Lameguard Bypass (Ava, Cartel, Tales)

[fxb0t]

Well you cannot modify l2.bin without unpacking but its not needed to unpack it. You are writing a bot, not some crack so packer means literally ntohing because u focus on runtime.

 

By the way, what do you want to achieve in the end?

 

Im interested  because I want to learn RE, RPM/WPM, and maybe later packet analysis.. I tried with Lena's tutorials but they seem so outdated and i lost my motivation after awhile. I know a bit C#, I already managed to create a console application which reads bytes that i need from memory, but this is so easy/basic compared to RE and Hooking :P

 

So basically,

you inject your dll in l2.bin -> 

using faction GetModuleHandle to retrive gameguard.des ->

Then im loosing it a bit because IDA - DeAssembly uses a fuction qmemcpy which I have no idea what it is..

 

Its something like that in my mind inject -> getmodulehandle -> getprocaddress -> virtualprotect

 

Sorry if I said something stupid (probably I did) but everything is so messy in my head.. :P

[Szakalaka]

well lenas tutorials are great for beginners. You have to get used to clean compiled code and go with small steps... i remember how o started i had to go through every tut like 5 times because i did not understand anything. If you are gettin headache from clean compiled code then tell me what do you see here

 

 

 

 

 

 

 

Do you see whats goin on here? XD

 

And to answer

 

Its something like that in my mind inject -> getmodulehandle -> getprocaddress -> virtualprotect

 

 

There are tons of ways to prevent dll injection. Do you know what exactly happens when you are loading the dll? Dont use getprocaddress. lameguard = insta ban, smartguard = insta ban.  And virtualprotect on sg = ban also.

 

How do i know that?

Edited October 25, 2015 by Szakalaka

[fxb0t]

It looks like virtualized to me lol. Anyway, thanks alot for your time. I thought anti-cheats wouldn't be so complex but im totally wrong. I'll start again with Lena's Tutorials :)

 

Do you think C# is viable for patching ? 

Edited October 26, 2015 by fxb0t

[Szakalaka]

I did not code c# but i prefer asm and c++ because they compile to machine code and every game is written in c++... :)

[mariuda]

a lot of knowledge but im on mechanical engineer...

 

Szaka, with cliext 1.0.0.9 there is any solution? for 1.0.0.6 i just use injector with tower dll, but now i cant inject without kick in few minutes.(or in char select)

with the old suspent methots i cant do it.  (now i have anti cheat .exe)

 

with adr 1.71 the client just shut down or get disconnect on char select.

 

http://i.imgur.com/Hvusvoa.png

 

 

 

 

 

Edited October 27, 2015 by mariuda

[mafik1]

@Szakalaka

Maybe You have something to "scam" lameguard and run more clients? For example 9 at l2tales?

 

I know there is sandboxie, virtual machines, but need 2 adrenaline keys for that:/

[Szakalaka]

Find out what hwid data he gets -> profit?

[AchYlek]

@Szakalaka

Maybe You have something to "scam" lameguard and run more clients? For example 9 at l2tales?

 

I know there is sandboxie, virtual machines, but need 2 adrenaline keys for that:/

at mxc is shared mac id changer for tales 

[mafik1]

AchYlek You mean Stergios hwid changer? It need 2 Cards or Card + WiFi. And it change PC name, so my windows 10 is getting lost, and asking me for active everytime i change it this way.

I can pay for something like .dll that will do it when i run L2, or any other tool that wont affect Windows activation etc.

[marcolineage]

does this bypass work on L2 averia 10x?

[AchYlek]

does this bypass work on L2 averia 10x?

suspend game at char select, kick dsetups and inject tower, but sometimes u will get error when your window is unactive, for that pm szakalaka 

[mafik1]

Achylek? Maybe You have something to run 6+ clients tales/cartel and want to sell? For now im using sandboxie, but with sandboxie i cant use autorelog for example.

[juliopecador]

the link for download lamegrad is broken???

[Szakalaka]

the link for download lamegrad is broken???

Seems okay, i just clicked on it

[juliopecador]

have 0 mb in download... go try... dont download nothing