Hackshield Bypass FULL SOURCE

[BadBurrito]

Full HS - BYPASS,

How it works:
Look in Engine.exe, just place a simple jump so that Engine thinks everything should be ok.... works for a couple of patches for CA EU

void makejump(BYTE *src, const BYTE *dst)
{
DWORD dwback;
VirtualProtect(src, 5, PAGE_EXECUTE_READWRITE, &dwback);
src[0] = 0xE9;
*(DWORD*)(src+1) = (DWORD)(dst - src) - 5;
}

void badburrito()
{
    DWORD jump_source = 0;
    DWORD jump_dest = 0;

 	DWORD dwEngineEntryPoint = (DWORD)GetModuleHandle( "Engine.exe" );
	DWORD dwEngineCodeSize = GetSizeofCode( "Engine.exe" );

    jump_source = dwFindPattern(dwEngineEntryPoint,dwEngineCodeSize,(BYTE*)"\x8B\x41\x00\x3B\xC3\x0F\x84\x00\x00\x00\x00\x3D\x00\x00\x00\x00\x75\x0D","xx?xxxx????x????xx");
    jump_dest = dwFindPattern(dwEngineEntryPoint,dwEngineCodeSize,(BYTE*)"\xE8\x00\x00\x00\x00\x68\x00\x00\x00\x00\xC6\x05\x00\x00\x00\x00\x01\xE8","x????x????xx????xx");


    makejump((BYTE*)jump_source,(BYTE*)jump_dest);
}

[XarutoUsoCrack]

nice job =D

( spam alert ).

Addresses for CABR:

0x52D334
0x52D457

ps: this bypass crash engine when inject.

[supercarz1991]

doesn't that kinda make it pointless to have then?

[Ch40zz-C0d3r]

Its crashing because you change bytes in engine...
Find a way arround it.

[Timboy67678]

EDIT: here is some more reversing for you fine people

[BadBurrito]

Pls tell me if you are using CA EU or not, because for CA EU it works 100 % ...you must not inject it when you just started Engine, you have to wait a few seconds, and yes you can just change the bytes, you can even attach cheat engine and everything else, it is a full bypass...

[Ch40zz-C0d3r]

Pls tell me if you are using CA EU or not, because for CA EU it works 100 % ...you must not inject it when you just started Engine, you have to wait a few seconds, and yes you can just change the bytes, you can even attach cheat engine and everything else, it is a full bypass...

Well I looked at your signature and I hooked that place before too xD
However, if you jump the whole code you jump the initialization of HS and BC so the server will kick you for sure after some mins because there are checks if youre really connected to hs servers. But shouldnt crash at all missed that :P

[BadBurrito]

First I thought the server will kick me, but he does not try it, it will work...

[Ch40zz-C0d3r]

First I thought the server will kick me, but he does not try it, it will work...

Youre sure?? o.0
I tried that before by nopping the call to their driver initialization (same region your jumping hehe) but server kicked me lol xD
However if this works then gj :P
Dont have time to test since idc about the game anymore, I did everythign possible and Im done with it now.

[goago90]

i cant even compil it ther are 5 erros what did i wrong ?

[supercarz1991]

Youre sure?? o.0
I tried that before by nopping the call to their driver initialization (same region your jumping hehe) but server kicked me lol xD
However if this works then gj :P
Dont have time to test since idc about the game anymore, I did everythign possible and Im done with it now.

doubt it :P there's always something new and boy do i know of a few

[XarutoUsoCrack]

i know all hackshield sdk and shit, i can put hackshield in anything, simple as just console application.

you can nop hs initialize, but have a server sided network part, which check initialized thread's whit it, you can nop hs initialize function and combat arms will still runining whitout hackshield and no server dc, this will happen if nexon don't have check in that part.

[goago90]

pleas help me

how can i put it into a dll i want to use it to get addys and to test may hack but i dont know how to bing it in

[Ch40zz-C0d3r]

i know all hackshield sdk and shit, i can put hackshield in anything, simple as just console application.

you can nop hs initialize, but have a server sided network part, which check initialized thread's whit it, you can nop hs initialize function and combat arms will still runining whitout hackshield and no server dc, this will happen if nexon don't have check in that part.

They HAD the check before, I used that method 1 year ago to reclass / debug the game to get some deeper into the S2S stuff (and its calls) but I dced after 2 mins with the message "Your connection has been ended."
But it seems like these idiots took out the check -.-

[supercarz1991]

pleas help me

how can i put it into a dll i want to use it to get addys and to test may hack but i dont know how to bing it in

chances are, if you don't know how to copy paste and compile. and fix any small errors that come from that c+p, then your not going to have a bypass