HWID BYPASS

it seems like some people expirenced some Hwid bans.
so here a hwid ban bypasss




I TAKE NO CREDITS FOR THIS! "DONT ask me in it cause i dont know anything in it XD"
the creater, credits to:lowHertz


Backup and edit the registry key (regedit.exe):

"HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptograph y"
-> MachineGuid (replace some numbers/letters with other ones...)

Then go in the "APB Reloaded\Binaries\" folder and backup and delete:
-> preferences.bin
-> Last_Session.bin

By backup I mean save the Guid somewhere (txt file,...) and the files in some
random folder (copy/paste).

---------------------------------------------------------------------

And that's it!! Now you can play APB again and again and again and again...happy cheating


Here is the "Happy meal" for da reversers:
asm:
10D75BE7 |. /EB 07 JMP SHORT 10D75BF0
10D75BE9 | |8DA424 0000 LEA ESP,[ESP]
10D75BF0 |> \B1 7F /MOV CL,7F
10D75BF2 |. 2AC8 |SUB CL,AL
10D75BF4 |. 3088 3CD111 |XOR BYTE PTR DS:[EAX+1211D13C],CL
10D75BFA |. 40 |INC EAX
10D75BFB |. 83F8 1F |CMP EAX,1F
10D75BFE |.^ 72 F0 \JB SHORT 10D75BF0
10D75C00 |. C605 5CD111 MOV BYTE PTR DS:[1211D15C],0
10D75C07 |> 8D5424 08 LEA EDX,[LOCAL.98]
10D75C0B |. 52 PUSH EDX ; /pResult => OFFSET LOCAL.98
10D75C0C |. 68 01010000 PUSH 101 ; |DesiredAccess = KEY_QUERY_VALUE|100
10D75C11 |. 6A 00 PUSH 0 ; |Reserved = 0
10D75C13 |. 68 3CD11112 PUSH OFFSET 1211D13C ; |SubKey = "Software\Microsoft\Cryptography"
10D75C18 |. 68 02000080 PUSH 80000002 ; |hKey = HKEY_LOCAL_MACHINE
10D75C1D |. FF15 20E0AD CALL DWORD PTR DS:[<&ADVAPI32.RegOpenKeyExA>] ; \ADVAPI32.RegOpenKeyExA
10D75C23 |. 85C0 TEST EAX,EAX
10D75C25 |. 75 78 JNE SHORT 10D75C9F
10D75C27 |. 56 PUSH ESI
...
...
10D75D2E |.^\72 F0 \JB SHORT 10D75D20
10D75D30 |. C605 80D111 MOV BYTE PTR DS:[1211D180],0
10D75D37 |> 68 E41FC311 PUSH OFFSET 11C31FE4 ; ASCII "w+b"
10D75D3C |. 8D4424 04 LEA EAX,[LOCAL.0]
10D75D40 |. 68 70D11112 PUSH OFFSET 1211D170 ; ASCII "preferences.bin"
10D75D45 |. 50 PUSH EAX
10D75D46 |. FF15 FCE7AD CALL DWORD PTR DS:[<&MSVCR90.fopen_s>]
10D75D4C |. 83C4 0C ADD ESP,0C
10D75D4F |. 85C0 TEST EAX,EAX
10D75D51 |. 74 04 JE SHORT 10D75D57
10D75D53 |. 32C0 XOR AL,AL

Strings were crypted with that lame xoring.



"just copied the content to here so people can find it easier"