Advertisement
dcomicboy

hs bypass

Aug 29th, 2012
224
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.19 KB | None | 0 0
  1. BOOL MemoryEdit (VOID *lpMem,VOID *lpSrc,DWORD len)//
  2. {
  3. DWORD lpflOldProtect, flNewProtect = PAGE_READWRITE;
  4. unsigned char * pDst = (unsigned char *)lpMem,
  5. *pSrc = (unsigned char *)lpSrc;
  6. if (VirtualProtect(lpMem,len,flNewProtect,&lpflOldPro tect))
  7. {
  8. while(len-- > 0) *pDst++ = *pSrc++;
  9. return (0);
  10. }
  11. return (1);
  12. }
  13.  
  14. HRESULT __fastcall CombatArms_Bypass()
  15. {
  16. DWORD dwEhSvc;
  17. do
  18. {
  19. dwEhSvc = (DWORD)GetModuleHandleA("Ehsvc.dll");
  20. Sleep(30);
  21. }
  22. while (!dwEhSvc);
  23.  
  24. MemoryEdit((void *)(dwEhSvc + 0x00737DA), (void *)"\xC3", 1);//HSCallBack1
  25. MemoryEdit((void *)(dwEhSvc + 0x0009BC8), (void *)"\x74",1);//HSCallBack2
  26. MemoryEdit((void *)(dwEhSvc + 0x008FCF8), (void *)"\xD2", 1);//HSNanoScan
  27. MemoryEdit((void *)(dwEhSvc + 0x0072E3C), (void *)"\xC2\x04\x00",3);//EhsvcSelfCrC
  28. MemoryEdit((void *)(dwEhSvc + 0x0009B30), (void *)"\xC2\x04\x00",3);//Detection
  29.  
  30.  
  31.  
  32. return true;
  33. }
  34. }
  35.  
  36. Other Bypass Addys
  37. Code:
  38.  
  39. ADR_HS_CALLBACK1 0x00737DA
  40. ADR_HS_CALLBACK2 0x0009BC8
  41. ADR_HS_NANOSCAN 0x008FCF7
  42. ADR_HS_EHSVCSELFCRC 0x0072E3C
  43. ADR_HS_DETECTION 0x0009B30
  44. ADR_HS_NANOCHECK1 0x00368BE
  45. ADR_HS_NANOCHECK2 0x0033D5F
  46. ADR_HS_HSANTICRASH 0x0036934
  47. ADR_HS_ASMDETECRION 0x0026D6B
  48. ADR_HS_NANOCHECK3 0x0035DE6
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement