Code: Select all
//Name: HackShield CRC Check Bypassing CE Assembly Script.
[Enable]
alloc(HSCRCFail,256)
label(BackToOP)
OpenProcess:
jmp HSCRCFail
HSCRCFail:
mov eax, fs:[20]
cmp eax, [esp+0c]
jne BackToOP
mov fs:[34], 57
xor eax, eax
ret 000c
BackToOP:
mov edi, edi
push ebp
mov ebp, esp
jmp OpenProcess+5
[Disable]
OpenProcess:
mov edi, edi
push ebp
mov ebp, esp
dealloc(HSCRCFail)