#Patched
void DetouringHS ( void)
{
cTools->AddLog("%s - DetourHackShield->",cTools->AddTime());
int hEsVc = (int)GetModuleHandle("EhSvc.dll");
Sleep(100);
{
Memcmp((void *)(hEsVc+0x61C84),(PBYTE)"xC3",1); // return before to real self crc start controll
Memcmp((void *)(hEsVc+0x2F04A),(PBYTE)"\x90\xE9",2);
Memcmp((void *)(hEsVc+0x209FC),(PBYTE)"\x90\x90",2);
Memcmp((void *)(hEsVc+0x2093B),(PBYTE)"\x90\x90",2);
Memcmp((void *)(hEsVc+0x2D26E),(PBYTE)"\x33",1);
Memcmp((void *)(hEsVc+0x2D72F),(PBYTE)"\x33",1);
Memcmp((void *)(hEsVc+0x2AAEF),(PBYTE)"\x33",1);
}
cTools->AddLog("OK!\n");
}
glauben und wissen sind so zwei sachen.Quote:
Nicht volständig :facepalm:
Warum Postest du in :facepalm:
Und er geht glaube ich nicht!
Quelle: [Only registered and activated users can see links. Click Here To Register...]Quote:
__declspec (naked) void HS_Patch_1 ()
{
__asm{
inc eax
add [esi+ecx-7Fh], bh
inc byte ptr [eax]
add [eax+3067D00h], dl
push 36h
lea edi, [ebp-122Ch]
retn
}
}
__declspec (naked) void HS_Patch_2 ()
{
__asm{
inc eax
add [esi+ecx-7Fh], bh
inc byte ptr [eax]
add [eax+3067D00h], dl
mov eax, ecx
mov edx, ecx
add eax, esi
retn
}
}
DWORD dword_HS1,HS_Patch_1;
DWORD dword_HS2;
DWORD dword_HS3;
DWORD dword_HS4,HS_Patch_2;