WarRock EU - Code Snippets

08/30/2011 20:40 poikl1#5041
Kann mir einer die Aktuelle Ehsvc.dll gedumpt geben (schicken) :D
08/31/2011 11:06 PowerB#5042
Source of Auto Ready / Start 32 Bit?
08/31/2011 13:11 janisch_93#5043
subZerom, wie wäre es wenn du sie mir auch mal gibst? :D
hast du auch die memory addys mit den on werten davon?

weil ich hab kein bock auf nen bypass nur für son kack privat teil
08/31/2011 15:14 PowerB#5044
Teleport Bomb A Marien Coordinate?
08/31/2011 21:58 janisch_93#5045
So, ich habe jetzt alles zusammen, jedoch planted er bei mir die Bombe nicht..
Ich habe QuickPlant eingebaut, er tut aber nur so als würde er die bombe wegschmeißen, tut er aber nicht..

Any Ideas?

Ich bin dankbar für jeden vorschlag!!
08/31/2011 23:08 [WR]CyberRazzer#5046
Falsche on Bytes, bist du bei der Plant stelle oder hast du PlantAnyWhere?
08/31/2011 23:38 janisch_93#5047
bei der plant stelle..

edit: beim defusen halt genau das selbe..

aber warrock schmiert nicht ab..
09/02/2011 14:09 SK1LL0R.#5048
void MEMwrite(void *adr, void *ptr, int size)
{
DWORD OldProtection;
VirtualProtect(adr,size,PAGE_EXECUTE_READWRITE, &OldProtection);
memcpy(adr,ptr,size);
VirtualProtect(adr,size,OldProtection, &OldProtection);
}

DWORD WINAPI Bypass(LPVOID)
{
DWORD HSEhsvc = 0;
do{
HSEhsvc = (DWORD)GetModuleHandleA("Ehsvc.dll");
Sleep(100);
}while(!HSEhsvc);
MEMwrite((void*)(HSEhsvc+0x71E7C),(PBYTE)"\xC2\x04 \x00",3);
MEMwrite((void*)(HSEhsvc+0x09B30),(PBYTE)"\xC2\x04 \x00",3);
MEMwrite((void*)(HSEhsvc+0x26867),(PBYTE)"\x90\x90 ",2);
MEMwrite((void*)(HSEhsvc+0x15530),(PBYTE)"\x90\x90 ",2);
MEMwrite((void*)(HSEhsvc+0x3626E),(PBYTE)"\x31",1) ;
MEMwrite((void*)(HSEhsvc+0x3372F),(PBYTE)"\x31",1) ;
MEMwrite((void*)(HSEhsvc+0x357A0),(PBYTE)"\x31", 1);
MEMwrite((void*)0x4A8B8C,(PBYTE)"\xEB",1);
MEMwrite((void*)0x4A8B66,(PBYTE)"\xEB",1);//Connection will be terminated because of an abnormal gameplay
MEMwrite((void*)0x4A8B8C,(PBYTE)"\xEB",1);//"Connection will be terminated because of an abnormal gameplay ***"
MEMwrite((void*)0x4A87C4,(PBYTE)"\xEB",1);//"Abnormal gameplay found"
MEMwrite((void*)0x4A8B87,(PBYTE)"\xEB",1);//"Connection will be terminated because of an abnormal gameplay ***"
return 1;
}
Have fun

You need 2 more Addys:

Anti Crash 1&2 @ ehsvc.dll
09/02/2011 14:27 .BuRn3R'#5049
Kann mir wer Aktuelle Pattern für Addys geben?
09/02/2011 16:40 4pr000only#5050
but where i can get Anti Crash Addys ?
09/02/2011 18:18 NikM#5051
HackShieldx3's "Bypass":
Code:
66401A34   . 68 F8F44266         PUSH Incredib.6642F4F8                   ;  ASCII "EhSvc.dll"
66401A39   . FFD3                CALL EBX
66401A3B   . 8BF8                MOV EDI,EAX
66401A3D   . 85FF                TEST EDI,EDI
66401A3F   .^74 EF               JE SHORT Incredib.66401A30
66401A41   . 8B35 74004266       MOV ESI,DWORD PTR DS:[66420074]
66401A47   . 55                  PUSH EBP
66401A48   . 8D4424 10           LEA EAX,DWORD PTR SS:[ESP+10]
66401A4C   . 50                  PUSH EAX
66401A4D   . 6A 04               PUSH 4
66401A4F   . BD 03000000         MOV EBP,3
66401A54   . 55                  PUSH EBP
66401A55   . 8D9F 7C1E0700       LEA EBX,DWORD PTR DS:[EDI+71E7C]
66401A5B   . 53                  PUSH EBX
66401A5C   . FFD6                CALL ESI
66401A5E   . 85C0                TEST EAX,EAX
66401A60   . 74 19               JE SHORT Incredib.66401A7B
66401A62   . B8 04F54266         MOV EAX,Incredib.6642F504
66401A67   . 2BC3                SUB EAX,EBX
66401A69   . 8DA424 00000000     LEA ESP,DWORD PTR SS:[ESP]
66401A70   > 8A0C18              MOV CL,BYTE PTR DS:[EAX+EBX]
66401A73   . 4D                  DEC EBP
66401A74   . 880B                MOV BYTE PTR DS:[EBX],CL
66401A76   . 43                  INC EBX
66401A77   . 85ED                TEST EBP,EBP
66401A79   .^77 F5               JA SHORT Incredib.66401A70
66401A7B   > 8D5424 10           LEA EDX,DWORD PTR SS:[ESP+10]
66401A7F   . 52                  PUSH EDX
66401A80   . 6A 04               PUSH 4
66401A82   . BD 03000000         MOV EBP,3
66401A87   . 55                  PUSH EBP
66401A88   . 8D9F 309B0000       LEA EBX,DWORD PTR DS:[EDI+9B30]
66401A8E   . 53                  PUSH EBX
66401A8F   . FFD6                CALL ESI
66401A91   . 85C0                TEST EAX,EAX
66401A93   . 74 16               JE SHORT Incredib.66401AAB
66401A95   . B8 04F54266         MOV EAX,Incredib.6642F504
66401A9A   . 2BC3                SUB EAX,EBX
66401A9C   . 8D6424 00           LEA ESP,DWORD PTR SS:[ESP]
66401AA0   > 8A0C18              MOV CL,BYTE PTR DS:[EAX+EBX]
66401AA3   . 4D                  DEC EBP
66401AA4   . 880B                MOV BYTE PTR DS:[EBX],CL
66401AA6   . 43                  INC EBX
66401AA7   . 85ED                TEST EBP,EBP
66401AA9   .^77 F5               JA SHORT Incredib.66401AA0
66401AAB   > 8D5424 10           LEA EDX,DWORD PTR SS:[ESP+10]
66401AAF   . 52                  PUSH EDX
66401AB0   . 6A 04               PUSH 4
66401AB2   . BD 02000000         MOV EBP,2
66401AB7   . 55                  PUSH EBP
66401AB8   . 8D9F 67680200       LEA EBX,DWORD PTR DS:[EDI+26867]
66401ABE   . 53                  PUSH EBX
66401ABF   . FFD6                CALL ESI
66401AC1   . 85C0                TEST EAX,EAX
66401AC3   . 74 16               JE SHORT Incredib.66401ADB
66401AC5   . B8 08F54266         MOV EAX,Incredib.6642F508
66401ACA   . 2BC3                SUB EAX,EBX
66401ACC   . 8D6424 00           LEA ESP,DWORD PTR SS:[ESP]
66401AD0   > 8A0C18              MOV CL,BYTE PTR DS:[EAX+EBX]
66401AD3   . 4D                  DEC EBP
66401AD4   . 880B                MOV BYTE PTR DS:[EBX],CL
66401AD6   . 43                  INC EBX
66401AD7   . 85ED                TEST EBP,EBP
66401AD9   .^77 F5               JA SHORT Incredib.66401AD0
66401ADB   > 8D5424 10           LEA EDX,DWORD PTR SS:[ESP+10]
66401ADF   . 52                  PUSH EDX
66401AE0   . 6A 04               PUSH 4
66401AE2   . BD 02000000         MOV EBP,2
66401AE7   . 55                  PUSH EBP
66401AE8   . 8D9F 30550100       LEA EBX,DWORD PTR DS:[EDI+15530]
66401AEE   . 53                  PUSH EBX
66401AEF   . FFD6                CALL ESI
66401AF1   . 85C0                TEST EAX,EAX
66401AF3   . 74 16               JE SHORT Incredib.66401B0B
66401AF5   . B8 08F54266         MOV EAX,Incredib.6642F508
66401AFA   . 2BC3                SUB EAX,EBX
66401AFC   . 8D6424 00           LEA ESP,DWORD PTR SS:[ESP]
66401B00   > 8A0C18              MOV CL,BYTE PTR DS:[EAX+EBX]
66401B03   . 4D                  DEC EBP
66401B04   . 880B                MOV BYTE PTR DS:[EBX],CL
66401B06   . 43                  INC EBX
66401B07   . 85ED                TEST EBP,EBP
66401B09   .^77 F5               JA SHORT Incredib.66401B00
66401B0B   > 8D5424 10           LEA EDX,DWORD PTR SS:[ESP+10]
66401B0F   . 52                  PUSH EDX
66401B10   . 6A 04               PUSH 4
66401B12   . 6A 01               PUSH 1
66401B14   . 8D9F 6E620300       LEA EBX,DWORD PTR DS:[EDI+3626E]
66401B1A   . 53                  PUSH EBX
66401B1B   . FFD6                CALL ESI
66401B1D   . 5D                  POP EBP
66401B1E   . 85C0                TEST EAX,EAX
66401B20   . 74 03               JE SHORT Incredib.66401B25
66401B22   . C603 31             MOV BYTE PTR DS:[EBX],31
66401B25   > 8D4424 0C           LEA EAX,DWORD PTR SS:[ESP+C]
66401B29   . 50                  PUSH EAX
66401B2A   . 6A 04               PUSH 4
66401B2C   . 6A 01               PUSH 1
66401B2E   . 8D9F 2F370300       LEA EBX,DWORD PTR DS:[EDI+3372F]
66401B34   . 53                  PUSH EBX
66401B35   . FFD6                CALL ESI
66401B37   . 85C0                TEST EAX,EAX
66401B39   . 74 03               JE SHORT Incredib.66401B3E
66401B3B   . C603 31             MOV BYTE PTR DS:[EBX],31
66401B3E   > 8D4C24 0C           LEA ECX,DWORD PTR SS:[ESP+C]
66401B42   . 51                  PUSH ECX
66401B43   . 6A 04               PUSH 4
66401B45   . 6A 01               PUSH 1
66401B47   . 8D9F 4FFA0400       LEA EBX,DWORD PTR DS:[EDI+4FA4F]
66401B4D   . 53                  PUSH EBX
66401B4E   . FFD6                CALL ESI
66401B50   . 85C0                TEST EAX,EAX
66401B52   . 74 03               JE SHORT Incredib.66401B57
66401B54   . C603 EB             MOV BYTE PTR DS:[EBX],0EB
66401B57   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401B5B   . 52                  PUSH EDX
66401B5C   . 6A 04               PUSH 4
66401B5E   . 6A 01               PUSH 1
66401B60   . 8D9F 36FB0400       LEA EBX,DWORD PTR DS:[EDI+4FB36]
66401B66   . 53                  PUSH EBX
66401B67   . FFD6                CALL ESI
66401B69   . 85C0                TEST EAX,EAX
66401B6B   . 74 03               JE SHORT Incredib.66401B70
66401B6D   . C603 EB             MOV BYTE PTR DS:[EBX],0EB
66401B70   > 8D4424 0C           LEA EAX,DWORD PTR SS:[ESP+C]
66401B74   . 50                  PUSH EAX
66401B75   . 6A 04               PUSH 4
66401B77   . 6A 01               PUSH 1
66401B79   . 8D9F 24FC0400       LEA EBX,DWORD PTR DS:[EDI+4FC24]
66401B7F   . 53                  PUSH EBX
66401B80   . FFD6                CALL ESI
66401B82   . 85C0                TEST EAX,EAX
66401B84   . 74 03               JE SHORT Incredib.66401B89
66401B86   . C603 EB             MOV BYTE PTR DS:[EBX],0EB
66401B89   > 8D4C24 0C           LEA ECX,DWORD PTR SS:[ESP+C]
66401B8D   . 51                  PUSH ECX
66401B8E   . 6A 04               PUSH 4
66401B90   . 6A 01               PUSH 1
66401B92   . 81C7 30500100       ADD EDI,15030
66401B98   . 57                  PUSH EDI
66401B99   . FFD6                CALL ESI
66401B9B   . 85C0                TEST EAX,EAX
66401B9D   . 74 03               JE SHORT Incredib.66401BA2
66401B9F   . C607 C3             MOV BYTE PTR DS:[EDI],0C3
66401BA2   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401BA6   . 52                  PUSH EDX
66401BA7   . 6A 04               PUSH 4
66401BA9   . 6A 01               PUSH 1
66401BAB   . BF 5DB74700         MOV EDI,47B75D
66401BB0   . 57                  PUSH EDI
66401BB1   . FFD6                CALL ESI
66401BB3   . 85C0                TEST EAX,EAX
66401BB5   . 74 03               JE SHORT Incredib.66401BBA
66401BB7   . C607 EB             MOV BYTE PTR DS:[EDI],0EB
66401BBA   > 8D4424 0C           LEA EAX,DWORD PTR SS:[ESP+C]
66401BBE   . 50                  PUSH EAX
66401BBF   . 6A 04               PUSH 4
66401BC1   . 6A 01               PUSH 1
66401BC3   . BF 3C9E4D00         MOV EDI,4D9E3C
66401BC8   . 57                  PUSH EDI
66401BC9   . FFD6                CALL ESI
66401BCB   . 85C0                TEST EAX,EAX
66401BCD   . 74 03               JE SHORT Incredib.66401BD2
66401BCF   . C607 EB             MOV BYTE PTR DS:[EDI],0EB
66401BD2   > 8D4C24 0C           LEA ECX,DWORD PTR SS:[ESP+C]
66401BD6   . 51                  PUSH ECX
66401BD7   . 6A 04               PUSH 4
66401BD9   . 6A 01               PUSH 1
66401BDB   . BF 469E4D00         MOV EDI,4D9E46
66401BE0   . 57                  PUSH EDI
66401BE1   . FFD6                CALL ESI
66401BE3   . 85C0                TEST EAX,EAX
66401BE5   . 74 03               JE SHORT Incredib.66401BEA
66401BE7   . C607 EB             MOV BYTE PTR DS:[EDI],0EB
66401BEA   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401BEE   . 52                  PUSH EDX
66401BEF   . 6A 04               PUSH 4
66401BF1   . BB 03000000         MOV EBX,3
66401BF6   . 53                  PUSH EBX
66401BF7   . BF 359E4D00         MOV EDI,4D9E35
66401BFC   . 57                  PUSH EDI
66401BFD   . FFD6                CALL ESI
66401BFF   . 85C0                TEST EAX,EAX
66401C01   . 74 18               JE SHORT Incredib.66401C1B
66401C03   . B8 14F54266         MOV EAX,Incredib.6642F514
66401C08   . 2BC7                SUB EAX,EDI
66401C0A   . 8D9B 00000000       LEA EBX,DWORD PTR DS:[EBX]
66401C10   > 8A0C38              MOV CL,BYTE PTR DS:[EAX+EDI]
66401C13   . 4B                  DEC EBX
66401C14   . 880F                MOV BYTE PTR DS:[EDI],CL
66401C16   . 47                  INC EDI
66401C17   . 85DB                TEST EBX,EBX
66401C19   .^77 F5               JA SHORT Incredib.66401C10
66401C1B   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401C1F   . 52                  PUSH EDX
66401C20   . 6A 04               PUSH 4
66401C22   . BB 05000000         MOV EBX,5
66401C27   . 53                  PUSH EBX
66401C28   . BF D49D4D00         MOV EDI,4D9DD4
66401C2D   . 57                  PUSH EDI
66401C2E   . FFD6                CALL ESI
66401C30   . 85C0                TEST EAX,EAX
66401C32   . 74 17               JE SHORT Incredib.66401C4B
66401C34   . B8 18F54266         MOV EAX,Incredib.6642F518
66401C39   . 2BC7                SUB EAX,EDI
66401C3B   . EB 03               JMP SHORT Incredib.66401C40
66401C3D     8D49 00             LEA ECX,DWORD PTR DS:[ECX]
66401C40   > 8A0C38              MOV CL,BYTE PTR DS:[EAX+EDI]
66401C43   . 4B                  DEC EBX
66401C44   . 880F                MOV BYTE PTR DS:[EDI],CL
66401C46   . 47                  INC EDI
66401C47   . 85DB                TEST EBX,EBX
66401C49   .^77 F5               JA SHORT Incredib.66401C40
66401C4B   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401C4F   . 52                  PUSH EDX
66401C50   . 6A 04               PUSH 4
66401C52   . BB 03000000         MOV EBX,3
66401C57   . 53                  PUSH EBX
66401C58   . BF 2F0A7800         MOV EDI,780A2F
66401C5D   . 57                  PUSH EDI
66401C5E   . FFD6                CALL ESI
66401C60   . 85C0                TEST EAX,EAX
66401C62   . 74 17               JE SHORT Incredib.66401C7B
66401C64   . B8 04F54266         MOV EAX,Incredib.6642F504
66401C69   . 2BC7                SUB EAX,EDI
66401C6B   . EB 03               JMP SHORT Incredib.66401C70
66401C6D     8D49 00             LEA ECX,DWORD PTR DS:[ECX]
66401C70   > 8A0C38              MOV CL,BYTE PTR DS:[EAX+EDI]
66401C73   . 4B                  DEC EBX
66401C74   . 880F                MOV BYTE PTR DS:[EDI],CL
66401C76   . 47                  INC EDI
66401C77   . 85DB                TEST EBX,EBX
66401C79   .^77 F5               JA SHORT Incredib.66401C70
66401C7B   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401C7F   . 52                  PUSH EDX
66401C80   . 6A 04               PUSH 4
66401C82   . 6A 01               PUSH 1
66401C84   . BF B1125800         MOV EDI,5812B1
66401C89   . 57                  PUSH EDI
66401C8A   . FFD6                CALL ESI
66401C8C   . 85C0                TEST EAX,EAX
66401C8E   . 74 03               JE SHORT Incredib.66401C93
66401C90   . C607 C3             MOV BYTE PTR DS:[EDI],0C3
66401C93   > 8D4424 0C           LEA EAX,DWORD PTR SS:[ESP+C]
66401C97   . 50                  PUSH EAX
66401C98   . 6A 04               PUSH 4
66401C9A   . 6A 01               PUSH 1
66401C9C   . BF 71624A00         MOV EDI,4A6271
66401CA1   . 57                  PUSH EDI
66401CA2   . FFD6                CALL ESI
66401CA4   . 85C0                TEST EAX,EAX
66401CA6   . 74 03               JE SHORT Incredib.66401CAB
66401CA8   . C607 EB             MOV BYTE PTR DS:[EDI],0EB
66401CAB   > 8D4C24 0C           LEA ECX,DWORD PTR SS:[ESP+C]
66401CAF   . 51                  PUSH ECX
66401CB0   . 6A 04               PUSH 4
66401CB2   . 6A 01               PUSH 1
66401CB4   . BF 81624A00         MOV EDI,4A6281
66401CB9   . 57                  PUSH EDI
66401CBA   . FFD6                CALL ESI
66401CBC   . 85C0                TEST EAX,EAX
66401CBE   . 74 03               JE SHORT Incredib.66401CC3
66401CC0   . C607 EB             MOV BYTE PTR DS:[EDI],0EB
66401CC3   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401CC7   . 52                  PUSH EDX
66401CC8   . 6A 04               PUSH 4
66401CCA   . BB 06000000         MOV EBX,6
66401CCF   . 53                  PUSH EBX
66401CD0   . BF 3F604A00         MOV EDI,4A603F
66401CD5   . 57                  PUSH EDI
66401CD6   . FFD6                CALL ESI
66401CD8   . 85C0                TEST EAX,EAX
66401CDA   . 74 12               JE SHORT Incredib.66401CEE
66401CDC   . B8 20F54266         MOV EAX,Incredib.6642F520
66401CE1   . 2BC7                SUB EAX,EDI
66401CE3   > 8A0C38              MOV CL,BYTE PTR DS:[EAX+EDI]
66401CE6   . 4B                  DEC EBX
66401CE7   . 880F                MOV BYTE PTR DS:[EDI],CL
66401CE9   . 47                  INC EDI
66401CEA   . 85DB                TEST EBX,EBX
66401CEC   .^77 F5               JA SHORT Incredib.66401CE3
66401CEE   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401CF2   . 52                  PUSH EDX
66401CF3   . 6A 04               PUSH 4
66401CF5   . BB 03000000         MOV EBX,3
66401CFA   . 53                  PUSH EBX
66401CFB   . BF 1C110700         MOV EDI,7111C
66401D00   . 57                  PUSH EDI
66401D01   . FFD6                CALL ESI
66401D03   . 85C0                TEST EAX,EAX
66401D05   . 74 14               JE SHORT Incredib.66401D1B
66401D07   . B8 04F54266         MOV EAX,Incredib.6642F504
66401D0C   . 2BC7                SUB EAX,EDI
66401D0E   . 8BFF                MOV EDI,EDI
66401D10   > 8A0C38              MOV CL,BYTE PTR DS:[EAX+EDI]
66401D13   . 4B                  DEC EBX
66401D14   . 880F                MOV BYTE PTR DS:[EDI],CL
66401D16   . 47                  INC EDI
66401D17   . 85DB                TEST EBX,EBX
66401D19   .^77 F5               JA SHORT Incredib.66401D10
66401D1B   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401D1F   . 52                  PUSH EDX
66401D20   . 6A 04               PUSH 4
66401D22   . BB 03000000         MOV EBX,3
66401D27   . 53                  PUSH EBX
66401D28   . BF 80990000         MOV EDI,9980
66401D2D   . 57                  PUSH EDI
66401D2E   . FFD6                CALL ESI
66401D30   . 85C0                TEST EAX,EAX
66401D32   . 74 17               JE SHORT Incredib.66401D4B
66401D34   . B8 04F54266         MOV EAX,Incredib.6642F504
66401D39   . 2BC7                SUB EAX,EDI
66401D3B   . EB 03               JMP SHORT Incredib.66401D40
66401D3D     8D49 00             LEA ECX,DWORD PTR DS:[ECX]
66401D40   > 8A0C38              MOV CL,BYTE PTR DS:[EAX+EDI]
66401D43   . 4B                  DEC EBX
66401D44   . 880F                MOV BYTE PTR DS:[EDI],CL
66401D46   . 47                  INC EDI
66401D47   . 85DB                TEST EBX,EBX
66401D49   .^77 F5               JA SHORT Incredib.66401D40
66401D4B   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401D4F   . 52                  PUSH EDX
66401D50   . 6A 04               PUSH 4
66401D52   . 6A 01               PUSH 1
66401D54   . BF 5F280300         MOV EDI,3285F
66401D59   . 57                  PUSH EDI
66401D5A   . FFD6                CALL ESI
66401D5C   . 85C0                TEST EAX,EAX
66401D5E   . 74 03               JE SHORT Incredib.66401D63
66401D60   . C607 31             MOV BYTE PTR DS:[EDI],31
66401D63   > 8D4424 0C           LEA EAX,DWORD PTR SS:[ESP+C]
66401D67   . 50                  PUSH EAX
66401D68   . 6A 04               PUSH 4
66401D6A   . 6A 01               PUSH 1
66401D6C   . BF 6E520300         MOV EDI,3526E
66401D71   . 57                  PUSH EDI
66401D72   . FFD6                CALL ESI
66401D74   . 85C0                TEST EAX,EAX
66401D76   . 74 03               JE SHORT Incredib.66401D7B
66401D78   . C607 31             MOV BYTE PTR DS:[EDI],31
Go, Go Kids
Copy & Paste it :D
Man kann alles schön sauber rauslesen ^^
Vllt sollte ich vorwegnehmen das der nicht funktionieren wird :D
09/02/2011 18:20 [WR]CyberRazzer#5052
Quote:
Originally Posted by NikM View Post
HackShieldx3's "Bypass":
Code:
66401A34   . 68 F8F44266         PUSH Incredib.6642F4F8                   ;  ASCII "EhSvc.dll"
66401A39   . FFD3                CALL EBX
66401A3B   . 8BF8                MOV EDI,EAX
66401A3D   . 85FF                TEST EDI,EDI
66401A3F   .^74 EF               JE SHORT Incredib.66401A30
66401A41   . 8B35 74004266       MOV ESI,DWORD PTR DS:[66420074]
66401A47   . 55                  PUSH EBP
66401A48   . 8D4424 10           LEA EAX,DWORD PTR SS:[ESP+10]
66401A4C   . 50                  PUSH EAX
66401A4D   . 6A 04               PUSH 4
66401A4F   . BD 03000000         MOV EBP,3
66401A54   . 55                  PUSH EBP
66401A55   . 8D9F 7C1E0700       LEA EBX,DWORD PTR DS:[EDI+71E7C]
66401A5B   . 53                  PUSH EBX
66401A5C   . FFD6                CALL ESI
66401A5E   . 85C0                TEST EAX,EAX
66401A60   . 74 19               JE SHORT Incredib.66401A7B
66401A62   . B8 04F54266         MOV EAX,Incredib.6642F504
66401A67   . 2BC3                SUB EAX,EBX
66401A69   . 8DA424 00000000     LEA ESP,DWORD PTR SS:[ESP]
66401A70   > 8A0C18              MOV CL,BYTE PTR DS:[EAX+EBX]
66401A73   . 4D                  DEC EBP
66401A74   . 880B                MOV BYTE PTR DS:[EBX],CL
66401A76   . 43                  INC EBX
66401A77   . 85ED                TEST EBP,EBP
66401A79   .^77 F5               JA SHORT Incredib.66401A70
66401A7B   > 8D5424 10           LEA EDX,DWORD PTR SS:[ESP+10]
66401A7F   . 52                  PUSH EDX
66401A80   . 6A 04               PUSH 4
66401A82   . BD 03000000         MOV EBP,3
66401A87   . 55                  PUSH EBP
66401A88   . 8D9F 309B0000       LEA EBX,DWORD PTR DS:[EDI+9B30]
66401A8E   . 53                  PUSH EBX
66401A8F   . FFD6                CALL ESI
66401A91   . 85C0                TEST EAX,EAX
66401A93   . 74 16               JE SHORT Incredib.66401AAB
66401A95   . B8 04F54266         MOV EAX,Incredib.6642F504
66401A9A   . 2BC3                SUB EAX,EBX
66401A9C   . 8D6424 00           LEA ESP,DWORD PTR SS:[ESP]
66401AA0   > 8A0C18              MOV CL,BYTE PTR DS:[EAX+EBX]
66401AA3   . 4D                  DEC EBP
66401AA4   . 880B                MOV BYTE PTR DS:[EBX],CL
66401AA6   . 43                  INC EBX
66401AA7   . 85ED                TEST EBP,EBP
66401AA9   .^77 F5               JA SHORT Incredib.66401AA0
66401AAB   > 8D5424 10           LEA EDX,DWORD PTR SS:[ESP+10]
66401AAF   . 52                  PUSH EDX
66401AB0   . 6A 04               PUSH 4
66401AB2   . BD 02000000         MOV EBP,2
66401AB7   . 55                  PUSH EBP
66401AB8   . 8D9F 67680200       LEA EBX,DWORD PTR DS:[EDI+26867]
66401ABE   . 53                  PUSH EBX
66401ABF   . FFD6                CALL ESI
66401AC1   . 85C0                TEST EAX,EAX
66401AC3   . 74 16               JE SHORT Incredib.66401ADB
66401AC5   . B8 08F54266         MOV EAX,Incredib.6642F508
66401ACA   . 2BC3                SUB EAX,EBX
66401ACC   . 8D6424 00           LEA ESP,DWORD PTR SS:[ESP]
66401AD0   > 8A0C18              MOV CL,BYTE PTR DS:[EAX+EBX]
66401AD3   . 4D                  DEC EBP
66401AD4   . 880B                MOV BYTE PTR DS:[EBX],CL
66401AD6   . 43                  INC EBX
66401AD7   . 85ED                TEST EBP,EBP
66401AD9   .^77 F5               JA SHORT Incredib.66401AD0
66401ADB   > 8D5424 10           LEA EDX,DWORD PTR SS:[ESP+10]
66401ADF   . 52                  PUSH EDX
66401AE0   . 6A 04               PUSH 4
66401AE2   . BD 02000000         MOV EBP,2
66401AE7   . 55                  PUSH EBP
66401AE8   . 8D9F 30550100       LEA EBX,DWORD PTR DS:[EDI+15530]
66401AEE   . 53                  PUSH EBX
66401AEF   . FFD6                CALL ESI
66401AF1   . 85C0                TEST EAX,EAX
66401AF3   . 74 16               JE SHORT Incredib.66401B0B
66401AF5   . B8 08F54266         MOV EAX,Incredib.6642F508
66401AFA   . 2BC3                SUB EAX,EBX
66401AFC   . 8D6424 00           LEA ESP,DWORD PTR SS:[ESP]
66401B00   > 8A0C18              MOV CL,BYTE PTR DS:[EAX+EBX]
66401B03   . 4D                  DEC EBP
66401B04   . 880B                MOV BYTE PTR DS:[EBX],CL
66401B06   . 43                  INC EBX
66401B07   . 85ED                TEST EBP,EBP
66401B09   .^77 F5               JA SHORT Incredib.66401B00
66401B0B   > 8D5424 10           LEA EDX,DWORD PTR SS:[ESP+10]
66401B0F   . 52                  PUSH EDX
66401B10   . 6A 04               PUSH 4
66401B12   . 6A 01               PUSH 1
66401B14   . 8D9F 6E620300       LEA EBX,DWORD PTR DS:[EDI+3626E]
66401B1A   . 53                  PUSH EBX
66401B1B   . FFD6                CALL ESI
66401B1D   . 5D                  POP EBP
66401B1E   . 85C0                TEST EAX,EAX
66401B20   . 74 03               JE SHORT Incredib.66401B25
66401B22   . C603 31             MOV BYTE PTR DS:[EBX],31
66401B25   > 8D4424 0C           LEA EAX,DWORD PTR SS:[ESP+C]
66401B29   . 50                  PUSH EAX
66401B2A   . 6A 04               PUSH 4
66401B2C   . 6A 01               PUSH 1
66401B2E   . 8D9F 2F370300       LEA EBX,DWORD PTR DS:[EDI+3372F]
66401B34   . 53                  PUSH EBX
66401B35   . FFD6                CALL ESI
66401B37   . 85C0                TEST EAX,EAX
66401B39   . 74 03               JE SHORT Incredib.66401B3E
66401B3B   . C603 31             MOV BYTE PTR DS:[EBX],31
66401B3E   > 8D4C24 0C           LEA ECX,DWORD PTR SS:[ESP+C]
66401B42   . 51                  PUSH ECX
66401B43   . 6A 04               PUSH 4
66401B45   . 6A 01               PUSH 1
66401B47   . 8D9F 4FFA0400       LEA EBX,DWORD PTR DS:[EDI+4FA4F]
66401B4D   . 53                  PUSH EBX
66401B4E   . FFD6                CALL ESI
66401B50   . 85C0                TEST EAX,EAX
66401B52   . 74 03               JE SHORT Incredib.66401B57
66401B54   . C603 EB             MOV BYTE PTR DS:[EBX],0EB
66401B57   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401B5B   . 52                  PUSH EDX
66401B5C   . 6A 04               PUSH 4
66401B5E   . 6A 01               PUSH 1
66401B60   . 8D9F 36FB0400       LEA EBX,DWORD PTR DS:[EDI+4FB36]
66401B66   . 53                  PUSH EBX
66401B67   . FFD6                CALL ESI
66401B69   . 85C0                TEST EAX,EAX
66401B6B   . 74 03               JE SHORT Incredib.66401B70
66401B6D   . C603 EB             MOV BYTE PTR DS:[EBX],0EB
66401B70   > 8D4424 0C           LEA EAX,DWORD PTR SS:[ESP+C]
66401B74   . 50                  PUSH EAX
66401B75   . 6A 04               PUSH 4
66401B77   . 6A 01               PUSH 1
66401B79   . 8D9F 24FC0400       LEA EBX,DWORD PTR DS:[EDI+4FC24]
66401B7F   . 53                  PUSH EBX
66401B80   . FFD6                CALL ESI
66401B82   . 85C0                TEST EAX,EAX
66401B84   . 74 03               JE SHORT Incredib.66401B89
66401B86   . C603 EB             MOV BYTE PTR DS:[EBX],0EB
66401B89   > 8D4C24 0C           LEA ECX,DWORD PTR SS:[ESP+C]
66401B8D   . 51                  PUSH ECX
66401B8E   . 6A 04               PUSH 4
66401B90   . 6A 01               PUSH 1
66401B92   . 81C7 30500100       ADD EDI,15030
66401B98   . 57                  PUSH EDI
66401B99   . FFD6                CALL ESI
66401B9B   . 85C0                TEST EAX,EAX
66401B9D   . 74 03               JE SHORT Incredib.66401BA2
66401B9F   . C607 C3             MOV BYTE PTR DS:[EDI],0C3
66401BA2   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401BA6   . 52                  PUSH EDX
66401BA7   . 6A 04               PUSH 4
66401BA9   . 6A 01               PUSH 1
66401BAB   . BF 5DB74700         MOV EDI,47B75D
66401BB0   . 57                  PUSH EDI
66401BB1   . FFD6                CALL ESI
66401BB3   . 85C0                TEST EAX,EAX
66401BB5   . 74 03               JE SHORT Incredib.66401BBA
66401BB7   . C607 EB             MOV BYTE PTR DS:[EDI],0EB
66401BBA   > 8D4424 0C           LEA EAX,DWORD PTR SS:[ESP+C]
66401BBE   . 50                  PUSH EAX
66401BBF   . 6A 04               PUSH 4
66401BC1   . 6A 01               PUSH 1
66401BC3   . BF 3C9E4D00         MOV EDI,4D9E3C
66401BC8   . 57                  PUSH EDI
66401BC9   . FFD6                CALL ESI
66401BCB   . 85C0                TEST EAX,EAX
66401BCD   . 74 03               JE SHORT Incredib.66401BD2
66401BCF   . C607 EB             MOV BYTE PTR DS:[EDI],0EB
66401BD2   > 8D4C24 0C           LEA ECX,DWORD PTR SS:[ESP+C]
66401BD6   . 51                  PUSH ECX
66401BD7   . 6A 04               PUSH 4
66401BD9   . 6A 01               PUSH 1
66401BDB   . BF 469E4D00         MOV EDI,4D9E46
66401BE0   . 57                  PUSH EDI
66401BE1   . FFD6                CALL ESI
66401BE3   . 85C0                TEST EAX,EAX
66401BE5   . 74 03               JE SHORT Incredib.66401BEA
66401BE7   . C607 EB             MOV BYTE PTR DS:[EDI],0EB
66401BEA   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401BEE   . 52                  PUSH EDX
66401BEF   . 6A 04               PUSH 4
66401BF1   . BB 03000000         MOV EBX,3
66401BF6   . 53                  PUSH EBX
66401BF7   . BF 359E4D00         MOV EDI,4D9E35
66401BFC   . 57                  PUSH EDI
66401BFD   . FFD6                CALL ESI
66401BFF   . 85C0                TEST EAX,EAX
66401C01   . 74 18               JE SHORT Incredib.66401C1B
66401C03   . B8 14F54266         MOV EAX,Incredib.6642F514
66401C08   . 2BC7                SUB EAX,EDI
66401C0A   . 8D9B 00000000       LEA EBX,DWORD PTR DS:[EBX]
66401C10   > 8A0C38              MOV CL,BYTE PTR DS:[EAX+EDI]
66401C13   . 4B                  DEC EBX
66401C14   . 880F                MOV BYTE PTR DS:[EDI],CL
66401C16   . 47                  INC EDI
66401C17   . 85DB                TEST EBX,EBX
66401C19   .^77 F5               JA SHORT Incredib.66401C10
66401C1B   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401C1F   . 52                  PUSH EDX
66401C20   . 6A 04               PUSH 4
66401C22   . BB 05000000         MOV EBX,5
66401C27   . 53                  PUSH EBX
66401C28   . BF D49D4D00         MOV EDI,4D9DD4
66401C2D   . 57                  PUSH EDI
66401C2E   . FFD6                CALL ESI
66401C30   . 85C0                TEST EAX,EAX
66401C32   . 74 17               JE SHORT Incredib.66401C4B
66401C34   . B8 18F54266         MOV EAX,Incredib.6642F518
66401C39   . 2BC7                SUB EAX,EDI
66401C3B   . EB 03               JMP SHORT Incredib.66401C40
66401C3D     8D49 00             LEA ECX,DWORD PTR DS:[ECX]
66401C40   > 8A0C38              MOV CL,BYTE PTR DS:[EAX+EDI]
66401C43   . 4B                  DEC EBX
66401C44   . 880F                MOV BYTE PTR DS:[EDI],CL
66401C46   . 47                  INC EDI
66401C47   . 85DB                TEST EBX,EBX
66401C49   .^77 F5               JA SHORT Incredib.66401C40
66401C4B   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401C4F   . 52                  PUSH EDX
66401C50   . 6A 04               PUSH 4
66401C52   . BB 03000000         MOV EBX,3
66401C57   . 53                  PUSH EBX
66401C58   . BF 2F0A7800         MOV EDI,780A2F
66401C5D   . 57                  PUSH EDI
66401C5E   . FFD6                CALL ESI
66401C60   . 85C0                TEST EAX,EAX
66401C62   . 74 17               JE SHORT Incredib.66401C7B
66401C64   . B8 04F54266         MOV EAX,Incredib.6642F504
66401C69   . 2BC7                SUB EAX,EDI
66401C6B   . EB 03               JMP SHORT Incredib.66401C70
66401C6D     8D49 00             LEA ECX,DWORD PTR DS:[ECX]
66401C70   > 8A0C38              MOV CL,BYTE PTR DS:[EAX+EDI]
66401C73   . 4B                  DEC EBX
66401C74   . 880F                MOV BYTE PTR DS:[EDI],CL
66401C76   . 47                  INC EDI
66401C77   . 85DB                TEST EBX,EBX
66401C79   .^77 F5               JA SHORT Incredib.66401C70
66401C7B   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401C7F   . 52                  PUSH EDX
66401C80   . 6A 04               PUSH 4
66401C82   . 6A 01               PUSH 1
66401C84   . BF B1125800         MOV EDI,5812B1
66401C89   . 57                  PUSH EDI
66401C8A   . FFD6                CALL ESI
66401C8C   . 85C0                TEST EAX,EAX
66401C8E   . 74 03               JE SHORT Incredib.66401C93
66401C90   . C607 C3             MOV BYTE PTR DS:[EDI],0C3
66401C93   > 8D4424 0C           LEA EAX,DWORD PTR SS:[ESP+C]
66401C97   . 50                  PUSH EAX
66401C98   . 6A 04               PUSH 4
66401C9A   . 6A 01               PUSH 1
66401C9C   . BF 71624A00         MOV EDI,4A6271
66401CA1   . 57                  PUSH EDI
66401CA2   . FFD6                CALL ESI
66401CA4   . 85C0                TEST EAX,EAX
66401CA6   . 74 03               JE SHORT Incredib.66401CAB
66401CA8   . C607 EB             MOV BYTE PTR DS:[EDI],0EB
66401CAB   > 8D4C24 0C           LEA ECX,DWORD PTR SS:[ESP+C]
66401CAF   . 51                  PUSH ECX
66401CB0   . 6A 04               PUSH 4
66401CB2   . 6A 01               PUSH 1
66401CB4   . BF 81624A00         MOV EDI,4A6281
66401CB9   . 57                  PUSH EDI
66401CBA   . FFD6                CALL ESI
66401CBC   . 85C0                TEST EAX,EAX
66401CBE   . 74 03               JE SHORT Incredib.66401CC3
66401CC0   . C607 EB             MOV BYTE PTR DS:[EDI],0EB
66401CC3   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401CC7   . 52                  PUSH EDX
66401CC8   . 6A 04               PUSH 4
66401CCA   . BB 06000000         MOV EBX,6
66401CCF   . 53                  PUSH EBX
66401CD0   . BF 3F604A00         MOV EDI,4A603F
66401CD5   . 57                  PUSH EDI
66401CD6   . FFD6                CALL ESI
66401CD8   . 85C0                TEST EAX,EAX
66401CDA   . 74 12               JE SHORT Incredib.66401CEE
66401CDC   . B8 20F54266         MOV EAX,Incredib.6642F520
66401CE1   . 2BC7                SUB EAX,EDI
66401CE3   > 8A0C38              MOV CL,BYTE PTR DS:[EAX+EDI]
66401CE6   . 4B                  DEC EBX
66401CE7   . 880F                MOV BYTE PTR DS:[EDI],CL
66401CE9   . 47                  INC EDI
66401CEA   . 85DB                TEST EBX,EBX
66401CEC   .^77 F5               JA SHORT Incredib.66401CE3
66401CEE   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401CF2   . 52                  PUSH EDX
66401CF3   . 6A 04               PUSH 4
66401CF5   . BB 03000000         MOV EBX,3
66401CFA   . 53                  PUSH EBX
66401CFB   . BF 1C110700         MOV EDI,7111C
66401D00   . 57                  PUSH EDI
66401D01   . FFD6                CALL ESI
66401D03   . 85C0                TEST EAX,EAX
66401D05   . 74 14               JE SHORT Incredib.66401D1B
66401D07   . B8 04F54266         MOV EAX,Incredib.6642F504
66401D0C   . 2BC7                SUB EAX,EDI
66401D0E   . 8BFF                MOV EDI,EDI
66401D10   > 8A0C38              MOV CL,BYTE PTR DS:[EAX+EDI]
66401D13   . 4B                  DEC EBX
66401D14   . 880F                MOV BYTE PTR DS:[EDI],CL
66401D16   . 47                  INC EDI
66401D17   . 85DB                TEST EBX,EBX
66401D19   .^77 F5               JA SHORT Incredib.66401D10
66401D1B   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401D1F   . 52                  PUSH EDX
66401D20   . 6A 04               PUSH 4
66401D22   . BB 03000000         MOV EBX,3
66401D27   . 53                  PUSH EBX
66401D28   . BF 80990000         MOV EDI,9980
66401D2D   . 57                  PUSH EDI
66401D2E   . FFD6                CALL ESI
66401D30   . 85C0                TEST EAX,EAX
66401D32   . 74 17               JE SHORT Incredib.66401D4B
66401D34   . B8 04F54266         MOV EAX,Incredib.6642F504
66401D39   . 2BC7                SUB EAX,EDI
66401D3B   . EB 03               JMP SHORT Incredib.66401D40
66401D3D     8D49 00             LEA ECX,DWORD PTR DS:[ECX]
66401D40   > 8A0C38              MOV CL,BYTE PTR DS:[EAX+EDI]
66401D43   . 4B                  DEC EBX
66401D44   . 880F                MOV BYTE PTR DS:[EDI],CL
66401D46   . 47                  INC EDI
66401D47   . 85DB                TEST EBX,EBX
66401D49   .^77 F5               JA SHORT Incredib.66401D40
66401D4B   > 8D5424 0C           LEA EDX,DWORD PTR SS:[ESP+C]
66401D4F   . 52                  PUSH EDX
66401D50   . 6A 04               PUSH 4
66401D52   . 6A 01               PUSH 1
66401D54   . BF 5F280300         MOV EDI,3285F
66401D59   . 57                  PUSH EDI
66401D5A   . FFD6                CALL ESI
66401D5C   . 85C0                TEST EAX,EAX
66401D5E   . 74 03               JE SHORT Incredib.66401D63
66401D60   . C607 31             MOV BYTE PTR DS:[EDI],31
66401D63   > 8D4424 0C           LEA EAX,DWORD PTR SS:[ESP+C]
66401D67   . 50                  PUSH EAX
66401D68   . 6A 04               PUSH 4
66401D6A   . 6A 01               PUSH 1
66401D6C   . BF 6E520300         MOV EDI,3526E
66401D71   . 57                  PUSH EDI
66401D72   . FFD6                CALL ESI
66401D74   . 85C0                TEST EAX,EAX
66401D76   . 74 03               JE SHORT Incredib.66401D7B
66401D78   . C607 31             MOV BYTE PTR DS:[EDI],31
Go, Go Kids
Copy & Paste it :D
Man kann alles schön sauber rauslesen ^^
Vllt sollte ich vorwegnehmen das der nicht funktionieren wird :D
THX NIKM, NACHMACHER :p
Workt nicht :(
09/02/2011 18:35 .Electro'#5053
@CyberRazzer
War ja klar das du es Kopierst und Testest
Du hast echt gedacht das WurstVerkäuferx3 was drauf hat?
Da dürftest sogar du ein wenig mehr C&P können
09/02/2011 18:47 NikM#5054
Cyber nimm die Tomaten von den Augen :D
Quote:
Vllt sollte ich vorwegnehmen das der nicht funktionieren wird
09/02/2011 18:54 [WR]CyberRazzer#5055
Quote:
@CyberRazzer
War ja klar das du es Kopierst und Testest
Du hast echt gedacht das WurstVerkäuferx3 was drauf hat?
Da dürftest sogar du ein wenig mehr C&P können
__________________
Ehm, ich habe es nicht getestet, es war sowas wie Anti Spam.
Und dein "WurstVerkäuferx3" ist nicht witzig, nur wenn ich es sage.

Quote:
Cyber nimm die Tomaten von den Augen
Es sind Gurken *__*
Und