Bypass Source Code

If only i knew how 2 code i woul ty

I think that he've got enough thanks :O
You will make every hackers happy

You're mostly an angel for many of us

You are BEYOND GOD!!!

But you can't beat B O B O!!!

Nice now let's all wait the upcoming hacks

very intresting

usefull post thanks :P

ok guys i found eaglent.sys on my system but its a emtpy file 0 bytes any ideas???

its empty,tyheres nothing at all to look at

Originally Posted by lolz2much

its empty,tyheres nothing at all to look at

then wtf is it for, its got to have some use and i doubt its empty, it might look empty but it has got to have something

im not a expert with files or something but try decompiling it with something or post it to me and i will put it as an attachment on my post so other people can have a look

im telling u its empty see were it says 0 bytes, i even tried opening in notepad it has nothing in it

Originally Posted by lolz2much

im telling u its empty see were it says 0 bytes, i even tried opening in notepad it has nothing in it

rofl sendi, you just got owned.
Anyway, I might have it, where do you find it again? too lazy to look at thread... or maybe I will. BRB, I'll see if I can find it and then find the file.
Nope can't find it, maybe my methods are too caveman.

Originally Posted by lolz2much

im telling u its empty see were it says 0 bytes, i even tried opening in notepad it has nothing in it

delete it and then try playing combat arms, if u cant play then it means that the file does have something

If anyone is seriously interested... I might give you a few clues. Though have to look through my data first if I got any at all XP

Update for EagleNT.sys

this is wat user1 has found so far

Code:

[128:26:30.578][0000082C] [DrvControllerNt][StopDriverNt] d 
[128:26:30.578][0000082C] [DrvController][StopDriver] e, 1 
[128:26:30.578][0000082C] [EagleLib][Eagle_StopDriver] k 
[128:26:30.578][0000082C] [EHSvc][StopService] Eagle_StopDriver() ret = 0
[128:26:30.578][0000082C] [EHSvc][AhnHS_StopService] Success StopService()
[128:26:30.578][0000082C] [EHSvc][AhnHS_StopService] End of AhnHS_StopService()
[128:26:30.578][0000082C] [EagleLib][Eagle_Uninitialize] a 
[128:26:30.578][0000082C] [EagleLib][Eagle_Uninitialize] c 
[128:26:30.578][0000082C] [EagleLib][Eagle_Uninitialize] d 
[128:26:30.578][0000082C] [EagleLib][Eagle_Uninitialize] f 
[128:26:30.593][0000082C] [EagleLib][Eagle_Uninitialize] g 
[128:26:30.593][0000082C] [EagleLib][Eagle_Uninitialize] h, 1 
[128:26:30.593][0000082C] [EHSvc][AhnHS_Uninitialize] Eagle_Uninitialize(), ret = 0
[128:26:30.593][0000082C] [EHSvc][AhnHS_Uninitialize] End of AhnHS_Uninitialize()

fuck sorry for double post

lols
seems very cool
even though im not a coder
i know that its pretty hard to deal with this crap

hey guys i found a link to the hackshield website, you download a trial version from there and maybe u can play around with it

heres the link: HackShield - Hacking Prevention Solutions For Online Games

i found this bypass code, not sure if it works

Code:

#define HS_JMP            0x63B31D 
#define HS_JMP2            0x63B323 
 
typedef int            (__cdecl *HS_GetProcAddress_t)( int hModule, int a2 ); 
typedef int            (__stdcall *HackshieldComm_t )( int, void*, void* ); 
typedef signed int    (__stdcall *KickProc_t)( int a1, int a2, int a3 ); 
 
HS_GetProcAddress_t                pHS_GetProcAddress        = NULL; 
HackshieldComm_t                pHackshieldComm            = NULL; 
KickProc_t                        pKickProc                = NULL; 
 
signed int __stdcall new_KickProc( int a1, int a2, int a3 ) 
{ 
    return 1; 
} 
 
int __stdcall new_HackshieldComm( int hsCommCode, void *Param1, void *Param2 ) 
{ 
    if( hsCommCode == 4 || hsCommCode == 5 || hsCommCode == 13 ) //kill! 
    { 
        if( hsCommCode == 4 ) //replace kick proc 
        { 
            DWORD *dwParam1 = (DWORD *)Param1; 
 
            pKickProc    = (KickProc_t)*dwParam1; 
            *dwParam1    = (DWORD)new_KickProc; 
        } 
 
        int iReturn = pHackshieldComm( hsCommCode, Param1, Param2 ); 
 
        return 1; 
    } 
 
    int iReturn = pHackshieldComm( hsCommCode, Param1, Param2 ); 
 
    return iReturn; 
} 
 
void HookCommunication( EXCEPTION_POINTERS* pExceptionInfo ) 
{ 
    DWORD dwEbp        = pExceptionInfo->ContextRecord->Ebp; 
    DWORD dwParam2    = 0; 
 
    __asm 
    { 
        push eax; 
        push edx; 
        mov eax, dwEbp; 
        mov edx, [eax+0xC]; 
        mov dwParam2, edx; 
        pop edx; 
        pop eax; 
    } 
 
    if( dwParam2 == 0xA ) //this is the ordinal of some export...hmm.. 
    { 
        pHackshieldComm                        = (HackshieldComm_t)pExceptionInfo->ContextRecord->Eax; 
        pExceptionInfo->ContextRecord->Eax    = (DWORD)new_HackshieldComm; 
    } 
 
    pExceptionInfo->ContextRecord->Eip        = HS_JMP2; 
 
    return; 
} 
 
PVOID pContextHandler = NULL; 
 
LONG WINAPI ***ExceptionHandler( EXCEPTION_POINTERS* pExceptionInfo ) 
{ 
    if( pExceptionInfo->ExceptionRecord->ExceptionCode != EXCEPTION_SINGLE_STEP ) 
    { 
        return EXCEPTION_CONTINUE_SEARCH; 
    } 
 
    if( pExceptionInfo->ExceptionRecord->ExceptionAddress == (PVOID)HS_JMP )  
    { 
        HookCommunication( pExceptionInfo ); 
        return EXCEPTION_CONTINUE_EXECUTION; 
    } 
 
    return EXCEPTION_CONTINUE_SEARCH; 
} 
 
void InitContextHook() 
{ 
    pContextHandler = AddVectoredExceptionHandler( 0x50BE17, ***ExceptionHandler ); 
 
    CONTEXT Context; 
    Context.ContextFlags = CONTEXT_DEBUG_REGISTERS; 
    GetThreadContext(GetCurrentThread(), &Context); 
    Context.Dr0 = HS_JMP; 
    Context.Dr7 = (1<<0)|(1<<2)|(1<<4)|(1<<6); 
    SetThreadContext(GetCurrentThread(), &Context); 
}

it was made on 14 june 2009

Similar Threads

Tags for this Thread