[REQUEST]Need a Bypass source for warrock hack

Posts 1–6 of 6 · Page 1 of 1
[REQUEST]Need a Bypass source for warrock hack
[Choob need help]Hey Guys i need a bypass source for c++ !! I created yesterday a Warrock Hack but it does not work because the hack is detected after 5 minutes and then closes Warrock pls help me .... . I use this Bypass source :

[PHP]void Bypass ()
{
long EhSvc = (long)GetModuleHandleA("EhSvc.dll");
if(EhSvc!=0)
{
DWORD oldproc;
int EhPtr = 0xC7758;//Constant
int Memory1 =(EhSvc+0xC7715);
int Memory2 =(EhSvc+0xC7719);
int Memory3 =(EhSvc+0xC7739);
int Memory4 =(EhSvc+0xC7754);
int Memory5 =(EhSvc+0xC7758);
int Memory6 =(EhSvc+0xCED40);
int Memory7 =(EhSvc+0xD13F8);
int Memory8 =(EhSvc+0xD2E08);
int Memory9 =(EhSvc+0xD2E40);
int Memory10 =(EhSvc+0xC7570);
int Memory11 =(EhSvc+0xD2E40);
int Memory12 =(EhSvc+0xC62F8);
int Memory13 =(EhSvc+0xCD8FC);
int Memory14 =(EhSvc+0xCD5F8);
int Memory15 =(EhSvc+0xD0F40);
int Memory16 =(EhSvc+0xD3DF1);
int EhY = EhSvc+EhPtr-0x20;
int Eh0 = EhSvc+EhPtr-0x44;
int EhX = EhSvc+EhPtr-0x40;

VirtualProtect((void*)(Memory1),0x6,PAGE_EXECUTE_R EADWRITE,&oldproc);
*(DWORD*)(Memory1) = 4;
VirtualProtect((void*)(Memory2),0x6,PAGE_EXECUTE_R EADWRITE,&oldproc);
*(DWORD*)(Memory2) = 4;
VirtualProtect((void*)(Memory3),0x6,PAGE_EXECUTE_R EADWRITE,&oldproc);
*(DWORD*)(Memory3) = 4;
VirtualProtect((void*)(Memory4),0x6,PAGE_EXECUTE_R EADWRITE,&oldproc);
*(DWORD*)(Memory4) = 4;
VirtualProtect((void*)(Memory5),0x6,PAGE_EXECUTE_R EADWRITE,&oldproc);
*(DWORD*)(Memory5) = 4;
VirtualProtect((void*)(Memory6),0x6,PAGE_EXECUTE_R EADWRITE,&oldproc);
*(DWORD*)(Memory6) = 4;
VirtualProtect((void*)(Memory7),0x6,PAGE_EXECUTE_R EADWRITE,&oldproc);
*(DWORD*)(Memory7) = 4;
VirtualProtect((void*)(Memory8),0x6,PAGE_EXECUTE_R EADWRITE,&oldproc);
*(DWORD*)(Memory8) = 4;
VirtualProtect((void*)(Memory9),0x6,PAGE_EXECUTE_R EADWRITE,&oldproc);
*(DWORD*)(Memory9) = 4;
VirtualProtect((void*)(Memory10),0x6,PAGE_EXECUTE_ READWRITE,&oldproc);
*(DWORD*)(Memory10) = 4;
VirtualProtect((void*)(Memory11),0x6,PAGE_EXECUTE_ READWRITE,&oldproc);
*(DWORD*)(Memory11) = 4;
VirtualProtect((void*)(Memory12),0x6,PAGE_EXECUTE_ READWRITE,&oldproc);
*(DWORD*)(Memory12) = 4;
VirtualProtect((void*)(Memory13),0x6,PAGE_EXECUTE_ READWRITE,&oldproc);
*(DWORD*)(Memory13) = 4;
VirtualProtect((void*)(Memory14),0x6,PAGE_EXECUTE_ READWRITE,&oldproc);
*(DWORD*)(Memory14) = 4;
VirtualProtect((void*)(Memory15),0x6,PAGE_EXECUTE_ READWRITE,&oldproc);
*(DWORD*)(Memory15) = 4;
VirtualProtect((void*)(Memory16),0x6,PAGE_EXECUTE_ READWRITE,&oldproc);
*(DWORD*)(Memory16) = 4;

}
}[/PHP]
Is this code detected ?

Please help me ...

Thanks to all who have read this post!
who know a new undetected Bypass source ?
Quote Originally Posted by taylan View Post
[Choob need help]Hey Guys i need a bypass source for c++ !! I created yesterday a Warrock Hack but it does not work because the hack is detected after 5 minutes and then closes Warrock pls help me .... . I use this Bypass source
I don't get it, you can create hax, but can't make a bypass? :T

Or, do you want me to fix that up for you?

"Hey guys, here's this hack, and can you make a bypass for me?. Thanks"
Honestly, if you said that, you probably would've gotten more help. O:

We've got another Dylan ovar here gais.
well bypasses are a lot harder to make than hacks but this choob probbally c&p that bypass and his entire hack
Quote Originally Posted by zhaoyun333 View Post
well bypasses are a lot harder to make than hacks but this choob probbally c&p that bypass and his entire hack
No probably to it. I mean come on. -_- If it's detected, you'd atleast know where to start looking to fix it.
Try opening hackshields dll in a debugger?
One of the first subroutines in the dll is a jump table which you can easily patch and the whole thing is disabled. Or you can use this information I will gladly give to anyone, and you must hope its correct.

#define AssemblyRewriteCheck 0x0001BC28

One of many checks that hackshield does. well its not actually the check function but it jmps to the check function. You want it to not jmp...
 
Spoiler
0x90 (x2)

#define SelfCheck 0x0000FC60
Self check, patch this function to prevent Hackshield knowing you patched the previous.
 
Spoiler
Open a debugger up...


A few checks...
#define ADR_CHEATENGINE 0x00054A14 // E9 7E 0A 00 00
#define ADR_UNHOOKDIP 0x000650A7 // EB
#define ADR_UNHOOKSSS 0x000650B1 // EB
#define ADR_ANTIASMSCAN 0x0001BC28 // 90 90
#define ADR_ANTIRESTOREPAGE1 0x0005F784 // EB
#define ADR_ANTIRESTOREPAGE2 0x0005F80E // EB
#define ADR_DLLJU***HECK1 0x00066931 // EB
#define ADR_DLLJU***HECK2 0x00066B79 // EB

Once your done telling your friends about you leet new hack that you obviously done all by yourself, credit Croner.
Posts 1–6 of 6 · Page 1 of 1
This thread is closed for replies.

Similar Threads

Tags for this Thread

None

Need help?