hmm... so if first doesn't work then any idea why my thread is not working properly when injected before hs?
Edit.
Ok so I found a way to inject without beeing detected and without any driver

. Proxy DLL partially works. I have to say that I'm a little surprised that hs is so stupid xD. You can pretty much load as much dlls into the process as u want without even touching HS and stay undetected.
So now I will start to look for kal funcs in engine. Any advices how can I start finding for example chat func address, notice, dropped items, etc? On this other topic I saw some generated stuff by IDA with names like CItemDropped. Was it coming from dumped engine or some1 reversed it by hand?