Thread Closed 
 
Thread Rating:
  • 69 Vote(s) - 3 Average
  • 1
  • 2
  • 3
  • 4
  • 5
L2Sublimity
Author Message
Autobot Offline
Gremlin
**

Posts: 6
Joined: Aug 2011
Version: None
Post: #1
L2Sublimity
So everyone has been using L2 Tower on L2Sublimity since Exile's new launch but with today's update it's been blocked.

It is a Gracia Final server so everyone was using the option to 'run client when tower opens' but after today's update everyone's client closes when you try to run Tower.

We've tried to inject the process as well but as soon as it injects the client closes.

There server uses an updater that's required to update your files.

http://www.l2sublimity.com/

I should also mention that we've been using version 1.4.0.41 or previous because updating any further makes L2 Tower crash and become unable to inject.

Any help would be appreciated.
09-17-2011 05:25 AM
Find all posts by this user
soulslayerzangetsu Offline
Expired VIP Member
**

Posts: 11
Joined: Jul 2011
Reputation: 0
Version: 1.4.1.60
Post: #2
RE: L2Sublimity
i'm guessing they detect for hooks in l2.exe, if it is hooked, then it automatically kills l2.exe process? LameGuard protection? boy it seems like LG is all over L2T

what this guy should do? inline command?
(This post was last modified: 09-17-2011 12:10 PM by soulslayerzangetsu.)
09-17-2011 12:10 PM
Find all posts by this user
Geddys Offline
Administrator
*******

Posts: 265
Joined: Dec 2010
Reputation: 89
Version: 1.4.1.93
Post: #3
RE: L2Sublimity
After sunday i'll look into their protection.
09-17-2011 12:46 PM
Find all posts by this user
Vilc Offline
Expired VIP Member
**

Posts: 5
Joined: Sep 2011
Reputation: 0
Version: 1.4.1.95
Post: #4
RE: L2Sublimity
Geddys I m almost sure that the key to bypass the new protections is on the new Client.dll. Because I tested to use the new patch except the new Client.dll and it didnt kill tower, but the problem is that with the old client.dll I cant pass the selection server... I dont know how to decrypt that type of files, to see what is inside, but probably u know how.
Good Luck
09-17-2011 16:54 PM
Find all posts by this user
preeny Offline
Expired VIP Member
**

Posts: 11
Joined: Sep 2011
Reputation: 0
Version: 1.4.2.142
Post: #5
RE: L2Sublimity
I've had 1 member of Sublimity's GM team brag to me on msn how easy it was to block Tower Sad but i've also been told that their security has been bypassed already and some people are using tower after reworking the Dll's, would be great if the tower team could look into it.
09-17-2011 23:05 PM
Find all posts by this user
ClockMan Offline
All Mighty
*******

Posts: 2,883
Joined: Jan 2011
Reputation: 497
Version: 1.4.3.143
Post: #6
RE: L2Sublimity
We will look into this soon. It's easy to detect L2Tower, and also it's easy to bypass that antibots whats "detect" L2Tower in that easy way...

Vilc, exe/dll file can be encrypted, but to run properly it have to be decrypted in memory Tongue

[Image: owner.gif]
09-17-2011 23:15 PM
Visit this user's website Find all posts by this user
Autobot Offline
Gremlin
**

Posts: 6
Joined: Aug 2011
Version: None
Post: #7
RE: L2Sublimity
Good to hear from Admins and others. Waiting to see what you guys come up with.
09-18-2011 04:40 AM
Find all posts by this user
mist Offline
VIP Member
***

Posts: 21
Joined: Sep 2011
Reputation: 0
Version: 1.4.1.76
Post: #8
RE: L2Sublimity
It looks like only Client.dll changed. There is Themida protection however olly with proper plugins is able to run it. I was even in point where I was able to attach debugger to L2.exe but this leads to freeze of L2 window so I couldnt get much further. This is first time I debug L2 so I am kinda confused "what where". Now I am unable to attach because I get stucked on DbgUiRemoteBreak so I guess I should change entrypoints of those Dbg's methods to avoid this.

I also focused on client.dll and tried to track and a bit change all paths to TerminateProcess(), ExitProcess() etc. However it lead nowhere.

Clock, if you sort it could you explain me a bit afterwards please?
(This post was last modified: 09-18-2011 14:59 PM by mist.)
09-18-2011 14:52 PM
Find all posts by this user
Vilc Offline
Expired VIP Member
**

Posts: 5
Joined: Sep 2011
Reputation: 0
Version: 1.4.1.95
Post: #9
RE: L2Sublimity
http://www.l2sublimity.com/forum/index.p...opic=16801

I think, the L2Tower developers should be advise about this post.


Keep the good work.
09-18-2011 15:03 PM
Find all posts by this user
ClockMan Offline
All Mighty
*******

Posts: 2,883
Joined: Jan 2011
Reputation: 497
Version: 1.4.3.143
Post: #10
RE: L2Sublimity
(09-18-2011 15:03 PM)Vilc Wrote:  http://www.l2sublimity.com/forum/index.p...opic=16801

I think, the L2Tower developers should be advise about this post.


Keep the good work.

Saw and commented there:
http://forum.l2tower.eu/showthread.php?tid=952

[Image: owner.gif]
09-18-2011 15:05 PM
Visit this user's website Find all posts by this user
Thread Closed 




User(s) browsing this thread: 1 Guest(s)