xingcode comin to IntAO

08/13/2015 12:50 bogda32#1
yeah,it's here to be up online withe thursday maintenance.so,any ideea on how to get ridd of this xingcode?
08/13/2015 17:20 AO Argos#2
it scans only running programs while AO is running right?
so, having a shit load of programs in my work laptop is ok?
08/13/2015 18:46 evilimprint#3
It was just prep for xigncode, does not look like it has been implemented.
08/15/2015 00:34 roger21#4
If I wore a tinfoil hat i would guess that tonight's "ISP patch" was to enable it.

Does anyone have some links to get me started figuring out how to bypass xingcode? From what I can tell there are multiple versions, what version are we looking at for AO?

I have never played a game with a watchdog, and am really annoyed that one is coming.

Thanks!
Roger

So, am I on the right track researching this -

xigncode reports the use of things like cheat engine and sandboxie on a local machine - possibly even if it has run for the last x hours according to some accounts.

Will it catch the autoIT script I have hooked to the exe? If not, this means that the problem will be just getting the offsets. Will this be as simple as bypassing it once to get offsets, then just going about business as usual?

And, if this list I found of detected processes is correct Privoxy is on the flag list? WTF. AO or not, i don't think I want this crap on my PC period.

Woops, i meant for that edit to be a reply!

Woops, i meant for that edit to be a reply!
08/21/2015 03:55 roger21#5
Just thinking outloud - when I rename the xigncode folder and start atlantica.exe it shows "xigncode sysenter fail - errorcode : 126" . Can we not trick the .exe into thinking xigncode is hooking to it at startup?
08/21/2015 04:20 evilimprint#6
We have found a bypass and working on implementation.
08/21/2015 16:07 neuronet#7
Quote:
Originally Posted by roger21 View Post
Just thinking outloud - when I rename the xigncode folder and start atlantica.exe it shows "xigncode sysenter fail - errorcode : 126" . Can we not trick the .exe into thinking xigncode is hooking to it at startup?
Roger, you could prevent XC3 from starting up, but after max 5 mins you get a DC due to missing hearbeat.
08/22/2015 01:25 roger21#8
Dang heartbeat, I didn't consider that.

Wonderful news, Evil!

Do you plan on incorporating this directly in your product?

The fun part of AO for me is maintaining my own bot; rewriting and tinkering for different situations and forms.

Would you consider releasing it or information about it in a standalone form, either publically or we could come to some form of private agreement?

Thanks!
-Roger
08/22/2015 01:39 evilimprint#9
No i don't think me or neuro will publicly come out on how we have done it. That will risk the fact of it getting patched. I would recommend unpacking the xigncode dependency's and figure out either the heartbeat or their method of detection and work from that.