[Release] EAC Bypass

[klearbear223]

Originally Posted by Tabino

rename s4client.exe to s4client_eac.exe and s4client_eac.exe to s4client.exe
inject dll at server select


vt:



what a ****** game lol
it just blocks eac_c2s_data and removes the eac kicked you!!!!!!!!!!!! msgbox xdddddd

Idk how 2 Inject.
Can someone tell me how?

[Tabino]

its currently not working because heartbeat is enabled. if you want to fiddle around with it, launch without eac(rename client) and block S4Client_EAC.exe+B7A660 -> eac_c2s_data

or you can change the first param (push eax) to 0-1

some info if somebody is planning to emulate it:

 Spoiler

1st param is something like error code when connecting to the gameserv. 3 is for invalid game instance and 4 is compromised client integrity. thats why changing it to 0-1 lets us to connect to the server but hb still kicks you out because of invalid data.

3rd param is spesific to the account when connecting to the gameserv. it doesnt change unless you change the account.

2nd param looks like its randomly generated.

after connecting to the server 1st param jumps to 2 and is incremented every 5 secs

2nd and 3rd param are always equal and randomly generated.

i have attached a log of params(taken while eac was on -> valid data) if youre interested

tip: abuse lsass.exe handles to read/write memory while eac is on

[Arashiku]

Wtf i don't understand

[The-.-"Carlos]

Originally Posted by Tabino

its currently not working because heartbeat is enabled. if you want to fiddle around with it, launch without eac(rename client) and block S4Client_EAC.exe+B7A660 -> eac_c2s_data

or you can change the first param (push eax) to 0-1

some info if somebody is planning to emulate it:

 Spoiler

1st param is something like error code when connecting to the gameserv. 3 is for invalid game instance and 4 is compromised client integrity. thats why changing it to 0-1 lets us to connect to the server but hb still kicks you out because of invalid data.

3rd param is spesific to the account when connecting to the gameserv. it doesnt change unless you change the account.

2nd param looks like its randomly generated.

after connecting to the server 1st param jumps to 2 and is incremented every 5 secs

2nd and 3rd param are always equal and randomly generated.

i have attached a log of params(taken while eac was on -> valid data) if youre interested

tip: abuse lsass.exe handles to read/write memory while eac is on

Can you make a video? pls :c

[Anja Mielbrecht]

Originally Posted by Tabino

its currently not working because heartbeat is enabled. if you want to fiddle around with it, launch without eac(rename client) and block S4Client_EAC.exe+B7A660 -> eac_c2s_data

or you can change the first param (push eax) to 0-1

some info if somebody is planning to emulate it:

 Spoiler

1st param is something like error code when connecting to the gameserv. 3 is for invalid game instance and 4 is compromised client integrity. thats why changing it to 0-1 lets us to connect to the server but hb still kicks you out because of invalid data.

3rd param is spesific to the account when connecting to the gameserv. it doesnt change unless you change the account.

2nd param looks like its randomly generated.

after connecting to the server 1st param jumps to 2 and is incremented every 5 secs

2nd and 3rd param are always equal and randomly generated.

i have attached a log of params(taken while eac was on -> valid data) if youre interested

tip: abuse lsass.exe handles to read/write memory while eac is on

This can bring a lot of good ideas but fml to work smth
anw thanks ~~

[Decomp]

Where is injector?

[Micracoli]

Use CE or process hacker

[Decomp]

Originally Posted by Micracoli

Use CE or process hacker

What is ce?

Please make video

[b0sted]

Is it still working?

[K1ramoX]

closed