Is it tqanp.dll that causes the issue?

[denominator]

What needs changing to open Conquer with a bot? I got the send and recv addresses but Conquer opens then closes immediately?

I've checked videos about it but it appears that the videos are just about allowing Conquer to be opened by olldbg which I can already do with various plugins.

[Spirited]

Originally Posted by denominator

What needs changing to open Conquer with a bot? I got the send and recv addresses but Conquer opens then closes immediately?

I've checked videos about it but it appears that the videos are just about allowing Conquer to be opened by olldbg which I can already do with various plugins.

I had this same problem with my bot (when I used to log packets) in the client. I would also appreciate a solution to that problem. Also, moved to the right section.

[denominator]

It was a question??? This is a programming section NOT the question section lol.

On topic unless it's something that TQ have added which nobody noticed?

[Spirited]

Originally Posted by denominator

It was a question??? This is a programming section NOT the question section lol.

On topic unless it's something that TQ have added which nobody noticed?

Originally Posted by andyd123

Welcome to the CO2 Programming section. In this section it is okay to talk about:

• Programming Help

Yeah, it is something TQ added (a check that I was unable to find). I know exactly what you're talking about. It closes right as it's about to show the world.

[denominator]

"It closes right as it's about to show the world."

I don't even get that far >.<

Does anybody even use the programming section any more that has knowledge on this?

I'm not asking for help with programming either lol

[Lateralus]

Yes, it's probably tqanp.dll. It's not very hard to completely bypass that module, but I did it a year or so ago. Since then, they may have added some other fun stuff. There's also protection in the executable, but I don't remember anything preventing hooking in it - most of what is in the executable is just monitoring.

[donn]

Bypassing tqanp.dll will surely get you restricted. That one is reasonable for all the anti-bot exchanges between you and TQ servers, not sending a valid response or not sending one at all will get you restricted/sent to 1-day jail within 7 minutes after login.

[atef201080]

you need to check AntiRobotClient.dll and tqanp.dll there are tutorials about them here

[lina111]

Originally Posted by atef201080

you need to check AntiRobotClient.dll and tqanp.dll there are tutorials about them here

thhis tutorials is dead Because TQ changed locations and names of many dll

[{ Angelius }]

I won't be sharing any information on how to bypass anything that would get you banned "memory wise" because i worked too hard to get that information. however they only advice i can give atm is to rebuild the exe itself with your hooks/asm patches inside. it will take a lot of work to pull that off but trust me its worth it and it will take a lot of effort to detect that :P

Originally Posted by lina111

thhis tutorials is dead Because TQ changed locations and names of many dll

That's because you have no idea what you are doing or else you would have found the answer just by watching the 1st tutorial.

[Smaehtin]

Originally Posted by { Angelius }

however they only advice i can give atm is to rebuild the exe itself with your hooks/asm patches inside. it will take a lot of work to pull that off but trust me its worth it and it will take a lot of effort to detect that :P

Uhm, they're already detecting changes to the Conquer.exe file. That's easy as hell to check too, make a checksum of the original .exe file and compare it against your modified .exe

[{ Angelius }]

Originally Posted by Smaehtin

Uhm, they're already detecting changes to the Conquer.exe file. That's easy as hell to check too, make a checksum of the original .exe file and compare it against your modified .exe

PHP Code:

00400278  /.  2E 64 61 ASCII ".data",0,0,0      ; Name[8] = ".data"
00400280  |.  C4AE0300 DD 0003AEC4              ; VirtualSize = 241348.
00400284  |.  00105C00 DD 005C1000              ; VirtualAddress = 5C1000
00400288  |.  00300100 DD 00013000              ; SizeOfRawData = 77824.
0040028C  |.  00F65B00 DD 005BF600              ; PointerToRawData = 5BF600
00400290  |.  00000000 DD 00000000              ; PointerToRelocations = 0
00400294  |.  00000000 DD 00000000              ; PointerToLineNumbers = 0
00400298  |.  0000     DW 0                     ; NumberOfRelocations = 0
0040029A  |.  0000     DW 0                     ; NumberOfLineNumbers = 0
0040029C  \.  400000C0 DD C0000040              ; Characteristics = INITIALIZED_DATA|READ|WRITE

00400318  /.  2E 64 61 ASCII ".data1",0,0       ; Name[8] = ".data1"
00400320  |.  00500000 DD 00005000              ; VirtualSize = 20480.
00400324  |.  00106500 DD 00651000              ; VirtualAddress = 651000
00400328  |.  00500000 DD 00005000              ; SizeOfRawData = 20480.
0040032C  |.  00566200 DD 00625600              ; PointerToRawData = 625600
00400330  |.  00000000 DD 00000000              ; PointerToRelocations = 0
00400334  |.  00000000 DD 00000000              ; PointerToLineNumbers = 0
00400338  |.  0000     DW 0                     ; NumberOfRelocations = 0
0040033A  |.  0000     DW 0                     ; NumberOfLineNumbers = 0
0040033C  \.  200000E0 DD E0000020              ; Characteristics = CODE|EXECUTE|READ|WRITE 


They are scanning the .text section for any modifications. hence: Hardware breakpoint at 00401000 and login.

.data is the original section and my code goes into .data1 which is a new section that i have created.

As for "That's easy as hell to check" its also as easy to fool the process into scanning a section that I created which will be a copy of the original section that's being scanned which i have already done. Not because a copy is needed at the time but just in case.

[Ultimation]

actually tqanp is just client protection, yes it possibly comunicates with the server, but ive used the client for a while now by writing a bypass dll to compensate. as soon as the dll has been bypassed attaching olly and injecting code now becomes possible again..

Regarding the 7 minute 1 day jail. hasnt happened to me yet 0.0

[Nishikado]

what is the name of the bot u are using ?? or u just made by ur own

[Smaehtin]

Originally Posted by { Angelius }

They are scanning the .text section for any modifications. hence: Hardware breakpoint at 00401000 and login.

They're detecting debuggers as well, so whatever it is you're saying using hardware breakpoints isn't really that simple, unless you know what you're doing.