1.
void UnlinkPsActiveProcessListEx(PWCH processName)
Hides the process and its threads from kernel-level anti-cheat. This is a newer version of it that is PatchGuard-compatible. Compatibility tested with Windows 10 Pro 22H2 and Windows 11 Pro 25H2 versions.
A hidden process is detected by EAC if you don't hide the process threads properly. Unlinking the threads from the thread list is not enough; it has to be done in a more sophisticated way.
Bypasses all kernel-level anti-cheat systems (EAC//EAAC/BattlEye) hidden process checks as of 06/2026. Verified using the HiddenProcess.h implementation based on reversing EAC.
Includes dedicated undetected (WS_EX_TOPMOST | WS_EX_LAYERED | WS_EX_COMPOSITED | WS_EX_TRANSPARENT) overlay without hooks.
These two things need to be in place if you intend to deliver a truly undetectable P2C. When the process is hidden in this way, the anti-cheat cannot dump it, nor can it send it to their servers for analysis.
PoC:
https://overlayhack.com/UNIT-123-PART-6/UNIT-123-PART-6_player.htmlThis bypass costs 4,999 USD in BTC and requires signing a software agreement by email.