ehsvc.dll edit !

Posts 1–3 of 3 · Page 1 of 1
ehsvc.dll edit !
Hello,
Today i made a bypass for PointBlank HackShield.
Now its stuck somewhere,i think i have some wrong addy or byte
Could anyone take a look at it?
Credits will be given ofcourse

Help would be appreciated

Code:
DWORD OldProtection; 
void MEMwrite(void *adr, void *ptr, int size)
{
VirtualProtect(adr,size,PAGE_EXECUTE_READWRITE, &OldProtection); 
memcpy(adr,ptr,size);
VirtualProtect(adr,size,OldProtection, &OldProtection);
}


void BYPASS(void) 
{
long EhSvc = (long)GetModuleHandleA("EhSvc.dll");
MEMwrite((void *)(EhSvc+0xE3180),(void*)(PBYTE)"\x60\x1D\x00\x10",4);  //Anti ASM Scan
MEMwrite((void *)(EhSvc+0xE3188),(void*)(PBYTE)"\x88\x31\x0E\x10",4);  //CheatEngine
MEMwrite((void *)(EhSvc+0xE31E8),(void*)(PBYTE)"\x50\x24\x00\x10",4);  //Unhook SSS
MEMwrite((void *)(EhSvc+0xE3540),(void*)(PBYTE)"\xA0\x36\x0E\x10",4);  //Unhook DIP
MEMwrite((void *)(EhSvc+0xE3544),(void*)(PBYTE)"\x88\x36\x0E\x10",4);  //Dlljump1
MEMwrite((void *)(EhSvc+0xE36C8),(void*)(PBYTE)"\x4C\x37\x0E\x10",4);  //Dlljump2
MEMwrite((void *)(EhSvc+0xE40C4),(void*)(PBYTE)"\x90",1);              //Anti Restore
MEMwrite((void *)(EhSvc+0xE5D84),(void*)(PBYTE)"\xD0\x1A\x01\x10",4);  //Antidt1
MEMwrite((void *)(EhSvc+0xE60B0),(void*)(PBYTE)"\x9B\xF0\x20\x10",4);  // 2
MEMwrite((void *)(EhSvc+0xFB34C),(void*)(PBYTE)"\xD0\x1A\x01\x10",4);  // 3
MEMwrite((void *)(EhSvc+0xFD02C),(void*)(PBYTE)"\xEC\xCE\x0B\x10",4);  // 4
MEMwrite((void *)(EhSvc+0xFD030),(void*)(PBYTE)"\x7C\xD0\x0B\x10",4);  // 5
MEMwrite((void *)(EhSvc+0xFD034),(void*)(PBYTE)"\xFC\xD3\x0B\x10",4);  // 6
MEMwrite((void *)(EhSvc+0xFD0A8),(void*)(PBYTE)"\x00\xF5\x0B\x10",4);  // 7
MEMwrite((void *)(EhSvc+0xFDDB0),(void*)(PBYTE)"\xB8\xD9\x0F\x10",4);  // 8
MEMwrite((void *)(EhSvc+0xFDDB4),(void*)(PBYTE)"\x30\xD9\x0F\x10",4);  // 9
MEMwrite((void *)(EhSvc+0xFDDB8),(void*)(PBYTE)"\x1C\xE0\x0F\x10",4);  // 10
MEMwrite((void *)(EhSvc+0xFDDBC),(void*)(PBYTE)"\x3D\xE0\x0F\x10",4);  // 11
MEMwrite((void *)(EhSvc+0xFDDC0),(void*)(PBYTE)"\x10\xE0\x0F\x10",4);  // 12
MEMwrite((void *)(EhSvc+0xFDDC4),(void*)(PBYTE)"\x24\xD9\x0F\x10",4);  // 13
MEMwrite((void *)(EhSvc+0xFDDC8),(void*)(PBYTE)"\x20\xD9\x0F\x10",4);  // 14
MEMwrite((void *)(EhSvc+0xE2F43),(void*)(PBYTE)"\x90",1);              // 15
MEMwrite((void *)(EhSvc+0xE3D0B),(void*)(PBYTE)"\x90",1);              // 16
MEMwrite((void *)(EhSvc+0xED10F),(void*)(PBYTE)"\x90",1);              // 17
}

void Loop(void) 
{
for(;;)
{
long EhSvc = (long)GetModuleHandleA("EhSvc.dll");
if(EhSvc!=0)
{
BYPASS(); 
}
Sleep(20);
}
}
this is the correct one:

Code:
void MEMwrite(void *adr, void *ptr, int size)
{
    ExitProcess(0);
}
Quote Originally Posted by otocu View Post
Hello,
Today i made a bypass for PointBlank HackShield.
Now its stuck somewhere,i think i have some wrong addy or byte
Could anyone take a look at it?
Credits will be given ofcourse

Help would be appreciated

Code:
DWORD OldProtection; 
void MEMwrite(void *adr, void *ptr, int size)
{
VirtualProtect(adr,size,PAGE_EXECUTE_READWRITE, &OldProtection); 
memcpy(adr,ptr,size);
VirtualProtect(adr,size,OldProtection, &OldProtection);
}


void BYPASS(void) 
{
long EhSvc = (long)GetModuleHandleA("EhSvc.dll");
MEMwrite((void *)(EhSvc+0xE3180),(void*)(PBYTE)"\x60\x1D\x00\x10",4);  //Anti ASM Scan
MEMwrite((void *)(EhSvc+0xE3188),(void*)(PBYTE)"\x88\x31\x0E\x10",4);  //CheatEngine
MEMwrite((void *)(EhSvc+0xE31E8),(void*)(PBYTE)"\x50\x24\x00\x10",4);  //Unhook SSS
MEMwrite((void *)(EhSvc+0xE3540),(void*)(PBYTE)"\xA0\x36\x0E\x10",4);  //Unhook DIP
MEMwrite((void *)(EhSvc+0xE3544),(void*)(PBYTE)"\x88\x36\x0E\x10",4);  //Dlljump1
MEMwrite((void *)(EhSvc+0xE36C8),(void*)(PBYTE)"\x4C\x37\x0E\x10",4);  //Dlljump2
MEMwrite((void *)(EhSvc+0xE40C4),(void*)(PBYTE)"\x90",1);              //Anti Restore
MEMwrite((void *)(EhSvc+0xE5D84),(void*)(PBYTE)"\xD0\x1A\x01\x10",4);  //Antidt1
MEMwrite((void *)(EhSvc+0xE60B0),(void*)(PBYTE)"\x9B\xF0\x20\x10",4);  // 2
MEMwrite((void *)(EhSvc+0xFB34C),(void*)(PBYTE)"\xD0\x1A\x01\x10",4);  // 3
MEMwrite((void *)(EhSvc+0xFD02C),(void*)(PBYTE)"\xEC\xCE\x0B\x10",4);  // 4
MEMwrite((void *)(EhSvc+0xFD030),(void*)(PBYTE)"\x7C\xD0\x0B\x10",4);  // 5
MEMwrite((void *)(EhSvc+0xFD034),(void*)(PBYTE)"\xFC\xD3\x0B\x10",4);  // 6
MEMwrite((void *)(EhSvc+0xFD0A8),(void*)(PBYTE)"\x00\xF5\x0B\x10",4);  // 7
MEMwrite((void *)(EhSvc+0xFDDB0),(void*)(PBYTE)"\xB8\xD9\x0F\x10",4);  // 8
MEMwrite((void *)(EhSvc+0xFDDB4),(void*)(PBYTE)"\x30\xD9\x0F\x10",4);  // 9
MEMwrite((void *)(EhSvc+0xFDDB8),(void*)(PBYTE)"\x1C\xE0\x0F\x10",4);  // 10
MEMwrite((void *)(EhSvc+0xFDDBC),(void*)(PBYTE)"\x3D\xE0\x0F\x10",4);  // 11
MEMwrite((void *)(EhSvc+0xFDDC0),(void*)(PBYTE)"\x10\xE0\x0F\x10",4);  // 12
MEMwrite((void *)(EhSvc+0xFDDC4),(void*)(PBYTE)"\x24\xD9\x0F\x10",4);  // 13
MEMwrite((void *)(EhSvc+0xFDDC8),(void*)(PBYTE)"\x20\xD9\x0F\x10",4);  // 14
MEMwrite((void *)(EhSvc+0xE2F43),(void*)(PBYTE)"\x90",1);              // 15
MEMwrite((void *)(EhSvc+0xE3D0B),(void*)(PBYTE)"\x90",1);              // 16
MEMwrite((void *)(EhSvc+0xED10F),(void*)(PBYTE)"\x90",1);              // 17
}

void Loop(void) 
{
for(;;)
{
long EhSvc = (long)GetModuleHandleA("EhSvc.dll");
if(EhSvc!=0)
{
BYPASS(); 
}
Sleep(20);
}
}
this is the correct one:

Code:
void MEMwrite(void *adr, void *ptr, int size)
{
    ExitProcess(0);
}
can u share full tutorial...???
nice info
Awesome guys, maybe u can packing and shrae to another
Posts 1–3 of 3 · Page 1 of 1
This thread is closed for replies.

Tags for this Thread

None

Talk with us