WarRock EU - Code Snippets

ADR_HSCallBack1 0x7907a  // BYTE To Use 0xC3
ADR_HSCallBack2 0x09fa8  // BYTE To Use 0x74
ADR_HSNanoScan1 0x96863  // BYTE To Use 0x03,0xD2
ADR_HSNanoScan2 0x9457F  // BYTE To Use 0xB8,0x00,0x00,0x00,0x00


void DetouringHackShield (void)
{  
	DWORD hEhSvc = (DWORD)GetModuleHandle("EhSvc.dll");
	if ( hEhSvc !=0 )
	{
	 DWORD ADR_HSCallBack1 = Tools.SearchPattern(hEhSvc,0x11E000,"558BEC83EC??535657894DE0",ASM,0);
	 DWORD ADR_HSCallBack2 = Tools.SearchPattern(hEhSvc,0x11E000,"83C4??85DB75??55E8????????83C4??33??",ASM,5);	
	 DWORD ADR_HSNanoScan1 = Tools.SearchPattern(hEhSvc,0x11E000,"8B45??03C28945??837DDC??",ASM,3);	
	 DWORD ADR_HSNanoScan2 = Tools.SearchPattern(hEhSvc,0x11E000,"8B55??52E8????????83C4148945??837DE400",ASM,4);


				   BYTE bpJe         [1] = { 0x74 };
				   BYTE bpRetnA      [1] = { 0xC3 };

	Tools.BPPatching((void*)(ADR_HSCallBack2),bpJe,1);    //EhSvc.dll   CRC Check new actualy working
	Tools.BPPatching((void*)(ADR_HSCallBack1),bpRetnA,1); //EhSvc.dll   Main EhSvc.dll Kill all HS ERROR

				bool FirstLog  = true;
				bool SecondLog = false;
		  do{
							DWORD Pointer = *(DWORD*)ADR_ServerPTR;
							if ( Pointer != 0 && FirstLog && !SecondLog )
							{
								   BYTE bpAddEdx         [2]= { 0x03,0xD2 };
								   BYTE bpMovEax         [5]= { 0xB8,0x00,0x00,0x00,0x00 };

									   Tools.BPPatching((void*)(ADR_HSNanoScan1),bpAddEdx,2);    // HS Sub Main Forcing Detection 1 
									   Tools.BPPatching((void*)(ADR_HSNanoScan2),bpMovEax,5);    // HS Sub Call Forcing Detection 2

												  Sleep(5000);

								   BYTE NanoScan1OFF     [2]= { 0x03,0xC2 };
										Tools.BPPatching((void*)(ADR_HSNanoScan1),NanoScan1OFF,2); // Restoring after 5 second inside server

										FirstLog = false;
										SecondLog = true;
							 }
							 if ( Pointer == 0 && SecondLog )
							 {
								 BYTE BTOFFanoScan2   [5] = { 0xE8,0xFE,0x17,0x00,0x00 };        // Restoing if server is == 0

											Tools.BPPatching((void*)(ADR_HSNanoScan2),BTOFFanoScan2,5); 

										FirstLog  = true;
										SecondLog = false;

							 } Sleep(20);
			 }while(TRUE);
	   
	   }else{
									 Tools.AddLog("%s - Error: HackShield module not found!\n",Tools.AddTime());			 
									 ExitProcess(TRUE);                                  
	        }
}

#ifdef MessageBox
#undef MessageBox
#endif

typedef void (__stdcall* tMessageBox)(int, char*, int, int, char*, int);
tMessageBox MessageBox = (tMessageBox)0x50478E;

MessageBox (*(DWORD*)0xA313F0, "Test", 0, MB_OK, "Name_Message", 0);

void DetouringHackShield ( void )
{  
	//Scanning for Module
	PDWORD dwHSModule;
	do
	{
		*(DWORD*)&dwHSModule = *(DWORD*)GetModuleHandleA("EhSvc.dll");
	}
	while ( !dwHSModule );

	//Searching Addys...
	DWORD dwHSCallBack1 = Tools.FindPatternRemote((DWORD)dwHSModule,0x11E000,(PBYTE)"\x55\x8B\xEC\x83\xEC\x00\x53\x56\x57\x89\x4D\xE0",ASM);
	DWORD dwHSCallBack2 = Tools.FindPatternRemote((DWORD)dwHSModule,0x11E000,(PBYTE)"\x83\xC4\x00\x85\xDB\x75\x00\x55\xE8\x00\x00\x00\x00\x83\xC4\x00\x33\x00",ASM);    
	DWORD dwHSNanoScan1 = Tools.FindPatternRemote((DWORD)dwHSModule,0x11E000,(PBYTE)"\x8B\x45\x00\x03\xC2\x89\x45\x00\x83\x7D\xDC\x00",ASM);    
	DWORD dwHSNanoScan2 = Tools.FindPatternRemote((DWORD)dwHSModule,0x11E000,(PBYTE)"\x8B\x55\x00\x52\xE8\x00\x00\x00\x00\x83\xC4\x14\x89\x45\x00\x83\x7D\xE4\x00",ASM);
	//Setting up our Bytes...
	BYTE bpJe         [1] = { 0x74 };
    BYTE bpRetnA      [1] = { 0xC3 };
	BYTE bpAddEdx     [2] = { 0x03,0xD2 };
    BYTE bpMovEax     [5] = { 0xB8,0x00,0x00,0x00,0x00 };
	BYTE NanoScan1OFF [2] = { 0x03,0xC2 };
	BYTE BTOFFanoScan2 [5] = { 0xE8,0xFE,0x17,0x00,0x00 }; 
	//Some Other Stuff
	BOOL FirstLog  = TRUE;
    BOOL SecondLog = FALSE;
	//Detouring the Hackshield
	Tools.WriteMemory((void*)(dwHSCallBack2),bpJe,1);    //EhSvc.dll   CRC Check new actualy working
    Tools.WriteMemory((void*)(dwHSCallBack1),bpRetnA,1); //EhSvc.dll   Main EhSvc.dll Kill all HS ERROR

	do
	{
		DWORD S_Pointer = *(DWORD*)0x00A30994;
		if ( S_Pointer != 0 && FirstLog && !SecondLog )
		{
			Tools.WriteMemory((void*)(dwHSNanoScan1),bpAddEdx,2);    // HS Sub Main Forcing Detection 1 
            Tools.WriteMemory((void*)(dwHSNanoScan2),bpMovEax,5);    // HS Sub Call Forcing Detection 2
			Sleep(5000); // Begin of Endless Loop
			Tools.WriteMemory((void*)(dwHSNanoScan1),NanoScan1OFF,2); // Restoring after 5 second inside server
			FirstLog = false;
            SecondLog = true;
		}
		if ( S_Pointer == 0 && SecondLog )
        {
			BYTE BTOFFanoScan2   [5] = { 0xE8,0xFE,0x17,0x00,0x00 };        // Restoing if server is == 0

            Tools.WriteMemory((void*)(dwHSNanoScan2),BTOFFanoScan2,5); 
			FirstLog  = true;
		    SecondLog = false;

        }Sleep(20);
	}while (TRUE);
}

  if (Mtitle[0]) {
DrawTextC((x * 7) + 5, y, RED, Mtitle, pFont1);
CMenu_DrawCronersBox((INT)x * 14 + 42,(INT)y - 3,18,95, pDevice);//Credits-Name Box
DrawTextC((INT)(x * 15) + (35 + 7 * 6) ,(INT) y - 2, GREEN, "Credits", pFont1);	//Text = Credits
       CMenu_DrawCronersBox((INT)x * 14 + 42,(INT)y + 22 ,60 + 1,95, pDevice);//Credits Box
	   DrawTextC((INT)(x * 14) + (37 + 7 * 7) ,(INT) y + 22, GREEN, "Croner", pFont1);//Credits
	   DrawTextC((INT)(x * 14) + (35 + 7 * 7) ,(INT) y + 37, GREEN, "Credits", pFont1);//Credits
	   DrawTextC((INT)(x * 14) + (37 + 7 * 7) ,(INT) y + 52, GREEN, "Credits", pFont1);//Credits
	   DrawTextC((INT)(x * 14) + (37 + 7 * 7) ,(INT) y + 67, GREEN, "Credits", pFont1);//Credits