AVA / XignCode info

[~FALLEN~]

AVA:
Uses UE3
DirectX9
Have to retrieve matrices information from the DX9 shader pipeline *can't use IDirect3DDevice9::GetTransform*
XignCode:
Has hooks in ssdt / ssdts
Scans for any and all byte modifications
If your cheat gets picked up on by the AC, restart your pc. If you don't it will say your detected even if you just reboot the game ( iirc )

There's a lot more information to cover... but I'll let you people figure it out, those with the ability to make cheats for the game, will. Simple as that.

[Jabberwock]

Hooks are detected and even debuggers are.
When a detected program has been found it stores the location of it. You need to either change its location or restart PC.

We know that injectors that use a manual mapper\manual mapping are undetected.

[Lehsyrus]

Hooks are detected and even debuggers are.
When a detected program has been found it stores the location of it. You need to either change its location or restart PC.

We know that injectors that use a manual mapper\manual mapping are undetected.

From the research I've done the manual map method will never be detectable. I still think we need to focus on spoofing that CRC check.

[_Anonymous_]

hmm.. nice keep it up

[that's]

I am not sure what CRC stands for, but I will mention that, after viewing the log files, the AC uses an online source to detect some things, and I have no clue what exactly the site is used for. It's the one with htt://IP NUMBER LINK. It may not be significant at all.

And to the person who said that a computer restart is the only way to start AVA back up, is not 100% true. I can start it up again after getting a 3rd-party-error and be fine by deleting the log files and xm.exe from the XIGNCODE folder in binaries (and the file above that... cant remember the name for that particular file... not on my computer atm.) When ava starts up, it will redownload that exe file and the other one I mentioned, though it does not always work on the first try, it may take 2-3 more tries to actually start AVA without getting errors even when no other apps are running.

[_Anonymous_]

as I do alternately terminate the process tree of this "xsherlock.xem" and using .log remover

and that restart thing works only when your pc in deepfreeze mode or shadow mode

[Lehsyrus]

I am not sure what CRC stands for, but I will mention that, after viewing the log files, the AC uses an online source to detect some things, and I have no clue what exactly the site is used for. It's the one with htt://IP NUMBER LINK. It may not be significant at all.

And to the person who said that a computer restart is the only way to start AVA back up, is not 100% true. I can start it up again after getting a 3rd-party-error and be fine by deleting the log files and xm.exe from the XIGNCODE folder in binaries (and the file above that... cant remember the name for that particular file... not on my computer atm.) When ava starts up, it will redownload that exe file and the other one I mentioned, though it does not always work on the first try, it may take 2-3 more tries to actually start AVA without getting errors even when no other apps are running.

The CRC check is what makes AVA crash when we completely disable XIGNCODE3. It consistently requests an update from AVA to verify that it is still connected, and that none f the files have been altered.

[~FALLEN~]

@Lehsyrus Manual mapping can easily be detected... Also, instead of removing the anticheat, why not just work around it? By the way, not every hooking method is detected...

[Jabberwock]

By the way, not every hooking method is detected...

What hook method do you use?

[~FALLEN~]

@Jabberwo0ck - I don't give out that kind of information, sorry.

For those of you that are questioning my ability... don't...
I

[Lehsyrus]

@Lehsyrus Manual mapping can easily be detected... Also, instead of removing the anticheat, why not just work around it? By the way, not every hooking method is detected...

I mean to use it in conjunction with spoofing the CRC check. Not by itself, of course.

[~FALLEN~]

I mean to use it in conjunction with spoofing the CRC check. Not by itself, of course.

As I said disabling the anticheat is more work than needed... problem not even a good idea tbh... it would be quicker, and better in the long run to work around the AC. If you remove it they can easily just add more security and break your bypass... XignCode is on top of their shit, unlike other anticheats... It drives most people crazy with it's constant updating...

[Lehsyrus]

As I said disabling the anticheat is more work than needed... problem not even a good idea tbh... it would be quicker, and better in the long run to work around the AC. If you remove it they can easily just add more security and break your bypass... XignCode is on top of their shit, unlike other anticheats... It drives most people crazy with it's constant updating...

I still feel like there's something we're missing here that can be used to bypass XIGNCODE3 and keep them from fixing it too quickly

[Jabberwock]

Yeah, the CRC check is more advanced. You jump to the big stuff.

@Jabberwo0ck - I don't give out that kind of information, sorry.

OK, thanks anyways.

[Riddick]

Yeah, the CRC check is more advanced. You jump to the big stuff.

OK, thanks anyways.

Isn't that why Aeria went to Wellbia.... and because the Xigncode is made to be more complex than appears............... There has got to be something you are all missing.............Why not just go round it and disbable or mimic that code (or whatever it's called...I am only a Web Designer) so it sees that the game is still running.or replace that file with a mimic file.

Everytime they change that core make up file to stop the hacks.....We replace it!!!!!!!!!!!


Job done



AERIA RIP!