Well smartguard its a memoryscanner they are using callgates for syscalls and use some NtApi to detect things no big deal they just hidding behind vmprotect virtualization.i manage to bypass it in 3 weeks but i will not share or sale at the moment my bypass works on l2lionna witch i bot