Anti-Cheat Bypass
Discuss how to go undetected against anti-cheating software.

Go Back   The World of Game Hacking > General GameHacking > Anti-Cheat Bypass

IRC Rules
Post New Thread  Reply
 
LinkBack Thread Tools Display Modes
  (#1 (permalink)) Old
n00bie
 


8-Bit Member

 
Posts: 9
Join Date: Jan 2010
Last Online: 03-09-2010 01:55 AM
Reputation: Archey is on a distinguished road
User is Offline
   
I finnaly got Xlive - 02-06-2010, 08:39 AM

Okay I finally got xlive, and did the thing in 0lly, but now i can't continue, or load games, or open Windows Live in-game? Is there something wrong?
  
Reply With Quote
  (#2 (permalink)) Old
Elite
 
VegitoSSJ's Avatar
 


128-Bit Member

 
Posts: 370
Join Date: Aug 2006
Last Online: Yesterday 07:32 PM
Reputation: VegitoSSJ is on a distinguished road
User is Offline
   
02-06-2010, 08:58 AM

You probably killed it completely. The newer version of xlive needs xlive to be enabled no matter what, else the game will not run at all.
  
Reply With Quote
  (#3 (permalink)) Old
n00bie
 


8-Bit Member

 
Posts: 9
Join Date: Jan 2010
Last Online: 03-09-2010 01:55 AM
Reputation: Archey is on a distinguished road
User is Offline
   
02-06-2010, 09:02 AM

Quote Originally Posted by VegitoSSJ View Post
You probably killed it completely. The newer version of xlive needs xlive to be enabled no matter what, else the game will not run at all.
Well the game runs, just cant load any saves, or get on windows live.

EDIT: After starting a new save game, i saw it moved the saves up one directory, but will it be possible to access windlows live?

Also after trying to change a value with CE, the game still crashed.

Last edited by Archey; 02-06-2010 at 09:15 AM..
  
Reply With Quote
  (#4 (permalink)) Old
Member
 


32-Bit Member

 
Posts: 78
Join Date: Apr 2007
Last Online: Yesterday 11:23 PM
Reputation: DABhand is on a distinguished road
User is Offline
   
02-06-2010, 09:22 AM

Some games save under a xlive profile. Check in your user folder etc. It will be there somewhere, all you do is then start a new game, make a save early on, find where it went after you saved without xlive active. And copy+paste into that folder. Done.

Im guessing this is Fallout 3 your talking about. You dont have to use Olly to disable xlive, just rename the Fallout3.exe.cat file in the game folder.

Other games like GTA4 etc will require xlive to be running so you cant do that and will have to patch xlive.
  
Reply With Quote
  (#5 (permalink)) Old
n00bie
 


8-Bit Member

 
Posts: 9
Join Date: Jan 2010
Last Online: 03-09-2010 01:55 AM
Reputation: Archey is on a distinguished road
User is Offline
   
02-06-2010, 09:34 AM

Quote Originally Posted by DABhand View Post
Some games save under a xlive profile. Check in your user folder etc. It will be there somewhere, all you do is then start a new game, make a save early on, find where it went after you saved without xlive active. And copy+paste into that folder. Done.

Im guessing this is Fallout 3 your talking about. You dont have to use Olly to disable xlive, just rename the Fallout3.exe.cat file in the game folder.

Other games like GTA4 etc will require xlive to be running so you cant do that and will have to patch xlive.
okay, and renaming the file will make me be able to edit memory, such as values? also i cant seem to get my old xlive.dll, how do i got about doing this?
  
Reply With Quote
  (#6 (permalink)) Old
Supervisor
 
[Psych]'s Avatar
 


256-Bit Member

 
Posts: 1,616
Join Date: Jan 2008
Reputation: [Psych] will become famous soon enough
User is Offline
   
02-06-2010, 10:08 AM

Yeah, sorry it's not quite as easy as just randomly finding some bits to patch. The end result of doing some wrong with xlive is that it stops working. The integrated functions which handle saving/loading, achievements, in-game menu, etc all cease to work.
  
Reply With Quote
  (#7 (permalink)) Old
n00bie
 


8-Bit Member

 
Posts: 9
Join Date: Jan 2010
Last Online: 03-09-2010 01:55 AM
Reputation: Archey is on a distinguished road
User is Offline
   
02-07-2010, 12:02 AM

Quote Originally Posted by [Psych] View Post
Yeah, sorry it's not quite as easy as just randomly finding some bits to patch. The end result of doing some wrong with xlive is that it stops working. The integrated functions which handle saving/loading, achievements, in-game menu, etc all cease to work.
Ok, well when i patched it, the game would still crash after changing values in CE
  
Reply With Quote
  (#8 (permalink)) Old
Supervisor
 
[Psych]'s Avatar
 


256-Bit Member

 
Posts: 1,616
Join Date: Jan 2008
Reputation: [Psych] will become famous soon enough
User is Offline
   
02-07-2010, 12:37 AM

It may not have been xlive. Xlive checks the game CODE not any old memory allocated in DATA, which is why I doubt this. You've picked one hell of a game/concept to start on.
  
Reply With Quote
  (#9 (permalink)) Old
n00bie
 


8-Bit Member

 
Posts: 9
Join Date: Jan 2010
Last Online: 03-09-2010 01:55 AM
Reputation: Archey is on a distinguished road
User is Offline
   
02-07-2010, 02:26 AM

Quote Originally Posted by [Psych] View Post
It may not have been xlive. Xlive checks the game CODE not any old memory allocated in DATA, which is why I doubt this. You've picked one hell of a game/concept to start on.
Yeah, well i kinda just wanna bypass xlive, for when im playing
  
Reply With Quote
  (#10 (permalink)) Old
n00bie
 


8-Bit Member

 
Posts: 2
Join Date: Feb 2010
Last Online: 02-23-2010 08:34 PM
Reputation: eyebiz is on a distinguished road
User is Offline
   
02-10-2010, 09:29 PM

Simple AA script for Cheat Engine v5.6 to bypass the XLive memory tampering check.
Creds to Psych for finding the byte pattern and to Dark Byte for the excellent tool.

Code:
alloc(xLive,4)
aobscan(xLive,8B EC 83 EC 20 53 56 57 8D 45 E0 33 F6 50 FF 75 0C 8B F9)
[ENABLE]

xLive-3:
ret 0c

[DISABLE]

xLive-3:
mov edi,edi
push ebp
  
Reply With Quote
  (#11 (permalink)) Old
Supervisor
 
[Psych]'s Avatar
 


256-Bit Member

 
Posts: 1,616
Join Date: Jan 2008
Reputation: [Psych] will become famous soon enough
User is Offline
   
02-10-2010, 09:57 PM

Just to note that this in no way aids when actually hacking; IE. it doesn't bypass any xlive anti-debug. Just to be clear on that as countless people have moaned about it 'not working' or just not knowing what it really does.
  
Reply With Quote
  (#12 (permalink)) Old
Senior Member
 
kip8r's Avatar
 


64-Bit Member

 
Posts: 195
Join Date: Nov 2007
Last Online: 03-04-2010 11:31 PM
Reputation: kip8r is on a distinguished road
User is Offline
usa
   
02-12-2010, 12:42 AM

So will this patch allow you to run hacks on most games that use xlive.dll for protection or is it specifically for a certain game?

I have a hack for Bioshock 2 but again the xlive.dll crashes the game after a few minutes.
  
Reply With Quote
  (#13 (permalink)) Old
Supervisor
 
[Psych]'s Avatar
 


256-Bit Member

 
Posts: 1,616
Join Date: Jan 2008
Reputation: [Psych] will become famous soon enough
User is Offline
   
02-12-2010, 10:09 AM

Depends on what you're doing. Attaching a debugger will crash it (which this doesn't help with). Altering gamecode can be done and this patch helps in this case; and only in this case. You're on your own for creating the hacks initially. Specifics?
  
Reply With Quote
  (#14 (permalink)) Old
Senior Member
 
kip8r's Avatar
 


64-Bit Member

 
Posts: 195
Join Date: Nov 2007
Last Online: 03-04-2010 11:31 PM
Reputation: kip8r is on a distinguished road
User is Offline
usa
   
02-12-2010, 06:26 PM

Hi Psych,

Yeah I knew it would crash the debugger. I just have a simple hack for Health and Eve which works for a few minutes then the game crashes because xlive is seeing I changed memory. I was just interested if this hack would stop xlive from crashing the game if it spots modded memory.

Anyway I've pretty much got the code written in my trainer to scan and patch xlive.dll. I'll let you know if it works on the version of xlive.dll with Bioshock 2.
  
Reply With Quote
  (#15 (permalink)) Old
Supervisor
 
[Psych]'s Avatar
 


256-Bit Member

 
Posts: 1,616
Join Date: Jan 2008
Reputation: [Psych] will become famous soon enough
User is Offline
   
02-12-2010, 06:32 PM

Xlive version is v3.1.99 on Bioshock 2 (it will auto-update to that if it's older on install). It's been out since the end of last year though, so it's not exactly new. Besides my byte pattern has been effective thus far on 'all' previous versions. And yes, this is exactly what this is intended for, stopping the memory integrity checks.
  
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes




New To Site? Need Help?


All times are GMT +1. The time now is 03:29 AM.


Powered by vBulletin
Copyright ©1995 - 2009 GameHacking.com & CES