Detour and Return 1
Should be Cheat engine bypass. MUST HAVE FULL BYPASS FOR THIS TO WORK!!
Function i guess talks with the driver and hooks kernel stuff Such as NtOpenProcess and crap
Code:
0x673D1
Nice one.
Mind telling me how you found
that these were specifically
for CE?
hehe im still in your sig
added another function
Looks like it checks if they are hooked and if they aint they rehook them again
NtOpenProcess/NtReadProcessMemory/NtWriteProcessMemory
i posted the wrong address for the function i guess talks with the driver and hooks kernel stuff Such as NtOpenProcess and crap or whatever the hell it does with the hooks i know it restores them after u un hook it.
0x673D1 is the right one i also updated the first post.
Good stuff man, it works wonders.
edit:
You lose connection to the server after 3-5 minutes when you log in. Good post anyways, thanks for the share.
i will take a look at that, mabey it checks if they r hooked or not.
Someone told me that in the latest HS version that they added more scanning functions and advanced even more. War Rock has the same HS version and some sites, I'm not gonna say, don't even have memory editing in their hacks, just DirectX.
nice copy paste give credits to Geek4Ever if thats not you anyways i seen this somewhere alse before you
Originally Posted by flayer669
nice copy paste give credits to Geek4Ever if thats not you anyways i seen this somewhere alse before you
TheBigBoy is Geek4Ever. I'm not going to flame you because I don't want an infraction or warning. He has said it a million times and again, HE IS Geek4Ever.
I am Ra.jinn!!
Jk
Originally Posted by Xlilzoosk8rX
Nice one.
Mind telling me how you found
that these were specifically
for CE?
hehe im still in your sig
Start CA running in olly and CE running in the back round. If the search for CE comes first, then olly will pick log everything up to the point where it quits, then just backtrack what olly picked up until you find what triggered CA to close, which would either be when HShield reported picking up olly or CE.