Definitely not GetModuleHandle thats detected.
Code:
while (GetModuleHandle("CShell") == NULL)
Sleep(10);
char t1[64];
sprintf(t1, "%p", GetModuleHandle("CShell"));
MessageBox(0, t1, "Pointer value", MB_OK);
Screenshot
[IMG]http://i203.photobucke*****m/albums/aa29/Baxter_esa/xtrapbypassed_zps447e1894.png[/IMG]
I'll release the source after i test it more.
I used a different method for undetecting the base.