xtrap hack

[Useful] XTRAP / CrossFire / HGWC .. how it all works.

--------------------------------------------------------------------------------

I've been trying to get rid of XTrap for hours, i came very closed to getting it but not close enough...

Here's how the anti-hack system works:

You launch the CF client window where you press "Start game", It then

launches a .exe named "HGWC" then HGWC checks for XTrap updates, if

there is updates then it will download & update them.. If not then it will

immediately launch 'XTrap.xt' which uses a series of DLL (Dynamic Link
Library) files which look at the processes in the memory to catch hacks...

Once it's found clean, it will launch the process named 'CrossFire.exe' which

is the actual game.. However if you try to launch it without the client it will

not let you. XTrap has certain parameters to launch the .EXE of CF.. E.G

"C:/Program Files/Z8Games/CrossFire/crossfire.exe" /x = 211342 that's

just an example.. X=XTRAP and the numbers = Authorized launch key perhaps?


Here's what i tried to get RID of XTrap or prevent it from doing it's job:

-Taking all the DLL/EXE/.XT/ files and opening them with notepad then erasing all data then saving.. -Did not work, game did not launch or sometimes said 'bad image' on the DLL file

-Changing security permissions on XTrap.xt + HGWC.exe so it can't access my memory.. Did not work, XTrap said that it wasn't able to update.

-Just deleting all the anti-hack files.. Did not work, game didn't do ANYTHING.

-Running the CrossFire.exe main game executable from a command line and experimenting with params.. Did not work, it said launch the game from the client.


All i can say is, XTRAP+HGWC is one tough cookie to crack!


Hopefully this was useful to someone or informative, someone.. please try and crack this monster! D:<


VERY useful update:

I just found a TXT file in the CrossFire directory named version.ini..

It has a HGWC port for updates, if someone can get a server + make some XTrap DB files / then you change the IP/port to YOUR server IP then RELEASE an update from YOURSELF.. just leave an empty database lmao...

With the removal of XTrap, all the hack features will be RE-UNLOCKED!

Here's what the TXT file contained:

[HGW]
PORT=16666 (Port for downloading)
SERVER1=74.200.6.161 - Server1
SERVER2=74.200.6.163 - Server2
POD1=50
POD2=50

UPDATE 2: Turns out.. the version.ini is generated by the CrossFire client.exe instead of just reading off of the INI file..

But i wont give up hope, I'll always find something...
__________________