[MalleusDemonium]

Im looking for some tuts on how to bypass hackshield pro... most mmorpg uses this protection.. This is a good protection for game servers but the down side is that it also flags 3rd party programs or built in programs that does not affect the game like keyboards or mouse with built in macros... It automatically shuts down the game.. Can anyone help me disable or bypass hackshield.. I dont want to use debuggers..

[M1K3y]

what game? depends because for some games you can go into the game files and just edit it or paste in a program.

[MalleusDemonium]

RF online... the copy paste method was patch way back last year.. debuggers not helping coz it will stop to function after 5-10 mins coz of he overload... Already tried to use sandboxie to hide the game but still no use..

[M1K3y]

lol i was gonna suggest using Hackslash.dll but that wont seem to work ill get back to you on this one

---

one of my friends sent me this maybe you can try it, tell me if it works:
ADR_HSCallBack1 0x7907a // BYTE To Use 0xC3
ADR_HSCallBack2 0x09fa8 // BYTE To Use 0x74
ADR_HSNanoScan1 0x96863 // BYTE To Use 0x03,0xD2
ADR_HSNanoScan2 0x9457F // BYTE To Use 0xB8,0x00,0x00,0x00,0x00


void DetouringHackShield (void)
{
DWORD hEhSvc = (DWORD)GetModuleHandle("EhSvc.dll");
if ( hEhSvc !=0 )
{
DWORD ADR_HSCallBack1 = Tools.SearchPattern(hEhSvc,0x11E000,"558BEC83EC??535657894DE0",ASM,0);
DWORD ADR_HSCallBack2 = Tools.SearchPattern(hEhSvc,0x11E000,"83C4??85DB75??55E8????????83C4??33??",ASM,5);
DWORD ADR_HSNanoScan1 = Tools.SearchPattern(hEhSvc,0x11E000,"8B45??03C28945??837DDC??",ASM,3);
DWORD ADR_HSNanoScan2 = Tools.SearchPattern(hEhSvc,0x11E000,"8B55??52E8????????83C4148945??837DE400",ASM,4);


BYTE bpJe [1] = { 0x74 };
BYTE bpRetnA [1] = { 0xC3 };

Tools.BPPatching((void*)(ADR_HSCallBack2),bpJe,1); //EhSvc.dll CRC Check new actualy working
Tools.BPPatching((void*)(ADR_HSCallBack1),bpRetnA,1); //EhSvc.dll Main EhSvc.dll Kill all HS ERROR

bool FirstLog = true;
bool SecondLog = false;
do{
DWORD Pointer = *(DWORD*)ADR_ServerPTR;
if ( Pointer != 0 && FirstLog && !SecondLog )
{
BYTE bpAddEdx [2]= { 0x03,0xD2 };
BYTE bpMovEax [5]= { 0xB8,0x00,0x00,0x00,0x00 };

Tools.BPPatching((void*)(ADR_HSNanoScan1),bpAddEdx,2); // HS Sub Main Forcing Detection 1
Tools.BPPatching((void*)(ADR_HSNanoScan2),bpMovEax,5); // HS Sub Call Forcing Detection 2

Sleep(5000);

BYTE NanoScan1OFF [2]= { 0x03,0xC2 };
Tools.BPPatching((void*)(ADR_HSNanoScan1),NanoScan1OFF,2); // Restoring after 5 second inside server

FirstLog = false;
SecondLog = true;
}
if ( Pointer == 0 && SecondLog )
{
BYTE BTOFFanoScan2 [5] = { 0xE8,0xFE,0x17,0x00,0x00 }; // Restoing if server is == 0

Tools.BPPatching((void*)(ADR_HSNanoScan2),BTOFFanoScan2,5);

FirstLog = true;
SecondLog = false;

} Sleep(20);
}while(TRUE);
}else{
Tools.AddLog("%s - Error: HackShield module not found!\n",Tools.AddTime());
ExitProcess(TRUE);
}
}

---

lol i was gonna suggest using Hackslash.dll but that wont seem to work ill get back to you on this one

---

one of my friends sent me this maybe you can try it, tell me if it works:
ADR_HSCallBack1 0x7907a // BYTE To Use 0xC3
ADR_HSCallBack2 0x09fa8 // BYTE To Use 0x74
ADR_HSNanoScan1 0x96863 // BYTE To Use 0x03,0xD2
ADR_HSNanoScan2 0x9457F // BYTE To Use 0xB8,0x00,0x00,0x00,0x00


void DetouringHackShield (void)
{
DWORD hEhSvc = (DWORD)GetModuleHandle("EhSvc.dll");
if ( hEhSvc !=0 )
{
DWORD ADR_HSCallBack1 = Tools.SearchPattern(hEhSvc,0x11E000,"558BEC83EC??535657894DE0",ASM,0);
DWORD ADR_HSCallBack2 = Tools.SearchPattern(hEhSvc,0x11E000,"83C4??85DB75??55E8????????83C4??33??",ASM,5);
DWORD ADR_HSNanoScan1 = Tools.SearchPattern(hEhSvc,0x11E000,"8B45??03C28945??837DDC??",ASM,3);
DWORD ADR_HSNanoScan2 = Tools.SearchPattern(hEhSvc,0x11E000,"8B55??52E8????????83C4148945??837DE400",ASM,4);


BYTE bpJe [1] = { 0x74 };
BYTE bpRetnA [1] = { 0xC3 };

Tools.BPPatching((void*)(ADR_HSCallBack2),bpJe,1); //EhSvc.dll CRC Check new actualy working
Tools.BPPatching((void*)(ADR_HSCallBack1),bpRetnA,1); //EhSvc.dll Main EhSvc.dll Kill all HS ERROR

bool FirstLog = true;
bool SecondLog = false;
do{
DWORD Pointer = *(DWORD*)ADR_ServerPTR;
if ( Pointer != 0 && FirstLog && !SecondLog )
{
BYTE bpAddEdx [2]= { 0x03,0xD2 };
BYTE bpMovEax [5]= { 0xB8,0x00,0x00,0x00,0x00 };

Tools.BPPatching((void*)(ADR_HSNanoScan1),bpAddEdx,2); // HS Sub Main Forcing Detection 1
Tools.BPPatching((void*)(ADR_HSNanoScan2),bpMovEax,5); // HS Sub Call Forcing Detection 2

Sleep(5000);

BYTE NanoScan1OFF [2]= { 0x03,0xC2 };
Tools.BPPatching((void*)(ADR_HSNanoScan1),NanoScan1OFF,2); // Restoring after 5 second inside server

FirstLog = false;
SecondLog = true;
}
if ( Pointer == 0 && SecondLog )
{
BYTE BTOFFanoScan2 [5] = { 0xE8,0xFE,0x17,0x00,0x00 }; // Restoing if server is == 0

Tools.BPPatching((void*)(ADR_HSNanoScan2),BTOFFanoScan2,5);

FirstLog = true;
SecondLog = false;

} Sleep(20);
}while(TRUE);
}else{
Tools.AddLog("%s - Error: HackShield module not found!\n",Tools.AddTime());
ExitProcess(TRUE);
}
}

and its on another fourm

[MalleusDemonium]

is this a script for a debugger?