DMA/KVM external game mod
UnknownCheats thread ยท Report Bug ยท Request Feature
External game mod for Apex Legends.
The project is powered by ohosky, a universal game mod loader that was born from this project.
It accesses game memory via DMA or virtual machine.
Features
Mod Features
Apex Legends 3.0.2.14
UnknownCheats thread: https://www.unknowncheats.me/forum/apex-legends/406426-kvm-vmread-apex-esp-aimbot.html
Overlay Features
apexsky_overlay | ๐งLinux | ๐ชWindows | ๐Web | Shareable to teammates |
---|---|---|---|---|
player and health bar ESP | โ | โ | โ | โ |
mini-map radar | โ | โ | โ | โ |
show player box and skeleton | โ | โ | โ | ๐ง |
show nearby loots and death boxes | โ | โ | โ | ๐ง |
aiming target indicator | โ | โ | โ | โ |
fps display | โ | โ | โ | โ |
spectator list | โ | โ | โ | ๐ง |
teammate damage list | โ | โ | โ | โ |
voice navigator (callouts) | โ | โ | โ | ๐ง |
Please star if you like it. Look forward to your testing and feedback.
๐ฎGame Device | 2๏ธโฃecond Device | note | |
---|---|---|---|
๐ฎ๐ฅ๐ป+DMA+2๏ธโฃ๐ฅ๐ป | cleanโ | apexsky_dma+apexsky_overlay | |
2๏ธโฃ๐ง(Host)+๐ฎ(VM) | cleanโ | apexsky_dma+apexsky_overlay | Requires dual GPU |
2๏ธโฃ๐ง(Host, no GPU)+๐ฎ(VM) | cleanโ | apexsky_dma | No overlay |
2๏ธโฃ๐ง(Host, no GPU)+๐ฎ(VM) | apexsky_overlay | apexsky_dma | Overlay can be detected |
2๏ธโฃ๐ง(Host, no GPU)+๐ฎ(VM) | apexsky_overlay๐ in browser | apexsky_dma | Difficulty in displaying the graphics on the game |
๐ฎ๐ง | apexsky_dma+apexsky_overlay | Not recommended |
Play with DMA:
./skyrun.exe --load apex1.spk --load apex1_sg.spk
Play with VM:
There are really only two steps:
Run the game on a Windows guest in a KVM virtual machine.
Run the compiled mod program on the Linux host.
Using Memflow
sudo ./skyrun --load apex1.spk --load apex1_sg.spk kvm
Using LeechCore
Find the virtual machine process PID and QMP address after starting the virtual machine, then run the mod program on the Linux host.
sudo ./skyrun --load apex1.spk --load apex1_sg.spk vmm qemu://hugepage-pid=<PID>,qmp=<QMP_ADDRESS>
For example, if your VM's PID is 5678 and the QMP address is /tmp/qmp-win11.sock, the command would be:
sudo ./skyrun --load apex1.spk --load apex1_sg.spk vmm qemu://hugepage-pid=5678,qmp=/tmp/qmp-win11.sock
See details at https://github.com/ufrisk/LeechCore/wiki/Device_QEMU
Select target game variant:
Default: game_dx12.exe
To target game.exe (DX11), edit settings.toml
and set game_ver_dx11
to true.
Start menu only:
./skyrun --load apex1.spk mod-menu
Overlay (optional):
ESP is now implemented as a stand-alone program. The official apexsky_overlay
currently supports Linux/Windows/Web platforms.
You can choose apexsky_overlay
for any platform or use them both. You can also write your own unofficial overlay program.
Linux
apexsky_overlay
Windows
apexsky_overlay.exe
Web
Access via browser at https://chettoy.github.io/apexsky/
[!NOTE] If you are using a resolution other than 1920x1080, save the configuration and then modify the
screen_width
andscreen_height
in settings.toml and reload the configuration.
[!NOTE] The default setting only allows connections from localhost. If remote access is required, you need to expose the ESP service port on the network. The listening address can be viewed and edited in settings.toml.
To use overlay, first ensure that the ESP service is enabled, either by enabling it in the menu or by editing the settings file.
You can then connect overlay running on any platforms to apexsky's ESP service.
~~Press Insert to open the Overlay menu.~~ Press and hold the Insert key to temporarily interact with the overlay.
Click the Connection
button to display the address bar, and then click again to connect to the ESP service.
~~To install mods:~~
mods
folder in ~/.local/share/apexsky/
or in the current directory.~~.spk
mod package into the mods
folder.~~A more user-friendly installation method is still under development.
To make mods:
Currently, mods can be written in Rust, C++, or JavaScript. To write mods in Python, please raise an issue to discuss support for Python.
Refer to the provided examples for writing mods in different languages:
ohosky_sdk/ohosky_api
.apexsky/mods/apex1_sg
.The current mod API provides a unified interface for accessing the target process memory and the ability to share data between mods. All mods loaded will run at the same time and will share DMA device connections and caches.
Use ohosky_mod_packer
to pack mods
./ohosky_mod_packer path/to/output.spk path/to/mod/manifest.json
Download the mod loader and libraries for accessing memory
skyrun: Find the precompiled skyrun
.
memflow libs: ~~Ensure the corresponding memflow connector plugin files are in ~/.local/lib/memflow/
or the current directory~~
No need to download memflow libs anymore.
vmm lib: If using MemProcFS or LeechCore, extract files to ~/.local/lib/memprocfs/
or the current directory:
Download and extract the files from MemProcFS Releases.
For FPGA on Windows, download FTDI drivers and place it alongside leechcore.dll
.
FT601: Download the 64-bit FTD3XX.dll
from FTDI.
For FT2232H instead of the FT601: Download D2XX drivers from ftdichip.
Download apexsky mods
Click on Actions to download the auto-built artifacts.
Or compile it yourself.
Requirements:
Install Rust nightly:
Run the following command to install rustup
:
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
Set nightly as the default toolchain:
rustup default nightly
Install the toolchain for compiling webassembly components:
rustup target add wasm32-wasip2
Install Build Dependencies:
Ubuntu
sudo apt install clang protobuf-compiler libusb-1.0-0-dev libzstd-dev pkgconf libx11-dev libasound2-dev libudev-dev libxkbcommon-x11-0 libwayland-dev libxkbcommon-dev lld
Arch
sudo pacman -S clang protobuf libusb zstd libx11 pkgconf alsa-lib wayland-protocols wayland lld
Build:
git clone --recurse https://github.com/chettoy/apexsky
cd apexsky
git checkout next
git submodule update --init --recursive
cd apexsky
cargo build --release
cd apex1_offsets_parser
cargo build --release --target wasm32-wasip2
cd ..
cd apexsky_overlay
cargo build --release
cd ..
Pack mods:
Linux:
# Edit mods/apex1/manifest.json
# find "apexsky_dma" in components and delete the unnecessary entries in its target, leaving only the target you compiled, like target: ["x86_64-linux"]
../ohosky_sdk/bin/x86_64-unknown-linux-gnu/ohosky_mod_packer target/release/apex1.spk mods/apex1/manifest.json
../ohosky_sdk/bin/x86_64-unknown-linux-gnu/ohosky_mod_packer target/release/apex1_sg.spk mods/apex1_sg/manifest.json
Windows
# Edit mods/apex1/manifest.json
# find "apexsky_dma" in components and delete the unnecessary entries in its target, leaving only the target you compiled, like target: ["x86_64-windows"]
../ohosky_sdk/bin/x86_64-pc-windows-msvc/ohosky_mod_packer.exe target/release/apex1.spk mods/apex1/manifest.json
../ohosky_sdk/bin/x86_64-pc-windows-msvc/ohosky_mod_packer.exe target/release/apex1_sg.spk mods/apex1_sg/manifest.json
It seems that the client is still reading the values required for the ESP stuff. If AC is looking for access on those specific memory locations, then IDK if just removing the implementation of the overlay will work in terms of preventing detection. Or is AC simply detecting the presence of the overlay/client itself, and banning due to that?
First of all, everything related to game state is realized by access on those specific memory locations. So we need to use DMA or VM techniques to access memory covertly. AC detects the overlay client, so we re-implement the overlay outside the game device and remove the client.
How to load new offsets after a game update
Place a updated offsets.ini in the same directory to automatically load the new offsets instead of the built-in offsets. This may not always be enough to keep up with changes in game updates, but for the most part this will allow play to continue.
Join the apexsky community server at Discord!