Jump to content

[ Dead Download Link ] [HowTo] Client protection from Metin2Nirvana [ We Need You ]


Rumor

Recommended Posts

I've been using this method since August 1st, 2013 and it's been working great. Most cheats are automatically blocked, just make sure you check sites that post metin2 cheats frequently to make sure there aren't any new ones that actually work. Those ones will need to be manually added. I'll begin by listing the features of using this method:

 

- DLL files can normally be renamed to .mix, .dll, or .flt and inserted into the client before launching and they would inject the dll into the client. With this protection those files are deleted on client launch, there's no way around this.

 

- MSS32.dll is an important file for protecting against cheats, and it's being checked by the client to ensure it's not tampered with.

 

- There are exploits out there (and possibly more to be found or more which aren't yet released publicly) which this protection method can help detour. It hides the revision of the binary from the Details tab in Windows Properties for this reason. If they don't know which version you're using it's a good start already to protect against exploiting the binary.

 

- This will prevent cheats from loading whether the player sets them up to automatically inject them on startup or while the game is already on.

 

- This DOES block m2Pythonloader and Kernel Detective.

 

- This DOES block the new ProDamage hack by lalaker1 with randomized window classes as well as switchbotv3.

 

- I don't know of any cheats that actually work with this setup active...

 

- Works even on lower end computers without a problem.

 

- It restricts debugging the client.

 

 

Caveats:

 

- About 25% of Windows 8 users can't run the client. I'm not entirely sure what the problem is but it appears to be an issue from Windows 8 (thanks again Microshit). The user is warned upon  running the client of a "FATAL ERROR" in which the Index file located in the pack folder is missing. It isn't missing. So far, the only workaround known for this issue is to run the game using Razer Game Booster. I feel that it's worth it because it stops cheaters from playing. It's up to you if you want to lose some of your Windows 8 users. UPDATE 2/11/2014: If you purchase the latest version of the software it WILL work with Windows 8!

- Virtual Box: Bug fixed loading virtual dll files under Windows 8 x64
- Virtual Box: Bug fixed running some virtual exe files on Windows 8
 

- It may be detected by antivirus software as a virus because it's encrypted, it has no way of knowing what the file is really doing or really contains. Currently it's only detected by 2/50 scanners on Virustotal.com and it's not a definitive sign of a virus, only a warning that the virus scanner can't read the file. 

This is the hidden content, please

 

- You can't run the command prompt while the game is open, nor can you have one open when attempting to launch the game.

 

 

 

Setup Instructions:

 

Open the file "prototype.py" in the root archive and find this:

def RunApp():
	musicInfo.LoadLastPlayFieldMusic()
	
	app.SetHairColorEnable(constInfo.HAIR_COLOR_ENABLE)
	app.SetArmorSpecularEnable(constInfo.ARMOR_SPECULAR_ENABLE)
	app.SetWeaponSpecularEnable(constInfo.WEAPON_SPECULAR_ENABLE)

	app.SetMouseHandler(mouseModule.mouseController)
	wndMgr.SetMouseHandler(mouseModule.mouseController)
	wndMgr.SetScreenSize(systemSetting.GetWidth(), systemSetting.GetHeight())
On a new line enter this:

injectionprotection = os.listdir('.')
	injectionprotection.sort()
	for Data in injectionprotection:
		if Data.find('.mix') != -1 or Data.find('.m3d') != -1 or Data.find('.flt') != -1 or Data.find('.asi') != -1: 
			os.remove(Data)
Add the following to the imports:

import os
Save and close the file.

 

Now we'll block the introLogin.py bug allowing users to run client extractors or python cheats on client launch. Open "intrologin.py" from the same archive and find this:

self.__LoadLoginInfo("loginInfo.py")
Replace the entire line with this, edit the message to your liking:

if not os.path.exists('logininfo.py') and not os.path.isfile('logininfo.py'):
			self.__LoadLoginInfo("loginInfo.py")
		else:
			dbg.LogBox('Ah so you want to try to extract the client?n'
								'Or maybe you want to run your favorite cheat?n'
								'Not gonna happen...n'
								'It seems I have already thought of this.n'
								'I am ATLEAST one step ahead of you...n'
								'------------------------------------------------n'
								'n'
								"TRY HARDER BRO")
			exception.Abort("Unsupported file, please delete it. (TRY HARDER BRO)") # Syserr.txt
			return
Add the following to the imports:

import os
Save and close the file.

Now you need Enigma protector. You can purchase it here: http://www.enigmaprotector.com/en/order.html or download an older cracked version here:  https://mega.co.nz/#!fBY1zRia!ib0eiy6Tq9FLFOphKJrceX2fMIlL_KiDjOlRCfuIhW4

 

You will also need a plugin created by my friend Anfidya: https://mega.co.nz/#!vVgxwI4Q!1GQ5GgfbvBHlkYc5O23IJ_Woy0OBJyIlh_bqNh0dDhM

Place the .dll file in the "Plugins" directory of your installation of The Enigma Protector.

 

Here's the Enigma settings file already ready-to-go minus some minor changes you need to make: https://mega.co.nz/#!LVJ1wIYa!cO9C2Vim_Gk8Lklh86mxK5FKTqOug8FltQOkPYYT-NE

Now you will need to maintain two versions of your client, one for the public and one private one. Copy your client to another hard drive or directory on your computer. You should have two identical copies of the same game but you're going to do all your work on the private client from now on. You will keep your eix and epk archives in the pack folder of the private client and do your work there. You need to keep a client binary in your private client which isn't encrypted by Enigma so that you can create a new one whenever necessary. When you release a patch you will need to re-pack the binary even if you didn't change anything there or in Enigma. All it takes is a change of any of the archive files for the binary to need a re-encryption by Enigma. This is because the eIndex files are going to be hidden inside the binary. The miles folder can be used to inject cheats too, so we're going to hide that and all it's contents in the binary as well. The binary is protected from debuggers and people can't just unpack it with WinRAR or something to get files out of it.

 

Despite Enigma offering messages displayed before client closing, I don't use them because they allow the client to stay open until the user clicks the OK button. This means they can just sit there with the cheat running and move the popup window. I've included my settings file for Enigma. You need to customize the Settings in the INPUT tab:

 

kdrZ7gG.png

 

- Modify the "file to protect" and "output protected file name" using the Browse buttons.

- Modify the "Name"

- Modify the "Version" (hint: don't put it the same as your binary version)

 

You also have to edit the file name if you aren't going to call your client metin2.bin (note that on some newer binaries it has to begin with "metin2" or it doesn't work. I'm sure there's a way to edit this but it isn't so important.

 

EeGxwx0.png

 

It's alright to show a message before termination, to assist the player with the reason why it won't work. This is only going to check during launch of the application and the file name can't be changed while the application is already running.

 

You should go to "External Files" and delete my MSS32.dll file by clicking the red "X" and add your own MSS32.dll file to make sure it's the correct one. If you skip this step and your MSS32.dll doesn't match mine EXACTLY then the client will fail to run.

 

I0VNlJMl.png

 

Now you need to add some custom rules for cheat detection:

 

bBLLrOJl.png

 

You can see here I've already setup the miles folder for you. You need to click "pack" so that it's highlighted like in the image then click "Add" then "Add File(s)" and select all your .eix files as well as your Index file from the pack folder. An easy way to do this is set your Windows Explorer to detailed view and organize by File Type then use SHIFT + click to select a beginning and ending file.

 

z6UeEnJ.png

 

This next part is mostly preference, and to avoid letting anyone know which version you use for a binary. It adds customization to your client, it's a fancy thing that isn't too necessary but if you want to change this stuff go for it!

 

RWtOA9I.png

 

An example of what that does:

 

A6OQeWO.png

 

Now you just press "Protect".

 

You need to copy your new protected bin to your Public Client and go delete the entire "miles" folder as well as the contents of the folder from your Public Client folder. Also go into the "pack" folder of your Public Client and delete "Index" and ALL of your ".eix" files (sort with detailed view again).

 

In the end you should have a Public Client like this or very similar:

 

TVzyls2.png

 

FoXW6K4.png

 

 

Your Private Client should look something like this:

 

2tNGWDW.png

 

mBW5RYDl.png

  • Metin2 Dev 9
  • Cry 1
  • Think 2
  • Confused 1
  • Good 7
  • Love 1
  • Love 41
Link to comment
Share on other sites

Thx for this tutorial :)

The problem with windows 8 can be solved by using the newest version of enigma

 

Are you sure? I don't want to pay for a product when the company refuses to answer multiple emails I've sent them so I haven't purchased it... otherwise I would have :/. And that is the latest cracked version I could find.

 

A very complete tutorial, by the way you didn't delete the eix files in the last pic

Because in the final screenshot this is an example of your private client, which will be accessed by the admin only, to make edits to the archives.

Link to comment
Share on other sites

  • Former Staff

 

Are you sure? I don't want to pay for a product when the company refuses to answer multiple emails I've sent them so I haven't purchased it... otherwise I would have :/. And that is the latest cracked version I could find.

 

Because in the final screenshot this is an example of your private client, which will be accessed by the admin only, to make edits to the archives.

Only heard about it. Im not sure if its true

Link to comment
Share on other sites

  • Developer

Are you sure? I don't want to pay for a product when the company refuses to answer multiple emails I've sent them so I haven't purchased it... otherwise I would have :/. And that is the latest cracked version I could find.

Only heard about it. Im not sure if its true

Yes it's true, that problem with windows 8 is from Enigma. And for those who use Molebox, the issue stills in there.

Nice job anyways, keep going.

when you return 0 and server doesn't boot:

unknown.png

Link to comment
Share on other sites

 

Yes it's true, that problem with windows 8 is from Enigma. And for those who use Molebox, the issue stills in there.

Nice job anyways, keep going.

Yeah I'm aware that it's caused by Enigma. I've actually never heard of molebox :o.

Anyway I was a little confused by what you're saying.. the newest version of Enigma WILL or WON'T have issues with 8?

Link to comment
Share on other sites

  • Developer

It shouldn't have issues with win8, but I'm not 100% sure, you should talk with Enigma's owner and you'll get more information.

But I think it won't have any problem, because, a friend of mine, has bought Enigma and it seems working with win8. There's only issues with windows 8.1 btw.

when you return 0 and server doesn't boot:

unknown.png

Link to comment
Share on other sites

Thanks for the release this protection is like mine, i buy enigma and i'm using enigma 3.150 and work perfectly for windows 8 i only buy it bcuz the cracked version 3.70 didnt work for it. I guys have any question about use original enigma u guys can ask me.

Sure, I have some questions :D

1. Do you get updates when a patch is released, for free?

2. Do they start actually answering you once you have purchased the software?

3. Are there more plugins and features available in the latest version (compared to 3.70 build 20120504)?

What?? You're using 3.150 but you purchased the software? I have 3.70. Does the version number after the decimal exceed 100?

Link to comment
Share on other sites

  • Former Staff

Sure, I have some questions :D

1. Do you get updates when a patch is released, for free?

2. Do they start actually answering you once you have purchased the software?

3. Are there more plugins and features available in the latest version (compared to 3.70 build 20120504)?

What?? You're using 3.150 but you purchased the software? I have 3.70. Does the version number after the decimal exceed 100?

150 > 70 :D so i think he has a newer version

Link to comment
Share on other sites

Sure, I have some questions :D

1. Do you get updates when a patch is released, for free?

2. Do they start actually answering you once you have purchased the software?

3. Are there more plugins and features available in the latest version (compared to 3.70 build 20120504)?

What?? You're using 3.150 but you purchased the software? I have 3.70. Does the version number after the decimal exceed 100?

 

 

1: When i buy it the last version was the 3.150 then i didnt update.

 

2: Yes. They always answer me and give all support i needed.

 

3: On forum the owner of enigma always say "new plugin for XX send a mail to get it" and have some plugins like anti WPE, anti dll injection, something like 6 plugins for client protection against hack. I didnt try those plugins atm.

 

3.150 > 3.70

Link to comment
Share on other sites

150 > 70 :D so i think he has a newer version

 

 

1: When i buy it the last version was the 3.150 then i didnt update.

 

2: Yes. They always answer me and give all support i needed.

 

3: On forum the owner of enigma always say "new plugin for XX send a mail to get it" and have some plugins like anti WPE, anti dll injection, something like 6 plugins for client protection against hack. I didnt try those plugins atm.

 

3.150 > 3.70

The confusion comes from the fact they aren't increasing the version number to 4 after hitting 3.99 :P

should I be gettin the 32-bit executables version or the 64-bit one? 32 right?

thanks

Link to comment
Share on other sites

 

 

The confusion comes from the fact they aren't increasing the version number to 4 after hitting 3.99 :P

should I be gettin the 32-bit executables version or the 64-bit one? 32 right?

thanks

 

When i buy i had to chose between 32 and 64 and bcuz i had some problems with 64 v3.70 i take the 32bits.

Link to comment
Share on other sites

When i buy i had to chose between 32 and 64 and bcuz i had some problems with 64 v3.70 i take the 32bits.

 

Well the version difference refers to which BIT applications you want to encrypt, not the OS bits you want to run Enigma Protector on. I think that's why it wasn't working for Metin2. I bet you could use the 64-bit version on an executable that was coded for 64-bit use.

 

Hello, I get an error, it says "UNEXPECTED EXCEPTION: OUT OF MEMORY"

It sounds like your computer doesn't have enough RAM to complete the operation but after reading a bit online someone else with Enigma also had this issue. How many MB are you trying to pack into the Metin2 bin? Maybe you accidentally tried to pack the epk files in the Virtual Box settings?

Link to comment
Share on other sites

  • Former Staff

 

I've confirmed this will work (according to Enigma) on Windows 8 by using the latest version. I plan to purchase it soon.

- Virtual Box: Bug fixed loading virtual dll files under Windows 8 x64
- Virtual Box: Bug fixed running some virtual exe files on Windows 8

Windows 8 never made problems. 8.1 was the problem maker

Link to comment
Share on other sites

no it's enigma's fault.. it works fine but not on Windows 8 or 8.1. It has nothing to do with AV, it's a Windows 8 specific problem :/. The ifle isn't missing either.. it's a wrong error caused by Enigma. The EXACT same client on any other OS works flawlessly. Adding that file into the physical directory of the client on a Win 8 system doesn't fix the issue. It's 100% a Win8 issue based on this information.

Link to comment
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now

Announcements



×
×
  • Create New...

Important Information

Terms of Use / Privacy Policy / Guidelines / We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.