLL_PROCESS_ATTACH)
{
DisableThreadLibraryCalls (hModule);
CreateThread (NULL, NULL, (LPTHREAD_START_ROUTINE) BlackShotBypass, NULL, NULL, NULL);
****************CreateThread (NULL, NULL, (LPTHREAD_START_ROUTINE) ToKill, NULL, NULL, NULL);
}
return TRUE;
}
nikazizi97 (10-28-2015)
What program did you use? Microsoft Basic ?
Please expalin, I dont have more than 2 brain cells
nikazizi97 (10-28-2015)
can you post thats dll to this forum ?plss ..