Jump to content

Recommended Posts

Posted

l2walker does indeed work on supremel2, i played around with the protection for about 30 mins and bypassed it with ingame walker, OOG is a different story.

 

instead of leaching and begging all the time, why not try to do something yourself, anyone who wants to try it themselves but needs help, send me a pm.

Posted

I have just finished installing C5 and the supreme updates. I'll inform here the advances I made with IG an OOG.

 

NOTE: This is the first time I try to make a bot for a C5 server.

Posted

Well I will post some news now, but there are not good news... sry :S

 

The protection in L2 supreme is mainly based on a variable Token. The server changes his LS token frecuently. And has a "server" to update the clients Token.

 

The client (Sl2.exe) to get the new token conects to 64.72.114.34:14977, sends the packet "23 51 2D 24 34 4A 56 3B 24 5B 39 7D 5E 34 2C 39 40 2B 30 38 2A". And waits for the token. But as everyone would think, the token that the sl2.exe gets is encrypted :S

Then, Sl2.exe opens L2.exe and patches L2.exe memory with the new token.

 

If there is any other protection I don't know cos I am not able to pass the Ls token protection to go further.

Posted

It's not SL2.exe that connects to 14977 it's the code embedded in L2.exe, and the token isn't patched, it's extra encryption over blowfish I believe

 

SL2 is unrelated.

Posted

I think is sl2.exe, the data send & recive is done before l2.exe starts. If I stop the data transfer l2.exe does not start.

 

And, no, is a token. I'm sure, because every time you boot the client the packet send is the same. But if you wait some hours, and boot the client, the data is diferent.

And there is no change in the first 2 bytes, so probably is a token changer.

 

I'll try to do some more tests.

Posted

it's not sl2.exe.

 

l2.exe starts before the splash screen is shown fyi.

 

I just verified again and you were right, it's simply a different blowfish key that's somehow decrypted from the 14977 packet...

 

but knowing this doesn't make things work more :<

Posted

l2walker does indeed work on supremel2, i played around with the protection for about 30 mins and bypassed it with ingame walker, OOG is a different story.

 

instead of leaching and begging all the time, why not try to do something yourself, anyone who wants to try it themselves but needs help, send me a pm.

You're such a liar.  I bet you used a normal L2Walker IG without any modifications, too, right?  You're funny.

Posted

I'll post an IG screenshot in a minute - kekekekekekeke

 

and btw mc7 your client crashes extremely often ;<

hotkey crashes happen like every 10 minutes

 

edit: there you go

l2signj0.jpg

 

 

Posted

I'll post an IG screenshot in a minute - kekekekekekeke

 

and btw mc7 your client crashes extremely often ;<

hotkey crashes happen like every 10 minutes

 

edit: there you go

l2signj0.jpg

 

 

^^ I imagine how you did it :P

I'll try to, I'm sure it will work. But the main question is, and the OOG? xD

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



  • Posts

    • Hi, I'm selling Interface sources. I was working with one of bigger Essence projects (for ±1 year) delivering them Interface source KR. Per this period gathered knowledge about UE, UE Scripting, saw a lot of tools and their progression. So finally I decided that I can open up my own sales topic. I'm selling source for any protocol - If I don't have source, I will need you to provide whole system folder or for Essence/main - provide me protocol number. Sources are acquired by my OWN decompiler - written in Java, so we're not using popular UEExplorer upgraded by anyone. Decompiler extracts already compile ready sources. It outputs clean code, however constants are mapped 60-70%. Why only 60-70%? Well tl;dr when you compile any sources, they take at that time constant value and place it instead of = CONST_NAME to = THAT_CONST_NAME_VALUE, so it's not possible to have const name instead of value. Example of output: https://pastebin.com/cjyXcJvT for bigger .uc class (557p). p.s pastebin messed up encoding, but KR symbols are preserved - you won't see "?" symbols, rather you will see proper original korean text. I will give you guide as well, how not to mess it up with your editor VS Code/Notepad++ or what you use it to make them preserve it. You will get source + my compiler wrapper (written in java) - works on Windows/Mac/Linux - it has small GUI but supports CLI. Small notice, who thinks 'this is decompiled source' - basically all sources that are on sale are made by decompiling .u and applying changes. I think powerhouse few years ago was ArtToKill/kick (kick added support for INT64 to the publicly available compiler sources) etc. So no - there are no straight from 'creator' sources anywhere, all sellers offer the same - just the quality is different. UEExplorer upgraded was a big step, however, it introduces still a lot of nesting, if statements wrapping incorrectly which could lead to bugs. There are many things how to identify poor quality sources, as if the seller tries to sell 'out-of-box' when they see it compiles - sad news, some bugs are in the logic due to seller focusing only on 'it compiles' rather than issues that their decompiler is not capable so solve. On request I can restore ±100% const mapping.   Later I can attach compiled .u to try. Price is 400EUR. Payment methods USDT (Crypto). I'm still in debate with myself, wether to start selling XDat Editor with structures and ClientDat with 100% all files openings (no unk namings) and improved experience (such as comments support in .dat files, mass sync, improved performance and so on). P.s. If you ask me to give you some project's custom interface - the price may vary - there are couple things per project that need to be hand checked and adjusted (for example Innadril completely changes tokens which then I need to adjust my program to their token Ids). So it might take more time = more money. P.s.s. I have more things in the garage, like my own dsetup source that can allow you 'unlocking' system with your desired encrypting - you don't need to wait till 'patched' systems start appearing and so on, but I think at this time everyone who needs it make them selves it. AAC crypt removals and so on, BuildZone, everything that 'unlocks' client, however, I don't plan to make them on sale as mentioned, everyone can do them.  
    • It has been a while since I updated this thread. I am currently actively working on a full-scale port of the shader library to ensure the fast and accurate transfer of all effects. I have decompiled the original game and created a tool that fully logs the entire *Lineage 2 Interlude* particle system. This allows me to extract the original formulas hardcoded into the game, resulting in a high-fidelity port. For instance, *Lineage 2* uses an `appRnd` system that generates unique randomization patterns for different skills, giving them distinct visual characteristics; there are countless formulas and technical nuances like this. Ultimately, I will derive all the key formulas and replicate the geometry with high precision. Twelve basic geometry formulas have already been ported. The effect was created in 10 minutes using a .uc file, HLSL formulas, and SpriteEmitter particle blending formulas.   https://prnt.sc/_3UDLQVX_Y-_
  • Topics

×
×
  • Create New...

Important Information

This community uses essential cookies to function properly. Non-essential cookies and third-party services are used only with your consent. Read our Privacy Policy and We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue..