Jump to content

Szakalaka

Members
  • Posts

    1,339
  • Credits

  • Joined

  • Last visited

  • Days Won

    3
  • Feedback

    0%

Posts posted by Szakalaka

  1. well lenas tutorials are great for beginners. You have to get used to clean compiled code and go with small steps... i remember how o started i had to go through every tut like 5 times because i did not understand anything. If you are gettin headache from clean compiled code then tell me what do you see here

     

     

     

    EHP8yRT.png

     

     

     

     

    Do you see whats goin on here? XD

     

    And to answer

     


    Its something like that in my mind inject -> getmodulehandle -> getprocaddress -> virtualprotect

     

     

    There are tons of ways to prevent dll injection. Do you know what exactly happens when you are loading the dll? Dont use getprocaddress. lameguard = insta ban, smartguard = insta ban.  And virtualprotect on sg = ban also.

     

    How do i know that?

  2. No problem that someone reversed my dll. If i wanted people not do so i would make obfuscation + pack, but i just left it alone so people actually may see what do i patch AND THEN thnk "why he does patch this and why it works ?". It is much better than spoonfeeding random people :)

     

    And if u ask how it loads: its either LoadLibrary or import from the l2.bin i dont remember. But if u cant load the target in debugger then its irrelevant because u wont see it anyways

     

    Btw wow you got acc from 2006 :D

  3. Of course the protectors dont like debuggers :) It is complex stuff but the good fact is that every file packed with the same protector uses the same antidebug checks so they are widely known and documented, just look it up somewhere. Unpacking isnt easy tho, but there is no need to do so, just observer gameguard.des during runtime.

  4. those small files are responsible for some protocol modifications (i dont know/didnt check what) so if u delete the dlls the client wil speak english and server chineese, thats why u are gettin error. I told you already to let all files run then simply suspend threads from several antibot dlls. Easy peasy

×
×
  • Create New...