bypass

[MAUROW]

Spoiler:

BYTE bpJe [1] = { 0x74 };
BYTE bpJmp [1] = { 0xEB };
BYTE bpRetnA [1] = { 0xC3 };
BYTE bpAddEdx [2] = { 0x03,0xD2 };
BYTE bpMovEax [5] = { 0xB8,0x00,0x00,0x00,0x00 };

patch->memcpy_s((void*)(dwEhSvc+0x8BB90),(BYTE*)bpRetnA,1);
patch->memcpy_s((void*)(dwEhSvc+0x0AC2,(BYTE*)bpJe,1);
patch->memcpy_s((void*)(dwEhSvc+0x43BEE),(BYTE*)bpMovEax,5);
patch->memcpy_s((void*)(dwEhSvc+0x40F5F),(BYTE*)bpAddEdx,2);
patch->memcpy_s((void*)(0x51CF9F),(BYTE*)bpJmp,1);
patch->memcpy_s((void*)(0x5DD1B9),(BYTE*)bpRetnA ,1);

Kazbah__