PatchedHWID BYPASS
HWID BYPASS
it seems like some people expirenced some Hwid bans.
so here a hwid ban bypasss
I TAKE NO CREDITS FOR THIS! "DONT ask me in it cause i dont know anything in it XD"
the creater, credits to:lowHertz
Backup and edit the registry key (regedit.exe):
"HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptograph y"
-> MachineGuid (replace some numbers/letters with other ones...)
Then go in the "APB Reloaded\Binaries\" folder and backup and delete:
-> preferences.bin
-> Last_Session.bin
By backup I mean save the Guid somewhere (txt file,...) and the files in some
random folder (copy/paste).
---------------------------------------------------------------------
And that's it!! Now you can play APB again and again and again and again...happy cheating
Here is the "Happy meal" for da reversers:
asm:
10D75BE7 |. /EB 07 JMP SHORT 10D75BF0
10D75BE9 | |8DA424 0000 LEA ESP,[ESP]
10D75BF0 |> \B1 7F /MOV CL,7F
10D75BF2 |. 2AC8 |SUB CL,AL
10D75BF4 |. 3088 3CD111 |XOR BYTE PTR DS:[EAX+1211D13C],CL
10D75BFA |. 40 |INC EAX
10D75BFB |. 83F8 1F |CMP EAX,1F
10D75BFE |.^ 72 F0 \JB SHORT 10D75BF0
10D75C00 |. C605 5CD111 MOV BYTE PTR DS:[1211D15C],0
10D75C07 |> 8D5424 08 LEA EDX,[LOCAL.98]
10D75C0B |. 52 PUSH EDX ; /pResult => OFFSET LOCAL.98
10D75C0C |. 68 01010000 PUSH 101 ; |DesiredAccess = KEY_QUERY_VALUE|100
10D75C11 |. 6A 00 PUSH 0 ; |Reserved = 0
10D75C13 |. 68 3CD11112 PUSH OFFSET 1211D13C ; |SubKey = "Software\Microsoft\Cryptography"
10D75C18 |. 68 02000080 PUSH 80000002 ; |hKey = HKEY_LOCAL_MACHINE
10D75C1D |. FF15 20E0AD CALL DWORD PTR DS:[<&ADVAPI32.RegOpenKeyExA>] ; \ADVAPI32.RegOpenKeyExA
10D75C23 |. 85C0 TEST EAX,EAX
10D75C25 |. 75 78 JNE SHORT 10D75C9F
10D75C27 |. 56 PUSH ESI
...
...
10D75D2E |.^\72 F0 \JB SHORT 10D75D20
10D75D30 |. C605 80D111 MOV BYTE PTR DS:[1211D180],0
10D75D37 |> 68 E41FC311 PUSH OFFSET 11C31FE4 ; ASCII "w+b"
10D75D3C |. 8D4424 04 LEA EAX,[LOCAL.0]
10D75D40 |. 68 70D11112 PUSH OFFSET 1211D170 ; ASCII "preferences.bin"
10D75D45 |. 50 PUSH EAX
10D75D46 |. FF15 FCE7AD CALL DWORD PTR DS:[<&MSVCR90.fopen_s>]
10D75D4C |. 83C4 0C ADD ESP,0C
10D75D4F |. 85C0 TEST EAX,EAX
10D75D51 |. 74 04 JE SHORT 10D75D57
10D75D53 |. 32C0 XOR AL,AL
Strings were crypted with that lame xoring.
"just copied the content to here so people can find it easier"
so here a hwid ban bypasss
I TAKE NO CREDITS FOR THIS! "DONT ask me in it cause i dont know anything in it XD"
the creater, credits to:lowHertz
Backup and edit the registry key (regedit.exe):
"HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptograph y"
-> MachineGuid (replace some numbers/letters with other ones...)
Then go in the "APB Reloaded\Binaries\" folder and backup and delete:
-> preferences.bin
-> Last_Session.bin
By backup I mean save the Guid somewhere (txt file,...) and the files in some
random folder (copy/paste).
---------------------------------------------------------------------
And that's it!! Now you can play APB again and again and again and again...happy cheating
Here is the "Happy meal" for da reversers:
asm:
10D75BE7 |. /EB 07 JMP SHORT 10D75BF0
10D75BE9 | |8DA424 0000 LEA ESP,[ESP]
10D75BF0 |> \B1 7F /MOV CL,7F
10D75BF2 |. 2AC8 |SUB CL,AL
10D75BF4 |. 3088 3CD111 |XOR BYTE PTR DS:[EAX+1211D13C],CL
10D75BFA |. 40 |INC EAX
10D75BFB |. 83F8 1F |CMP EAX,1F
10D75BFE |.^ 72 F0 \JB SHORT 10D75BF0
10D75C00 |. C605 5CD111 MOV BYTE PTR DS:[1211D15C],0
10D75C07 |> 8D5424 08 LEA EDX,[LOCAL.98]
10D75C0B |. 52 PUSH EDX ; /pResult => OFFSET LOCAL.98
10D75C0C |. 68 01010000 PUSH 101 ; |DesiredAccess = KEY_QUERY_VALUE|100
10D75C11 |. 6A 00 PUSH 0 ; |Reserved = 0
10D75C13 |. 68 3CD11112 PUSH OFFSET 1211D13C ; |SubKey = "Software\Microsoft\Cryptography"
10D75C18 |. 68 02000080 PUSH 80000002 ; |hKey = HKEY_LOCAL_MACHINE
10D75C1D |. FF15 20E0AD CALL DWORD PTR DS:[<&ADVAPI32.RegOpenKeyExA>] ; \ADVAPI32.RegOpenKeyExA
10D75C23 |. 85C0 TEST EAX,EAX
10D75C25 |. 75 78 JNE SHORT 10D75C9F
10D75C27 |. 56 PUSH ESI
...
...
10D75D2E |.^\72 F0 \JB SHORT 10D75D20
10D75D30 |. C605 80D111 MOV BYTE PTR DS:[1211D180],0
10D75D37 |> 68 E41FC311 PUSH OFFSET 11C31FE4 ; ASCII "w+b"
10D75D3C |. 8D4424 04 LEA EAX,[LOCAL.0]
10D75D40 |. 68 70D11112 PUSH OFFSET 1211D170 ; ASCII "preferences.bin"
10D75D45 |. 50 PUSH EAX
10D75D46 |. FF15 FCE7AD CALL DWORD PTR DS:[<&MSVCR90.fopen_s>]
10D75D4C |. 83C4 0C ADD ESP,0C
10D75D4F |. 85C0 TEST EAX,EAX
10D75D51 |. 74 04 JE SHORT 10D75D57
10D75D53 |. 32C0 XOR AL,AL
Strings were crypted with that lame xoring.
"just copied the content to here so people can find it easier"
so any idea how to use this? also i dont understand this part---> HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptograph y"
-> MachineGuid (replace some numbers/letters with other ones...) if you can make a video it will help us!!!
-> MachineGuid (replace some numbers/letters with other ones...) if you can make a video it will help us!!!
Dude i have no idea how can you call your self hacker or anything else when you don't know whats regedit.exe....
dude i know what regedit.exe is but i dont know wtf are u talking up there ^
gul i will send u a message in a few moments.
yh send me one too buddy
i didnt get many message? and if your going to send one anyways please make it simple abut how to use that and if i will get ban or not so far i am w8ing to see if anyone has done this and if it worked or not -_-
Originally Posted by gul
i didnt get many message? and if your going to send one anyways please make it simple abut how to use that and if i will get ban or not so far i am w8ing to see if anyone has done this and if it worked or not -_-
This is the directory you are supposed to go to in the regedit.exe program.
Just do a search on your computer for regedit, then it should find it, open it.
Go to that directory and select the folder Cryptography, in the on the right you will find
the file MachineGuid.
Double click MachineGuid and "(replace some numbers/letters with other ones...)"
Then click OK.
Its not too hard, give it a go.
I am sure that you can handle the rest
Oh and I don't think doing this is necessary unless you have actually been HWID banned.
Originally Posted by JoeSheep
"HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptog raph y"
This is the directory you are supposed to go to in the regedit.exe program.
Just do a search on your computer for regedit, then it should find it, open it.
Go to that directory and select the folder Cryptography, in the on the right you will find
the file MachineGuid.
Double click MachineGuid and "(replace some numbers/letters with other ones...)"
Then click OK.
Its not too hard, give it a go.
I am sure that you can handle the rest
Oh and I don't think doing this is necessary unless you have actually been HWID banned.
This is the directory you are supposed to go to in the regedit.exe program.
Just do a search on your computer for regedit, then it should find it, open it.
Go to that directory and select the folder Cryptography, in the on the right you will find
the file MachineGuid.
Double click MachineGuid and "(replace some numbers/letters with other ones...)"
Then click OK.
Its not too hard, give it a go.
I am sure that you can handle the rest
Oh and I don't think doing this is necessary unless you have actually been HWID banned.
i can get unbanned using this tips?
So i did all of these steps exactly as you stated and when itry to log in with two of my banned accounts it still says this acount is blocked error code 10008 or something like that.. do they only HWID ban? if not then is it possible that i can't get unbanned? :/
You use this when you are HWID banned so you can create a new account, it won't unban any of your acounts.
Oh alright thanks man
Not work for me,please help
@Blitz
Requesting this be stickied. People are repeatedly creating new topics asking how to do this.
Requesting this be stickied. People are repeatedly creating new topics asking how to do this.
This thread is closed for replies.
