Sinoeno wrote: ↑Tue Oct 27, 2020 10:26 am
you funny lmao this is not it xD haha
>> mhyprot2 doesnt run because we already killed from the beginning so it wont show up when starting the game! and there is not run background anit_cheat
yeah i get it, it's been dead from before the game started, and ss it while i was playing.
I turned off mhyprot2 using HxD with code
i can't found 01B30933 (it's 01B30930 in here)
can u send ur file? @@
[Link]
edit : oh silly me, i found it but its not "8B 28 31"
it's "8B 28 49" at offset 01B30933
[Link]
if i change to 31 it's triggering crash upload.exe at genshin impact folder n force close
i found 8B 28 31 but it's at diff offset
[Link]
n if I change that to ED it's not triggerring crash upload.exe
but the game auto close again after launch n triggering werfault.exe
(i'm monitoring the connection using proxifier)
.
i try to block the connection who had suspicious for the anticheat at proxiefier all of them but it's not good either they still detected
[Link]
i try to terminate the mhyprot2.sys with kernel editor n it's triggering a BSOD or the game just close bcs it's the mhyprot2.sys file at ur temp windows after load by ur genshin client
[Link]
if u terminate the obprocess for the source of them it's triggering BSOD
[Link]
i try to terminate some of them at kernel editor "the load image mhyprot2 n obthread mhyprot2"
it's not BSOD but they still can detecting bcs the core of mhyprot2 still running
.
i try makin my own private CE but they still detecting
.
the safety one is box n freezing
.
some ppl said using ur own private CE with skill E + player speedhack is not detecting
on my case it's detected n got bann 2035
note :
if u guys wanna makin a new bypass with messing their file for "bypass mhyprot2.sys"
used proxifier n sett the rule for blocking upload_crash.exe
bcs if u're messed up the file n got crash
the system makes an error.log at ur temporary windows n upload to their database server.
so any alt u makes if ur hardware got lock like this, their eyes will be focussing at u
[Link]