XIGNCODE3 start address problem >>> I have x3.xem adresse

**ramiro2016** · 06-23-2016

Hello, 1st sorry 4 my bad eng

I wanna Bypass XIGNCODE3 of a game I have, but I don't know how to obtain the exact address to kill xigncode before it starts

This is an image from OllyDbg:

Please, Share any idea you have !

thanks

---------
I did Put a
mov eax,1
Retn
At 4aa2c0

but xigncode3 detect it; i use this dll :

Code:

#include <Windows.h>
 
DWORD dwXignInitFnc = 0x004AA2C0;
 
BOOL WriteBytes(DWORD dwAddress, LPBYTE lpBuffer, DWORD nBytes) {
    if (nBytes == 0) {
        OutputDebugString(L"WriteBytes:: Tried to write 0 bytes to memory.");
        return FALSE;
    }
    DWORD dwOldProtect;
    if (!VirtualProtect((LPVOID)dwAddress, nBytes, PAGE_EXECUTE_READWRITE, &dwOldProtect)) {
        OutputDebugString(L"WriteBytes:: Failed to change access protection on memory address.");
        return FALSE;
    }
    memcpy((LPVOID)dwAddress, lpBuffer, nBytes);
    if (!VirtualProtect((LPVOID)dwAddress, nBytes, dwOldProtect, &dwOldProtect)) {
        OutputDebugString(L"WriteBytes:: Failed to change access protection on memory address.");
        return FALSE;
    }
 
    return TRUE;
}
 
BOOL StopXignInit() {
    /*
    Modify code to:
    mov eax, 1
    ret
    nop
    */
    return WriteBytes(dwXignInitFnc, (PBYTE)"\xB8\x01\x00\x00\x00\xC3\x90", 9);
}
 
BOOL APIENTRY DllMain(__in HINSTANCE hInstance, __in DWORD fdwReason, __in __reserved LPVOID lpReserved) {
    UNREFERENCED_PARAMETER(lpReserved);
    if (fdwReason == DLL_PROCESS_ATTACH) {
        if (StopXignInit()) {
            OutputDebugString(L"Successfully stopped XIGNCODE3 from initializing!");
        }
        else {
            OutputDebugString(L"Failed to stop XIGNCODE3 from initializing!");
        }
    }
    return TRUE;
}

then i search for the callers, and I found this:

Please What is next !!

the complete screen image is here:

I attached the dumped file of the game !

https://virustotal.com/en/file/04967...is/1467099008/