Bypass Source Code

[TheKamikazes]

DAm this is a mighty fine guide

thanked

[whitten]

good guide.
thanks

[FORCE™]

good guide.
thanks

well there is that very good looking thanks button

Edit: if u didnt ban me this would have been released yesterday

[downdowndown]

Wow, so much for mods. Lazy noobs do your job !! BANHAMMER ME PLZ!123456

[JIGS4W]

Helpful, detailed guide... I like it although I didn't read anything except the first paragraph

[FORCE™]

Helpful, detailed guide... I like it although I didn't read anything except the first paragraph

i dont blame you, this is only for beginer coders or people that alredy code

[darkonezu]

it's for both actually even stronger hackers could rethink some things from it

[LegendaryAbbo]

does it really matter

Edit: so can anyone make a working bypass from this.............


amd btw i think my friend will be making a hack with chams and wallhack soon so i migh release it

I just wanted to know, that's all :/

[tension]

Hi, I'm the admin of ************, and I made this. Here is the original thread. Please credit me next time.

Board Message

[purokiller]

tnx for the information this would help many to do bypasses good job you got my thanks

[why06]

Hi, I'm the admin of ************, and I made this. Here is the original thread. Please credit me next time.

Board Message

We are sorry Th4natoS. Sometimes people leech things and just post them without taking the extra time to make sure the authors are properly credited. We really appreciate this information though thanks a lot.

I even noticed you said not to leech it...which is really a shame that it ended up over here with no credits at all.

[lolz2much]

maybe i can help out

2) V3Pro32s.dll:

    * This is the hacking tool detection interface dll
    * This starts the hacking tool detection engine
    * This is helps the scanning of known hack signatures
    * A very important file. This could interrupt the Hack Shield driver if correctly intercepted

addies for various functions of above dll
_AhnGetFileEntry	0x1000bb9c	0x0000bb9c	30 (0x1e)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnBootInformation	0x1000b16f	0x0000b16f	1 (0x1)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnCheckBootSector	0x1000b177	0x0000b177	2 (0x2)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnCheckDefaultExtensions	0x1000124a	0x0000124a	3 (0x3)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnCheckFile	0x1000ba5e	0x0000ba5e	4 (0x4)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnCheckMemory	0x1000b160	0x0000b160	5 (0x5)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnCheckProcess	0x1000b79d	0x0000b79d	6 (0x6)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnGetBootRepairStatus	0x1000b5b9	0x0000b5b9	7 (0x7)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnGetDefaultExtensions	0x1000126b	0x0000126b	8 (0x8)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnGetEngineDate	0x100013fd	0x000013fd	9 (0x9)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnGetEngineDateString	0x1000145c	0x0000145c	10 (0xa)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnGetEngineDateValue	0x10001449	0x00001449	11 (0xb)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnGetExtRepairStatus	0x1000b287	0x0000b287	12 (0xc)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnGetRepairStatus	0x1000b1b4	0x0000b1b4	13 (0xd)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnGetVersion	0x100014f7	0x000014f7	14 (0xe)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnGetVirusFileCureData	0x1000120b	0x0000120b	15 (0xf)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnGetVirusName	0x100010d1	0x000010d1	16 (0x10)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnGetVirusName32	0x1000108c	0x0000108c	17 (0x11)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnGetVirusNameStr	0x1000116c	0x0000116c	18 (0x12)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnGetVirusNameStr32	0x100010ab	0x000010ab	19 (0x13)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnInitVaccineEngine	0x1000b600	0x0000b600	20 (0x14)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnRepairBootSector	0x1000b17e	0x0000b17e	21 (0x15)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnRepairFile	0x1000eea0	0x0000eea0	22 (0x16)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnRepairMemory	0x1000b167	0x0000b167	23 (0x17)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnSetDefaultOption	0x1000ba89	0x0000ba89	24 (0x18)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
AhnSetExtensions	0x10001295	0x00001295	25 (0x19)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
PV3CALGetInfoAddr	0x1000a0fe	0x0000a0fe	26 (0x1a)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
V3CALGetInfo	0x1000a0c2	0x0000a0c2	27 (0x1b)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
V3CALGetShowInfo	0x1000a080	0x0000a080	28 (0x1c)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll	
V3CALGetTotalInfoCount	0x1000a0b9	0x0000a0b9	29 (0x1d)	v3pro32s.dll	C:\Nexon\Combat Arms\HShield\v3pro32s.dll

4) psapi.dll:

    * The process status helper dll
    * Helps scan process signatures and control process functions



EmptyWorkingSet	0x76a61e20	0x00001e20	1 (0x1)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
EnumDeviceDrivers	0x76a615a3	0x000015a3	2 (0x2)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
EnumPageFilesA	0x76a63b3c	0x00003b3c	3 (0x3)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
EnumPageFilesW	0x76a639cd	0x000039cd	4 (0x4)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
EnumProcesses	0x76a634a9	0x000034a9	6 (0x6)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
EnumProcessModules	0x76a61a8a	0x00001a8a	5 (0x5)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
GetDeviceDriverBaseNameA	0x76a61748	0x00001748	7 (0x7)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
GetDeviceDriverBaseNameW	0x76a61823	0x00001823	8 (0x8)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
GetDeviceDriverFileNameA	0x76a616cd	0x000016cd	9 (0x9)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
GetDeviceDriverFileNameW	0x76a617c7	0x000017c7	10 (0xa)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
GetMappedFileNameA	0x76a61945	0x00001945	11 (0xb)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
GetMappedFileNameW	0x76a6187f	0x0000187f	12 (0xc)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
GetModuleBaseNameA	0x76a61d2f	0x00001d2f	13 (0xd)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
GetModuleBaseNameW	0x76a61cb2	0x00001cb2	14 (0xe)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
GetModuleFileNameExA	0x76a61c4a	0x00001c4a	15 (0xf)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
GetModuleFileNameExW	0x76a61bcd	0x00001bcd	16 (0x10)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
GetModuleInformation	0x76a61d97	0x00001d97	17 (0x11)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
GetPerformanceInfo	0x76a6382d	0x0000382d	18 (0x12)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
GetProcessImageFileNameA	0x76a637a9	0x000037a9	19 (0x13)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
GetProcessImageFileNameW	0x76a6371b	0x0000371b	20 (0x14)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
GetProcessMemoryInfo	0x76a635c2	0x000035c2	21 (0x15)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
GetWsChanges	0x76a636e1	0x000036e1	22 (0x16)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
InitializeProcessForWsWatch	0x76a6369d	0x0000369d	23 (0x17)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
QueryWorkingSet	0x76a61e8b	0x00001e8b	24 (0x18)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll	
QueryWorkingSetEx	0x76a61ec7	0x00001ec7	25 (0x19)	psapi.dll	C:\Nexon\Combat Arms\HShield\psapi.dll

[broly7]

Lolz2much. If i can unpack EHSCV.DLL (THEMIDA) It would be fine?

[lolz2much]

Lolz2much. If i can unpack EHSCV.DLL (THEMIDA) It would be fine?

i can already get all the addressesout of it but none are labeled

look here

	0x10000000		0 (0x0)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
1	0x1000af00	0x0000af00	1 (0x1)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
10	0x1000ca80	0x0000ca80	10 (0xa)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
12	0x1000ca40	0x0000ca40	12 (0xc)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
13	0x1000ad60	0x0000ad60	13 (0xd)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
14	0x1000c760	0x0000c760	14 (0xe)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
15	0x10009c70	0x00009c70	15 (0xf)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
16	0x1000c7c0	0x0000c7c0	16 (0x10)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
17	0x1000aba0	0x0000aba0	17 (0x11)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
18	0x1000ca60	0x0000ca60	18 (0x12)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
19	0x1000c500	0x0000c500	19 (0x13)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
2	0x1000c980	0x0000c980	2 (0x2)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
20	0x1000cd70	0x0000cd70	20 (0x14)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
21	0x1000d080	0x0000d080	21 (0x15)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
22	0x1000ce70	0x0000ce70	22 (0x16)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
23	0x1000b5f0	0x0000b5f0	23 (0x17)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
24	0x1000b090	0x0000b090	24 (0x18)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
25	0x1000d0b0	0x0000d0b0	25 (0x19)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
26	0x1000ce90	0x0000ce90	26 (0x1a)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
3	0x1000a930	0x0000a930	3 (0x3)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
4	0x1000c630	0x0000c630	4 (0x4)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
5	0x1000a960	0x0000a960	5 (0x5)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
6	0x10008dc0	0x00008dc0	6 (0x6)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
7	0x1000a980	0x0000a980	7 (0x7)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
8	0x1000ca20	0x0000ca20	8 (0x8)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll	
9	0x1000ac80	0x0000ac80	9 (0x9)	EHSvc.dll	C:\Nexon\Combat Arms\HShield\EHSvc.dll

all the functions have a nuber label instead of a name
also they dont work in there respective number order that list is in the order the functions are called, so they deff dont get called in numerical order

[lolz2much]

on a side note i see no refrences for checking cshell.dll which is were most of the addresses used for the hacks are

im thinking if we can stop the hshield from checking the engine version that when there is an update when can keep using the old engine and cshell.dll thus sortof unpatching old hack addies.


still need to do a lil more digging though to see if it is actually doable