I saw where this had been done in the past (with other games, same ac though), it was on a different bypass (tried it but it didnt work lol) so i know its possible to do, just need to work it out.... (i suck with coding so im not much help, sry lol)
Analysis on XINGCODE
The normal injection is detected cause when injecting with LoadLibrary API the module get logged. Like Process Hacker application does.
The only solution is to inject with a manual mapper.
Or to make the AC somehow not detect the dll by hooking some of the functions it's using.
The only solution is to inject with a manual mapper.
Or to make the AC somehow not detect the dll by hooking some of the functions it's using.
Originally Posted by Jabberwock
The normal injection is detected cause when injecting with LoadLibrary API the module get logged. Like Process Hacker application does.
The only solution is to inject with a manual mapper.
Or to make the AC somehow not detect the dll by hooking some of the functions it's using.
The only solution is to inject with a manual mapper.
Or to make the AC somehow not detect the dll by hooking some of the functions it's using.
Originally Posted by Jabberwock
The normal injection is detected cause when injecting with LoadLibrary API the module get logged. Like Process Hacker application does.
The only solution is to inject with a manual mapper.
Or to make the AC somehow not detect the dll by hooking some of the functions it's using.
The only solution is to inject with a manual mapper.
Or to make the AC somehow not detect the dll by hooking some of the functions it's using.
I didn't get it , it will help the bypass thread.
Originally Posted by Frought
What is the manual mapper?
I didn't get it , it will help the bypass thread.
Basically any tutorial by Darawk will be beneficial, though I can not post links as e is a member on a rival site. He has not posted in about a year though and his personal website has closed down.
Originally Posted by Frought
What is the manual mapper?
I didn't get it , it will help the bypass thread.
Well I tried to use a manual mapper from one here on the forum and it gives me some crashes. So it's not completely good.
Originally Posted by Jabberwock
A manual mapper is a method to inject. For example instead of using the windows's built in API LoadLibrary, you build you own function so the AC wouldn't detect the dll. For example, Injector Gadget's cloak dll feature use his own function.
Well I tried to use a manual mapper from one here on the forum and it gives me some crashes. So it's not completely good.
It is the built in API = EnumProcessModules function (Windows)
Unless they built something different so someone try to hook that function.
Unless they built something different so someone try to hook that function.
Originally Posted by Jabberwock
It is the built in API = EnumProcessModules function (Windows)
Unless they built something different so someone try to hook that function.
Unless they built something different so someone try to hook that function.
Originally Posted by Lehsyrus
You just saved me about 20 minute of work (considering everything I am doing is ASM related). I'll see what I can do.
@Jabberwo0ck I believe what we need to do is hook that function to replace hprocess that HANDLE is pointing to, to a null process function. I'll need to check in to see what hprocess is in the API itself, to make sure it's hooking into XOGNCODE3. If it is, it possible that the function hprocess represents could be the portion of XIGNCODE3 that talks to the API in AVA itself, and I'd that's the case I should be able to simply change hprocess and that should cut the communications between them off completely. In just worried it will crash the client.
im trying to to mask the crc check from 3 days and there has been no betterment's 
can anyone pls help me with this cause if i try to block the crc check it crashes ... im loosing patience and hope ..trust me i have busted punk buster and hackshelid pro this anti-cheat is way above them when it comes to kernel level hooking... damn those noobs who found it :@
can anyone pls help me with this cause if i try to block the crc check it crashes ... im loosing patience and hope ..trust me i have busted punk buster and hackshelid pro this anti-cheat is way above them when it comes to kernel level hooking... damn those noobs who found it :@You can not block a CRC check, that is what causes the game to crash. Basically, the CRC chek is a consistency check, it makes sure te AC is running and properly connected to the game. You have to spoof it, which is what I am working on myself. Shits hard.
Originally Posted by Lehsyrus
You can not block a CRC check, that is what causes the game to crash. Basically, the CRC chek is a consistency check, it makes sure te AC is running and properly connected to the game. You have to spoof it, which is what I am working on myself. Shits hard.
---------- Post added at 02:20 PM ---------- Previous post was at 02:15 PM ----------
damn this fkin xsherlock.xem this processes is causing a serious amount of problem... how to bust this .. busting this = higher chances of bypassing...
Originally Posted by abhishekv
exactly!!!.. @Lehsyrus please let me know if u have any ideas on spoofing it ...... moreover this anti-cheat is some serious shit man !!!
---------- Post added at 02:20 PM ---------- Previous post was at 02:15 PM ----------
damn this fkin xsherlock.xem this processes is causing a serious amount of problem... how to bust this .. busting this = higher chances of bypassing...
---------- Post added at 02:20 PM ---------- Previous post was at 02:15 PM ----------
damn this fkin xsherlock.xem this processes is causing a serious amount of problem... how to bust this .. busting this = higher chances of bypassing...
