Title says... (with asm). for 2008..
Title says... (with asm). for 2008..
Last edited by sahar042; 24-06-11 at 11:07 AM.
why would wana do that?
In hex, find /suicide and replace by something fucked up.
well hex editing dose the job ,but it dosent disable all it dose is change the /suicide to other stuff.
and yeah i agree its a stupid way
Open the runnable in OllyDBG, search for all referenced text strings, search for suicide or something like that, when you fond it, follow it in disassembler and NOP the address.
NOP will kill the whole shit bad idea
Simply NOP the function call to MMatchServer::OnRequestSuicide at MMatchServer::OnCommand.
OR
Remove the command "/suicide" from the runnable using NOP over the function that deals with adding the command callback for it.
Last edited by Linear88; 25-06-11 at 10:00 AM.
The /suicide command it self isn't located in OllyDbg neither Hex editing lol.
That's because "/suicide" is being fetched off the string table.
Code:0042EAAC |. 6A 01 PUSH 1 0042EAAE |. 6A FF PUSH -1 0042EAB0 |. 6A FF PUSH -1 0042EAB2 |. 6A 04 PUSH 4 0042EAB4 |. 68 10C04200 PUSH Gunz_(Un.0042C010 0042EAB9 |. 6A 0F PUSH 0F ; ChatCmds => '/suicide' (CMD ID: 15 / 0x0F, <STR id="CMD_NAME_15">suicide</STR>) 0042EABB |. 8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C] 0042EABE |. 52 PUSH EDX 0042EABF |. 56 PUSH ESI 0042EAC0 |. E8 0BF8FFFF CALL Gunz_(Un.0042E2D0 0042EAC5 |. 6A 01 PUSH 1 ; |Arg8 = 00000001 0042EAC7 |. 6A FF PUSH -1 ; |Arg7 = FFFFFFFF 0042EAC9 |. 6A FF PUSH -1 ; |Arg6 = FFFFFFFF 0042EACB |. 6A 04 PUSH 4 ; |Arg5 = 00000004 0042EACD |. 68 80D44200 PUSH Gunz_(Un.0042D480 ; |Arg4 = 0042D480 0042EAD2 |. 6A 10 PUSH 10 ; |Arg3 = 00000010 0042EAD4 |. 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C] ; | 0042EAD7 |. 50 PUSH EAX ; |Arg2 0042EAD8 |. 56 PUSH ESI ; |Arg1 0042EAD9 |. E8 F2F7FFFF CALL Gunz_(Un.0042E2D0 ; \Gunz_(Un.0042E2D0 0042EADE |. 83C4 40 ADD ESP,40
Wait so, If I basically hook up to that address, I could manage to change /suicide to something else?
You should make /suicide like ijji, like 10 seconds of not moving and then you die.