DWORD OldProtection;
void MEMwrite(void *adr, void *ptr, int size)
{
VirtualProtect(adr,size,PAGE_EXECUTE_READWRITE, &OldProtection);
memcpy(adr,ptr,size);
VirtualProtect(adr,size,OldProtection, &OldProtection);
}
void BYPASS(void)
{
long EhSvc = (long)GetModuleHandleA("EhSvc.dll");
MEMwrite((void *)(EhSvc+0xE3180),(void*)(PBYTE)"\x60\x1D\x00\x10" ,4); //Anti ASM Scan
MEMwrite((void *)(EhSvc+0xE3188),(void*)(PBYTE)"\x88\x31\x0E\x10" ,4); //CheatEngine
MEMwrite((void *)(EhSvc+0xE31E8),(void*)(PBYTE)"\x50\x24\x00\x10" ,4); //Unhook SSS
MEMwrite((void *)(EhSvc+0xE3540),(void*)(PBYTE)"\xA0\x36\x0E\x10" ,4); //Unhook DIP
MEMwrite((void *)(EhSvc+0xE3544),(void*)(PBYTE)"\x88\x36\x0E\x10" ,4); //Dlljump1
MEMwrite((void *)(EhSvc+0xE36C8),(void*)(PBYTE)"\x4C\x37\x0E\x10" ,4); //Dlljump2
MEMwrite((void *)(EhSvc+0xE40C4),(void*)(PBYTE)"\x90",1); //Anti Restore
MEMwrite((void *)(EhSvc+0xE5D84),(void*)(PBYTE)"\xD0\x1A\x01\x10" ,4); //Antidt1
MEMwrite((void *)(EhSvc+0xE60B0),(void*)(PBYTE)"\x9B\xF0\x20\x10" ,4); // 2
MEMwrite((void *)(EhSvc+0xFB34C),(void*)(PBYTE)"\xD0\x1A\x01\x10" ,4); // 3
MEMwrite((void *)(EhSvc+0xFD02C),(void*)(PBYTE)"\xEC\xCE\x0B\x10" ,4); // 4
MEMwrite((void *)(EhSvc+0xFD030),(void*)(PBYTE)"\x7C\xD0\x0B\x10" ,4); // 5
MEMwrite((void *)(EhSvc+0xFD034),(void*)(PBYTE)"\xFC\xD3\x0B\x10" ,4); // 6
MEMwrite((void *)(EhSvc+0xFD0A8),(void*)(PBYTE)"\x00\xF5\x0B\x10" ,4); // 7
MEMwrite((void *)(EhSvc+0xFDDB0),(void*)(PBYTE)"\xB8\xD9\x0F\x10" ,4); // 8
MEMwrite((void *)(EhSvc+0xFDDB4),(void*)(PBYTE)"\x30\xD9\x0F\x10" ,4); // 9
MEMwrite((void *)(EhSvc+0xFDDB8),(void*)(PBYTE)"\x1C\xE0\x0F\x10" ,4); // 10
MEMwrite((void *)(EhSvc+0xFDDBC),(void*)(PBYTE)"\x3D\xE0\x0F\x10" ,4); // 11
MEMwrite((void *)(EhSvc+0xFDDC0),(void*)(PBYTE)"\x10\xE0\x0F\x10" ,4); // 12
MEMwrite((void *)(EhSvc+0xFDDC4),(void*)(PBYTE)"\x24\xD9\x0F\x10" ,4); // 13
MEMwrite((void *)(EhSvc+0xFDDC8),(void*)(PBYTE)"\x20\xD9\x0F\x10" ,4); // 14
MEMwrite((void *)(EhSvc+0xE2F43),(void*)(PBYTE)"\x90",1); // 15
MEMwrite((void *)(EhSvc+0xE3D0B),(void*)(PBYTE)"\x90",1); // 16
MEMwrite((void *)(EhSvc+0xED10F),(void*)(PBYTE)"\x90",1); // 17
}
void Loop(void)
{
for(;
{
long EhSvc = (long)GetModuleHandleA("EhSvc.dll");
if(EhSvc!=0)
{
BYPASS();
}
Sleep(20);
}
}
Originally Posted by TheCamels8
