MPGHThe Dark Arts
RegisterLog in

Hackshield Pro Bypass (Warrock, Maplestory)

Posts 1–15 of 16 · Page 1 of 2
Hackshield Pro Bypass (Warrock, Maplestory)
I came to the great idea to share this with you guys its resent and it still works if you have the correct addys i don't know were the original code came from but this is my slightly edited code

Code:
//-----------------------------------------HACKSHIELD BYPASS--------------------------------------------

#define HS_JMP            0x4A7372 //As of 24-11 (This Value is also known as the Back addy)
#define HS_JMP2            0x4A736B //As of 24-11 

typedef int            (__cdecl *HS_GetProcAddress_t)( int hModule, int a2 );
typedef int            (__stdcall *HackshieldComm_t )( int, void*, void* );
typedef signed int    (__stdcall *KickProc_t)( int a1, int a2, int a3 );

HS_GetProcAddress_t                pHS_GetProcAddress        = NULL;
HackshieldComm_t                pHackshieldComm            = NULL;
KickProc_t                        pKickProc                = NULL;

signed int __stdcall new_KickProc( int a1, int a2, int a3 )
{
    return 1;
}

int __stdcall new_HackshieldComm( int hsCommCode, void *Param1, void *Param2 )
{
    if( hsCommCode == 4 || hsCommCode == 5 || hsCommCode == 13 ) //kill!
    {
        if( hsCommCode == 4 ) //replace kick proc
        {
            DWORD *dwParam1 = (DWORD *)Param1;

            pKickProc    = (KickProc_t)*dwParam1;
            *dwParam1    = (DWORD)new_KickProc;
        }

        int iReturn = pHackshieldComm( hsCommCode, Param1, Param2 );

        return 1;
    }

    int iReturn = pHackshieldComm( hsCommCode, Param1, Param2 );

    return iReturn;
}

void HookCommunication( EXCEPTION_POINTERS* pExceptionInfo )
{
    DWORD dwEbp        = pExceptionInfo->ContextRecord->Ebp;
    DWORD dwParam2    = 0;

    __asm
    {
        push eax;
        push edx;
        mov eax, dwEbp;
        mov edx, [eax+0xC];
        mov dwParam2, edx;
        pop edx;
        pop eax;
    }

    if( dwParam2 == 0xA ) //this is the ordinal of some export...hmm..
    {
        pHackshieldComm                        = (HackshieldComm_t)pExceptionInfo->ContextRecord->Eax;
        pExceptionInfo->ContextRecord->Eax    = (DWORD)new_HackshieldComm;
    }

    pExceptionInfo->ContextRecord->Eip        = HS_JMP2;

    return;
}

PVOID pContextHandler = NULL;

LONG WINAPI ***ExceptionHandler( EXCEPTION_POINTERS* pExceptionInfo )
{
    if( pExceptionInfo->ExceptionRecord->ExceptionCode != EXCEPTION_SINGLE_STEP )
    {
        return EXCEPTION_CONTINUE_SEARCH;
    }

    if( pExceptionInfo->ExceptionRecord->ExceptionAddress == (PVOID)HS_JMP ) 
    {
        HookCommunication( pExceptionInfo );
        return EXCEPTION_CONTINUE_EXECUTION;
    }

    return EXCEPTION_CONTINUE_SEARCH;
}

void InitContextHook()
{
    pContextHandler = AddVectoredExceptionHandler( 0x50BE17, ***ExceptionHandler );

    CONTEXT Context;
    Context.ContextFlags = CONTEXT_DEBUG_REGISTERS;
    GetThreadContext(GetCurrentThread(), &Context);
    Context.Dr0 = HS_JMP;
    Context.Dr7 = (1<<0)|(1<<2)|(1<<4)|(1<<6);
    SetThreadContext(GetCurrentThread(), &Context);
}  
//-----------------------------------------END HACKSHIELD BYPASS--------------------------------------------
#1 ·
What does HS_JMP stand for? Because there is only one HS address yet this code requires JMP and JMP2. Just wondering, Im starting to code again and have never bypassed myself.
#3 ·
Thank you!

It worked you need just to add the new addies

Thank you again.
#4 ·
Quote Originally Posted by gbitz View Post
What does HS_JMP stand for? Because there is only one HS address yet this code requires JMP and JMP2. Just wondering, Im starting to code again and have never bypassed myself.
Lol i have no idea i dont have my own logger (nobody wants to share the candy :P) last addy's had 2 values indeed
#5 ·
Ok, im just straight lost.. Wat do you do wit the code he posted, period?
#10 ·
Seamliss I thought this was your code? I saw your post about this code in the C++ section.
#6 ·
i am obviously a little chooblet and i have no idea how to use this.. please help.
#7 ·
Quote Originally Posted by Taco. View Post
i am obviously a little chooblet and i have no idea how to use this.. please help.
Rest assured; this is not a hack.
#8 ·
This looks good if someone makes a real hack with this as a bypass nomore only hacking on private servers for MapleStory
#9 ·
Is This Bypass hackshield In freestlye?
#11 ·
[[QUOTE=DarkFreakXxX;1768127]Is This Bypass hackshield In freestlye?[/QUOTE]
#13 ·
Quote Originally Posted by Thats the way it is View Post
I came to the great idea to share this with you guys its resent and it still works if you have the correct addys i don't know were the original code came from but this is my slightly edited code

Code:
//-----------------------------------------HACKSHIELD BYPASS--------------------------------------------

#define HS_JMP            0x4A7372 //As of 24-11 (This Value is also known as the Back addy)
#define HS_JMP2            0x4A736B //As of 24-11 

typedef int            (__cdecl *HS_GetProcAddress_t)( int hModule, int a2 );
typedef int            (__stdcall *HackshieldComm_t )( int, void*, void* );
typedef signed int    (__stdcall *KickProc_t)( int a1, int a2, int a3 );

HS_GetProcAddress_t                pHS_GetProcAddress        = NULL;
HackshieldComm_t                pHackshieldComm            = NULL;
KickProc_t                        pKickProc                = NULL;

signed int __stdcall new_KickProc( int a1, int a2, int a3 )
{
    return 1;
}

int __stdcall new_HackshieldComm( int hsCommCode, void *Param1, void *Param2 )
{
    if( hsCommCode == 4 || hsCommCode == 5 || hsCommCode == 13 ) //kill!
    {
        if( hsCommCode == 4 ) //replace kick proc
        {
            DWORD *dwParam1 = (DWORD *)Param1;

            pKickProc    = (KickProc_t)*dwParam1;
            *dwParam1    = (DWORD)new_KickProc;
        }

        int iReturn = pHackshieldComm( hsCommCode, Param1, Param2 );

        return 1;
    }

    int iReturn = pHackshieldComm( hsCommCode, Param1, Param2 );

    return iReturn;
}

void HookCommunication( EXCEPTION_POINTERS* pExceptionInfo )
{
    DWORD dwEbp        = pExceptionInfo->ContextRecord->Ebp;
    DWORD dwParam2    = 0;

    __asm
    {
        push eax;
        push edx;
        mov eax, dwEbp;
        mov edx, [eax+0xC];
        mov dwParam2, edx;
        pop edx;
        pop eax;
    }

    if( dwParam2 == 0xA ) //this is the ordinal of some export...hmm..
    {
        pHackshieldComm                        = (HackshieldComm_t)pExceptionInfo->ContextRecord->Eax;
        pExceptionInfo->ContextRecord->Eax    = (DWORD)new_HackshieldComm;
    }

    pExceptionInfo->ContextRecord->Eip        = HS_JMP2;

    return;
}

PVOID pContextHandler = NULL;

LONG WINAPI ***ExceptionHandler( EXCEPTION_POINTERS* pExceptionInfo )
{
    if( pExceptionInfo->ExceptionRecord->ExceptionCode != EXCEPTION_SINGLE_STEP )
    {
        return EXCEPTION_CONTINUE_SEARCH;
    }

    if( pExceptionInfo->ExceptionRecord->ExceptionAddress == (PVOID)HS_JMP ) 
    {
        HookCommunication( pExceptionInfo );
        return EXCEPTION_CONTINUE_EXECUTION;
    }

    return EXCEPTION_CONTINUE_SEARCH;
}

void InitContextHook()
{
    pContextHandler = AddVectoredExceptionHandler( 0x50BE17, ***ExceptionHandler );

    CONTEXT Context;
    Context.ContextFlags = CONTEXT_DEBUG_REGISTERS;
    GetThreadContext(GetCurrentThread(), &Context);
    Context.Dr0 = HS_JMP;
    Context.Dr7 = (1<<0)|(1<<2)|(1<<4)|(1<<6);
    SetThreadContext(GetCurrentThread(), &Context);
}  
//-----------------------------------------END HACKSHIELD BYPASS--------------------------------------------
#12 ·
Quote Originally Posted by too_good_4u View Post
where ca i put this codes?

Your soo getting banned.
Bumping +1 week old threads AND hack shield bypass's are basicly dead.
#15 ·
Posts 1–15 of 16 · Page 1 of 2
This thread is closed for replies.

Tags for this Thread

#bypass#hackshield#maplestory#pro#warrock
Talk with us