Is it tqanp.dll that causes the issue?

09/20/2013 00:02 denominator#1
What needs changing to open Conquer with a bot? I got the send and recv addresses but Conquer opens then closes immediately?

I've checked videos about it but it appears that the videos are just about allowing Conquer to be opened by olldbg which I can already do with various plugins.
09/20/2013 05:45 Spirited#2
Quote:
Originally Posted by denominator View Post
What needs changing to open Conquer with a bot? I got the send and recv addresses but Conquer opens then closes immediately?

I've checked videos about it but it appears that the videos are just about allowing Conquer to be opened by olldbg which I can already do with various plugins.
I had this same problem with my bot (when I used to log packets) in the client. I would also appreciate a solution to that problem. Also, moved to the right section.
09/20/2013 05:49 denominator#3
It was a question??? This is a programming section NOT the question section lol.

On topic unless it's something that TQ have added which nobody noticed?
09/20/2013 06:00 Spirited#4
Quote:
Originally Posted by denominator View Post
It was a question??? This is a programming section NOT the question section lol.

On topic unless it's something that TQ have added which nobody noticed?
[Only registered and activated users can see links. Click Here To Register...]

Quote:
Originally Posted by andyd123 View Post
Welcome to the CO2 Programming section. In this section it is okay to talk about:
  • Programming Help
Yeah, it is something TQ added (a check that I was unable to find). I know exactly what you're talking about. It closes right as it's about to show the world.
09/20/2013 06:02 denominator#5
"It closes right as it's about to show the world."

I don't even get that far >.<

Does anybody even use the programming section any more that has knowledge on this?

I'm not asking for help with programming either lol
09/20/2013 06:12 Lateralus#6
Yes, it's probably tqanp.dll. It's not very hard to completely bypass that module, but I did it a year or so ago. Since then, they may have added some other fun stuff. There's also protection in the executable, but I don't remember anything preventing hooking in it - most of what is in the executable is just monitoring.
09/20/2013 07:22 donn#7
Bypassing tqanp.dll will surely get you restricted. That one is reasonable for all the anti-bot exchanges between you and TQ servers, not sending a valid response or not sending one at all will get you restricted/sent to 1-day jail within 7 minutes after login.
09/21/2013 15:52 atef201080#8
you need to check AntiRobotClient.dll and tqanp.dll there are tutorials about them here [Only registered and activated users can see links. Click Here To Register...]
09/21/2013 17:38 lina111#9
Quote:
Originally Posted by atef201080 View Post
you need to check AntiRobotClient.dll and tqanp.dll there are tutorials about them here [Only registered and activated users can see links. Click Here To Register...]
thhis tutorials is dead Because TQ changed locations and names of many dll
09/22/2013 03:45 { Angelius }#10
I won't be sharing any information on how to bypass anything that would get you banned "memory wise" because i worked too hard to get that information. however they only advice i can give atm is to rebuild the exe itself with your hooks/asm patches inside. it will take a lot of work to pull that off but trust me its worth it and it will take a lot of effort to detect that :P


Quote:
Originally Posted by lina111 View Post
thhis tutorials is dead Because TQ changed locations and names of many dll
That's because you have no idea what you are doing or else you would have found the answer just by watching the 1st tutorial.
09/22/2013 11:38 Smaehtin#11
Quote:
Originally Posted by { Angelius } View Post
however they only advice i can give atm is to rebuild the exe itself with your hooks/asm patches inside. it will take a lot of work to pull that off but trust me its worth it and it will take a lot of effort to detect that :P
Uhm, they're already detecting changes to the Conquer.exe file. That's easy as hell to check too, make a checksum of the original .exe file and compare it against your modified .exe :confused::confused::confused:
09/23/2013 03:54 { Angelius }#12
Quote:
Originally Posted by Smaehtin View Post
Uhm, they're already detecting changes to the Conquer.exe file. That's easy as hell to check too, make a checksum of the original .exe file and compare it against your modified .exe :confused::confused::confused:
PHP Code:
00400278  /.  2E 64 61 ASCII ".data",0,0,0      Name[8] = ".data"
00400280  |.  C4AE0300 DD 0003AEC4              VirtualSize 241348.
00400284  
|.  00105C00 DD 005C1000              VirtualAddress 5C1000
00400288  
|.  00300100 DD 00013000              SizeOfRawData 77824.
0040028C  
|.  00F65B00 DD 005BF600              PointerToRawData 5BF600
00400290  
|.  00000000 DD 00000000              PointerToRelocations 0
00400294  
|.  00000000 DD 00000000              PointerToLineNumbers 0
00400298  
|.  0000     DW 0                     NumberOfRelocations 0
0040029A  
|.  0000     DW 0                     NumberOfLineNumbers 0
0040029C  
\.  400000C0 DD C0000040              Characteristics INITIALIZED_DATA|READ|WRITE

00400318  
/.  2E 64 61 ASCII ".data1",0,0       Name[8] = ".data1"
00400320  |.  00500000 DD 00005000              VirtualSize 20480.
00400324  
|.  00106500 DD 00651000              VirtualAddress 651000
00400328  
|.  00500000 DD 00005000              SizeOfRawData 20480.
0040032C  
|.  00566200 DD 00625600              PointerToRawData 625600
00400330  
|.  00000000 DD 00000000              PointerToRelocations 0
00400334  
|.  00000000 DD 00000000              PointerToLineNumbers 0
00400338  
|.  0000     DW 0                     NumberOfRelocations 0
0040033A  
|.  0000     DW 0                     NumberOfLineNumbers 0
0040033C  
\.  200000E0 DD E0000020              Characteristics CODE|EXECUTE|READ|WRITE 
They are scanning the .text section for any modifications. hence: Hardware breakpoint at 00401000 and login.

.data is the original section and my code goes into .data1 which is a new section that i have created.

As for "That's easy as hell to check" its also as easy to fool the process into scanning a section that I created which will be a copy of the original section that's being scanned which i have already done. Not because a copy is needed at the time but just in case.
09/23/2013 12:41 Ultimation#13
actually tqanp is just client protection, yes it possibly comunicates with the server, but ive used the client for a while now by writing a bypass dll to compensate. as soon as the dll has been bypassed attaching olly and injecting code now becomes possible again..

Regarding the 7 minute 1 day jail. hasnt happened to me yet 0.0
09/23/2013 13:31 Nishikado#14
what is the name of the bot u are using ?? or u just made by ur own
09/23/2013 17:38 Smaehtin#15
Quote:
Originally Posted by { Angelius } View Post
They are scanning the .text section for any modifications. hence: Hardware breakpoint at 00401000 and login.
They're detecting debuggers as well, so whatever it is you're saying using hardware breakpoints isn't really that simple, unless you know what you're doing.