Quote:
Originally Posted by naufaltaris
Im need bypass xigncode3 for audition Ayodance ...  |
if the keep alive packets are disabled you can stop xc from the initialisation
and disable it.
you can also block the driver by either using driver radar pro, PC Hunter
(works till Version XC3 53680), use faze startservice return method or just c# copy paste
Code:
try
{
string fpath = @"C:\Windows\xspirit.sys";
if (File.Exists(fpath))
{
var fs = new FileStream(fpath, FileMode.Append, FileAccess.ReadWrite, FileShare.ReadWrite, -1);
}
else
{
File.WriteAllBytes(fpath, new byte[0]);
var fs = new FileStream(fpath, FileMode.Append, FileAccess.ReadWrite, FileShare.ReadWrite, -1);
label1.Text = ("Zugriff verweigert");
}
string fpath2 = @"C:\Windows\xhunter1.sys";
if (File.Exists(fpath2))
{
var fs2 = new FileStream(fpath2, FileMode.Append, FileAccess.ReadWrite, FileShare.ReadWrite, -1);
}
else
{
File.WriteAllBytes(fpath2, new byte[0]);
var fs2 = new FileStream(fpath2, FileMode.Append, FileAccess.ReadWrite, FileShare.ReadWrite, -1);
label2.Text = ("Erişim Engellendi");
}
}
catch
{
}
if (Process.GetProcessesByName("S4Client.exe").Length > 1);
{
label1.Text = ("XC Bypassed");
label2.Text = ("XC Bypassed");
}
}
If xigncode checks if driver is not loaded and dc you
you either can inject ur fast enought before the driver is loaded or
you need to unregister ObRegisterCallbacks.
You can also write your own driver with own read/write memory method.
If you wanna do cool d3d things you need undetected hooks like pageguard hook,
where you trigger an exception with virutalprotect.
Use an UD memoryscanner/Cheat Engine, safes a lot of time.
