[HELP]Bypassing PunkBuster

Hey; its been a couple months sense I had last logged on here.
Just wondering how we bypass WarRock for memory editing now. I was working on a bypass awhile ago, but then I got a new full-time job, and forget everything that I worked on.

If someone could just post if its public; or if private, then contact me privately. It would help alot.

Thanks
-Marneus901

you can find it just look at the topics !

Originally Posted by IIDracula

you can find it just look at the topics !

Dont talk to me that way, provide a link if you think theres one about it that actually works.
I fucking checked over 10 pages asshole >_>

Originally Posted by IIDracula

you can find it just look at the topics !

no there isn't. this is private knowledge.

hey add me on MSN:
olie122333@dutchonline****************

or xfire:
olie122333

I will teach you (AND ONLY YOU) how to bypass.

NO ONE ELSE CONTACT ME THROUGH THIS OR THE PM SYSTEM ASKING TO KNOW HOW, OR I WILL REPORT YOU FOR HURASSMENT!

a) Scan Redirection
b) "Turn off hack before scanning" which is idiotic
c) Patch md5 in strings before output encryption
d) Handle all data sent through sendto
e) Handle all data sent through _vsnprintf
f) Do VEH/SEH on data when it gets scanned and return X, Y, or Z for data
g) Redirect function calls of the game itself
h) Forge the entire client, and handle everything (Global PB hack really)

Scan1: Base + 0x40276
Scan2: Base + 0x21C1

Something you should try out, credits to uNrEaL. I think I may also try this, I'll contact you if I get anything ready

E: Yeah, and I think for a start I'm gonna try it with patching those pbcl calls. It seems easy enough

Code:

void __declspec( naked ) new_pbMemScan ( int a1 ,int a2 )
{
    _asm
    {
        MOV dwSaved, EAX        // Preserve EAX
        POP EAX                    // POP EAX, now EAX contains the return address
        MOV dwReturn, EAX        // Sets dwReturn to hold the return address
        CALL ReStore            // Restore Hacks
        MOV EAX, dwSaved        // Restores EAX to the origional value before we popped it
        JMP dwReturn            // We jump back to the address which we saved earlier
    }
}

Something what you should look at, still not working properly
credits to *** cobra

And no, there is no topics at MPGH about bypassing after you left

You got Xfire?

Originally Posted by juppeli

Code:

void __declspec( naked ) new_pbMemScan ( int a1 ,int a2 )
{
    _asm
    {
        MOV dwSaved, EAX        // Preserve EAX
        POP EAX                    // POP EAX, now EAX contains the return address
        MOV dwReturn, EAX        // Sets dwReturn to hold the return address
        CALL ReStore            // Restore Hacks
        MOV EAX, dwSaved        // Restores EAX to the origional value before we popped it
        JMP dwReturn            // We jump back to the address which we saved earlier
    }
}

Something what you should look at, still not working properly
credits to *** cobra

And no, there is no topics at MPGH about bypassing after you left

You got Xfire?

Yea i got XFire - marneus901
But dont you still have my MSN? I jsut forget whos who in over 1,000 contacts adding me >_<
And yea, figured nothing popped up T.T

When i left, i remember leaving with knowing that there were 2 PBCheck functions, one was the original one, and another that also checked that one...
Ive been working on antihack security for LegendGamers Gunz, and an XTRAP Bypass for iGunz (SO DAM CLOSE TOO!). I am almost able to login, but a weird window popsup ;p

@ oli122333, i added you via both xfire and MSN.