CE Xero Table

[xAmbiente]

well, ive made up my mind,

here u go

[kevinkilller998]

What is this?

[Neyil]

crashes

[Enable]
aobscan(ISP,0F 2F 85 ?? ?? ?? ?? 76 1E 51 F3 0F 10 85 ?? ?? ?? ?? F3 0F 11 04 24 8B 4D 80 8B 11 8B 4D 80 8B 82 ??)
label(ISP_)
registersymbol(ISP_)

ISP:
ISP_:
db 0F 2F 85 26


[Disable]
ISP_:
db 0F 2F 85 30
unregistersymbol(ISP_)

Originally Posted by kevinkilller998

What is this?

lol btw

[LowLvlGod]

Careful, they detect any .text changes and report it to the server, even if they don't crash you right away.

[Neyil]

.text resources are executable?

Where is the info that they are sending, you would have to send a fake

[0N1K4G3]

Originally Posted by Neyil

crashes

[Enable]
aobscan(ISP,0F 2F 85 ?? ?? ?? ?? 76 1E 51 F3 0F 10 85 ?? ?? ?? ?? F3 0F 11 04 24 8B 4D 80 8B 11 8B 4D 80 8B 82 ??)
label(ISP_)
registersymbol(ISP_)

ISP:
ISP_:
db 0F 2F 85 26


[Disable]
ISP_:
db 0F 2F 85 30
unregistersymbol(ISP_)

It's because this part of the memory is protected. So patching the memory ofc will crash.

[Neyil]

Originally Posted by 0N1K4G3

It's because this part of the memory is protected. So patching the memory ofc will crash.

1 month ago I used an old pattern and had *** mode working.

You say it is "protected"

How is it protected then?

Later I will try to reverse the crash and see if I can skip it

[0N1K4G3]

Originally Posted by Neyil

1 month ago I used an old pattern and had *** mode working.

You say it is "protected"

How is it protected then?

Later I will try to reverse the crash and see if I can skip it

you're wrong, If this => '72 10 F3 0F 10 85 ?? ?? ?? ?? F3 0F 11 85 ?? ?? ?? ?? 8D 8D ?? ?? ?? ?? 51 8B 15 ?? ?? ?? ?? 52 8B 4D 90 83 C1 2C E8 ?? ?? ?? ?? 8B' is what you used then it was protected.

[LowLvlGod]

Originally Posted by Neyil

1 month ago I used an old pattern and had god mode working.

The most likely reason why you didn't crash is because they temporarily disabled it. Some things i did before that caused a crash suddenly didn't crash anymore, but wasn't a fault on their side, it was strategy. Instead of crashing you directly, they let you do your thing while still logging any of your attempts to find out what you are doing.

Originally Posted by Neyil

How is it protected then?

Integrity checks, they constantly scan memory regions and calculate checksums.

Originally Posted by Neyil

Later I will try to reverse the crash and see if I can skip it

For crashing, they use several methods, last time i checked including

• spawning threads at random locations
• spamming exceptions
• memory allocation flood

The AC they use was initially created by Vivien (VivyaCC) in Remnants days, later rewritten and further enhanced for Xero (likely) in collaboration with Dean (Xero owner). I have enought experience with this people to know that it isn't wise to publicly disclose any information on how to bypass their stuff, as they are very active on this forum. The have even hidden their online activity on their profiles to hide their presence.

Dean ->
Vivien ->