Research Archive

Technical analysis of anti-cheat systems, kernel security, and Windows internals.

Javelin (EA-AC)

All Javelin content is password-protected and shared exclusively with EA security staff to prevent misuse by malicious actors.

Reversing EA's thread stackwalking implementation, along with a few bits of bonus content about their interruption methods.

Reversing EA's encrypted import table implementation using per-call-site XOR keys and obfuscated construction patterns.

Deep dive into EA AntiCheat's function pointer hooking approach to mouse input monitoring through WPP tracing infrastructure.

Analysis of EAC's AES-256-CBC + ECDSA-P256 implementation, extracting keys from obfuscated code, and discovering their driver enumeration system.

From telemetry profiling to backend intelligence, this is the reality of the anti-cheat arms race.

Detecting fake parity errors in the PFN database by cross-referencing against Intel's Machine Check Architecture registers.

Providing a safer, efficient alternative to NMI callbacks while maintaining HVCI compliance and detecting sophisticated kernel-mode cheats.