[Release] Bypassing most servers hardware limit

[Slayer*]

Originally Posted by slaintrax200

runing server on vps baning people for nothing also +100 fake number good brain.exe

baning people for nothing ?

you got ban becuz you cheat use proxy and farm angelbless / silver coins ? he said 10000000 times open more than 3 chars is illegal he warning you many times and told you open 3 chars only .. but u open more than 50 chars This is unfair How others will get angelbless / silver coins ? and you make the server lag
you deserve this ban from a long time .. in fact he have been late in giving you
ban
G.L Mr.Scammer in the new server hope you get ban soon from it

[bandit100]

Is there a DLL and is this working for Revolution online sro?

[Wanrty]

Originally Posted by XinEkorn

I saw so many servers using methods of HWID protection which can be bypassed redicolously easy.

Here is source code I would like to share with you.

* Requirements *

Little bit of brain.
A computer, or a high-performance toaster.
And... something that can compile this.
common.h:

#ifndef HG_COMMON
#define HG_COMMON

#pragma comment(lib, "detours.lib")

#define _CRT_SECURE_NO_WARNINGS

#include <Windows.h>
#include <iostream>

#endif

apihook.h:

#ifndef HG_APIHOOK
#define HG_APIHOOK
#include "common.h"


class apihook
{
public:
	static void Init(bool randomVolSerial, bool randomMac);
private:
	static void SetupVolumeSerialHook();
	static void SetupMacAddrHook();
};
#endif

apihook.cpp:

#include "apihook.h"
#include "detours\detours.h"
#include <IPHlpApi.h>

#pragma comment(lib, "iphlpapi.lib")

//-----------------------------------

typedef BOOL (WINAPI* pGetVolumeInformationW)(
	LPCTSTR lpRootPathName,
	LPTSTR lpVolumeNameBuffer,
	DWORD nVolumeNameSize,
	LPDWORD lpVolumeSerialNumber,
	LPDWORD lpMaximumComponentLength,
	LPDWORD lpFileSystemFlags,
	LPTSTR lpFileSystemNameBuffer,
	DWORD nFileSystemNameSize);

typedef DWORD (WINAPI* pGetAdaptersInfo)(
	PIP_ADAPTER_INFO pAdapterInfo,
	PULONG pOutBufLen);

//-----------------------------------
//Handles etc

HMODULE hKernel32;
HMODULE hIphlpapi;


pGetVolumeInformationW p_origGetVolumeInformationW;
pGetAdaptersInfo p_origGetAdaptersInfo;


void apihook::Init(bool randomVolSerial, bool randomMac)
{
	srand(time(NULL));

	hKernel32 = GetModuleHandleA("Kernel32.dll");
	hIphlpapi = GetModuleHandleA("Iphlpapi.dll");

	if(randomVolSerial) apihook::SetupVolumeSerialHook();
	if(randomMac) apihook::SetupMacAddrHook();
}

//-----------------------------------
//Volume serial hooks
//Just see typedef 
BOOL WINAPI MyGetVolumeInformationW(LPCTSTR lpRootPathName, LPTSTR lpVolumeNameBuffer, DWORD nVolumeNameSize, LPDWORD lpVolumeSerialNumber, LPDWORD lpMaximumComponentLength, LPDWORD lpFileSystemFlags, LPTSTR lpFileSystemNameBuffer, DWORD nFileSystemNameSize)
{
	BOOL res = p_origGetVolumeInformationW(lpRootPathName, lpVolumeNameBuffer, nVolumeNameSize, lpVolumeSerialNumber, lpMaximumComponentLength, lpFileSystemFlags, lpFileSystemNameBuffer, nFileSystemNameSize);
	
	std::cout << "MyGetVolumeInformationW -> Old serial " << *lpVolumeSerialNumber << std::endl;

	//Override
	DWORD newSerial = GetTickCount() + rand();

	std::cout << "MyGetVolumeInformationW -> New serial " << newSerial << std::endl;

	*lpVolumeSerialNumber = newSerial;
	return res;
}

void apihook::SetupVolumeSerialHook()
{
	p_origGetVolumeInformationW = (pGetVolumeInformationW)GetProcAddress(hKernel32, "GetVolumeInformationW");

	DetourTransactionBegin();
	DetourAttach(&(PVOID&)p_origGetVolumeInformationW, MyGetVolumeInformationW);
	DetourTransactionCommit();

	std::cout << "Volume serial number hook initialized" << std::endl;
}


DWORD WINAPI MyGetAdaptersInfo(PIP_ADAPTER_INFO pAdapterInfo, PULONG pOutBufLen)
{
	DWORD res = p_origGetAdaptersInfo(pAdapterInfo, pOutBufLen);
	
	//BYTE_IP_ADAPTER_INFO::Address
	for(int i = 0; i < 8; i++)
		pAdapterInfo->Address[i] = rand() % 0xFF;

	std::cout << "MyGetAdaptersInfo -> Address override" << std::endl;
	return res;
}


void apihook::SetupMacAddrHook()
{
	p_origGetAdaptersInfo = (pGetAdaptersInfo)GetProcAddress(hIphlpapi, "GetAdaptersInfo");

	DetourTransactionBegin();
	DetourAttach(&(PVOID&)p_origGetAdaptersInfo, MyGetAdaptersInfo);
	DetourTransactionCommit();

	std::cout << "MAC address hook initialized" << std::endl;
}

hwfck.cpp:

#include "common.h"
#include "apihook.h"

BOOL WINAPI DllMain(HMODULE module, DWORD callReason, LPVOID reserved)
{
	switch(callReason)
	{
		case DLL_PROCESS_ATTACH:
			{
				DisableThreadLibraryCalls(module);

				AllocConsole();
				freopen("CONOUT$", "w", stdout);

				std::cout << "hwfck init" << std::endl;
				
				apihook::Init(true, true);
			}
			break;
	}

	return TRUE;
}

The point of this is to demonstrate how hooking those commonly used WinAPI functions is.

Good luck.

Nice , if we break through the limitations of the computer, such as Windows password ,Data security protection,,,,, the beneficiary will be us

[slaintrax200]

Originally Posted by Slayer*

baning people for nothing ?

you got ban becuz you cheat use proxy and farm angelbless / silver coins ? he said 10000000 times open more than 3 chars is illegal he warning you many times and told you open 3 chars only .. but u open more than 50 chars This is unfair How others will get angelbless / silver coins ? and you make the server lag
you deserve this ban from a long time .. in fact he have been late in giving you
ban
G.L Mr.Scammer in the new server hope you get ban soon from it

There no evidence that i used proxy thats just made up stories sad not my problem if i can farm coins or anything if the server is poor cant handle 100 chars(with other players included) and starts to lag ;( more cries please

[Slayer*]

Originally Posted by slaintrax200

There no evidence that i used proxy thats just made up stories sad not my problem if i can farm coins or anything if the server is poor cant handle 100 chars(with other players included) and starts to lag ;( more cries please

yea there is evidence . you got more than 400 angelbless , more than 50k silver and more than 7b .. first you wasn't use proxy and open 40 chars ++ from ur ip and ihave screenshot for that " your whatsapp chat with me "
when nukertube make new system give pk for who open more than 3 chars . you start use proxy

[ahmedhassanelsa]

never dled something for bypassing stuff that my anti virus didn't cancel first ... any ideas why ?

[slaintrax200]

Originally Posted by Slayer*

yea there is evidence . you got more than 400 angelbless , more than 50k silver and more than 7b .. first you wasn't use proxy and open 40 chars ++ from ur ip and ihave screenshot for that " your whatsapp chat with me "
when nukertube make new system give pk for who open more than 3 chars . you start use proxy

or just maybe nukertube didint know that u can open how many char u want while being murder status just takes 3 times to relog how do u know i had 400+ angel bless u seem to know more about my inventory then i do

[Slayer*]

Originally Posted by slaintrax200

or just maybe nukertube didint know that u can open how many char u want while being murder status just takes 3 times to relog how do u know i had 400+ angel bless u seem to know more about my inventory then i do

you upload S.S for you inventory in server group in whatsap^^

[slaintrax200]

Originally Posted by Slayer*

you upload S.S for you inventory in server group in whatsap^^

and it was 400 angel bless yeh?

[XinEkorn]

Small "update" for those lazy / new ones.

Added hook on GetVolumeInformationA (ANSI version, which is more common to see in hwid libs, and generally, in real-life projects than its unicode version).