Xigncode

[kittoniumbp]

can anybody post some info on it?

[Chris.H]

Ok nobody comment, i will post a very good post about it. (It's time to publish my project)

[kittoniumbp]

Ok nobody comment, i will post a very good post about it. (It's time to publish my project)

ty a lot man

[supercarz1991]

as he said over a week ago xD

[96neko]

hope you find this useful dont PM nor ask me how to use this

DWORD MyBase = GetModuleBase32("sechost.dll", PID);
			
			Memory *memory = new Memory(); //code you own memory

			memory->FindPattern("mygame", MyBase, MyBase + 0x100000, (BYTE*)"\x00", 1);//use your own pattern

			for (int i = 0; i < sizeof(memory->Result); i++)
			{
				printf("%X\n", memory->Result[i]);//displays the threads suspended 
			}

[kittoniumbp]

hope you find this useful dont PM nor ask me how to use this

DWORD MyBase = GetModuleBase32("sechost.dll", PID);
			
			Memory *memory = new Memory(); //code you own memory

			memory->FindPattern("mygame", MyBase, MyBase + 0x100000, (BYTE*)"\x00", 1);//use your own pattern

			for (int i = 0; i < sizeof(memory->Result); i++)
			{
				printf("%X\n", memory->Result[i]);//displays the threads suspended 
			}

fucking noob spammer i didnt ask for a crappy sigscan example

[96neko]

fucking noob spammer

choose your words carefully next time , or i'll report to a mod

i didnt ask for a crappy sigscan example

that " crappy sigscan example " is a working XC3 bypass i'm using ( credits to B for explaining the XC CRC) , what's left is just to make a "WriteProcessMemory"
example , N is just a number + \x0 you need to figure out what they are :

WriteProcessMemory(OpenProcess(PROCESS_ALL_ACCESS, false, PID), (LPVOID)(memory->Result[i] + N), (LPCVOID)"\x0", 1, NULL);

don't forget the loop b4 the WPM , or you can forget all of this and read more about CRC
either way you will do this " crappy " code since it's the only way to fully bypass XC ...

[kittoniumbp]

choose your words carefully next time , or i'll report to a mod

that " crappy sigscan example " is a working XC3 bypass i'm using ( credits to B for explaining the XC CRC) , what's left is just to make a "WriteProcessMemory"
example , N is just a number + \x0 you need to figure out what they are :

WriteProcessMemory(OpenProcess(PROCESS_ALL_ACCESS, false, PID), (LPVOID)(memory->Result[i] + N), (LPCVOID)"\x0", 1, NULL);

don't forget the loop b4 the WPM , or you can forget all of this and read more about CRC
either way you will do this " crappy " code since it's the only way to fully bypass XC ...

i already have functions to do this, i just wanted some info on xigncode, not what to use to bypass xigncode..

[96neko]

i already have functions to do this, i just wanted some info on xigncode, not what to use to bypass xigncode..

if that the case , what kind of "some info" you need ?

[kittoniumbp]

if that the case , what kind of "some info" you need ?

wheter CA has a xigncode heartbeat and
the actual bypass it self so i can port my framework to CA and release it on MPGH.

[96neko]

1 - yes it does
2 - i didnt understand what you mean ! do you need my bypass to use it and release a hack on MPGH ?

[kittoniumbp]

1 - yes it does
2 - i didnt understand what you mean ! do you need my bypass to use it and release a hack on MPGH ?

i want any working bypass, so i can release a hack on MPGH.

[96neko]

i already have functions to do this, i just wanted some info on xigncode, not what to use to bypass xigncode..

you dont need XC3 bypass at all , you only need it unless your going to use CE , you can simply use manual map + simple hook and you can do whatever you want ,my friend told me that CA using some sort of 2nd A/C included with XC3 , bypass that A/C and just unpack engine.exe/cshell.dll and get your stuffs and your ready to go . and GLHF
PS: i do not play CA

[kittoniumbp]

you dont need XC3 bypass at all , you only need it unless your going to use CE , you can simply use manual map + simple hook and you can do whatever you want ,my friend told me that CA using some sort of 2nd A/C included with XC3 , bypass that A/C and just unpack engine.exe/cshell.dll and get your stuffs and your ready to go . and GLHF
PS: i do not play CA

so if i just manual map the hack and just place a detour on dx9 present it will work without detections?
what about the other AC....... how do i bypass that?

[96neko]

so if i just manual map the hack and just place a detour on dx9 present it will work without detections?
what about the other AC....... how do i bypass that?

i doubt that , the vmt hook is kinda detected by CA 2nd A/C , ive tried it today and i got hack dc by the game and it gives me auto ban from the game , i think that it scans the vmt and sends a packet to the game client and forces it to DC and to give auto ban

so if i just manual map the hack and just place a detour on dx9 present it will work without detections?
what about the other AC....... how do i bypass that?

as i said above , i dont know about that AC yet i didnt try to do anything to it since i do not have a spare time , my only advice is to try to use the game endscene/present and try to hook it without the vmt and try to display even a text ingame and play to test if theres some kind of check for those , or you can search for the check for the dx9 hook and disable it , or you could see the packet sent by the AC ( if theres any tho , but everything is possible since i got the ban after 2 - 3 mins of gameplay, else you need to bypass the AC which i have no idea about , try the search button maybe theres a thread out there about it that can help you