Hacking attempt message Skip

Results 1 to 6 of 6
  1. #1
      Phoenix is offline
    ModeratorRank
    Mar 2009 Join Date
    6,890Posts

    idea Hacking attempt message Skip

    GUNZ2830 provided the following addresses for skipping that message on the 2008 runnable but what he posted is already there on those addresses. How can the message be skipped?

    Code:
    I'm hacker Skip
    00498FAD EB 33 JMP SHORT 00498FE2
    
    Hacking detecting Skip
    00436B24 EB 35 JMP SHORT 00436B5B
    0043DE24 EB 35 JMP SHORT 0043DE5B
    0043ED7F 75 00 JNZ SHORT 0043ED81
    0043ED88 EB 35 JMP SHORT 0043EDBF
    0043ED5F 75 00 JNZ SHORT 0043ED61


  2. #2
    Member Your_Mom is offline
    MemberRank
    Mar 2010 Join Date
    Where I want toLocation
    88Posts

    Re: Hacking attempt message Skip

    [code]RETN[ /code]

  3. #3
    Member GUNZ2830 is offline
    MemberRank
    Oct 2007 Join Date
    JapanLocation
    67Posts

    Re: Hacking attempt message Skip

    I think you are using already edited runnable.
    You do not need the editing.

  4. #4
      Phoenix is offline
    ModeratorRank
    Mar 2009 Join Date
    6,890Posts

    Re: Hacking attempt message Skip

    Quote Originally Posted by GUNZ2830 View Post
    I think you are using already edited runnable.
    You do not need the editing.
    No. It's giving my friend the same hacking attempt message after he uses the custom custom commands he made. It's not edited.

  5. #5
    Member GUNZ2830 is offline
    MemberRank
    Oct 2007 Join Date
    JapanLocation
    67Posts

    Re: Hacking attempt message Skip

    Which message is given?
    <MSG id="9601">A hacking attempt has been detected.</MSG>
    <STR id="130001">A hacking attempt was detected. Connection to the game server will be terminated.</STR>

    ID 9601 is client sided and edit here. :
    Code:
    00436B24 EB 35 JMP SHORT 00436B5B
    0043DE24 EB 35 JMP SHORT 0043DE5B
    0043ED7F 75 00 JNZ SHORT 0043ED81
    0043ED88 EB 35 JMP SHORT 0043EDBF
    0043ED5F 75 00 JNZ SHORT 0043ED61
    but ID 130001 is client and server sided. client is edit here. :
    Code:
     
    theduel.exe
    004414B4   . E9 86000000    JMP 0044153F
    004414B9     90             NOP
    I have not edited server. to bypass ID 130001. (I do not need it.) but here will appear. :
    Code:
     
    MatchServer.exe
    00434640  |. C786 B8000000 >MOV DWORD PTR DS:[ESI+B8],1FBD1
    0043464A  |. 68 24815500    PUSH 00558124                   ;  ASCII "x-trap hacking detected."
     
    0043489B  |. C786 B8000000 >MOV DWORD PTR DS:[ESI+B8],1FBD1
    004348A5  |. 68 50815500    PUSH 00558150                   ;  ASCII "dll injectoin"
     
    004349CB  |. C786 B8000000 >MOV DWORD PTR DS:[ESI+B8],1FBD1
    004349D5  |. 68 60815500    PUSH 00558160                   ;  ASCII "invalid stage setting."
    Last edited by GUNZ2830; 09-03-10 at 03:55 PM.

  6. #6
      Phoenix is offline
    ModeratorRank
    Mar 2009 Join Date
    6,890Posts

    Re: Hacking attempt message Skip

    Quote Originally Posted by GUNZ2830 View Post
    Which message is given?
    <MSG id="9601">A hacking attempt has been detected.</MSG>
    <STR id="130001">A hacking attempt was detected. Connection to the game server will be terminated.</STR>

    ID 9601 is client sided and edit here. :
    Code:
    00436B24 EB 35 JMP SHORT 00436B5B
    0043DE24 EB 35 JMP SHORT 0043DE5B
    0043ED7F 75 00 JNZ SHORT 0043ED81
    0043ED88 EB 35 JMP SHORT 0043EDBF
    0043ED5F 75 00 JNZ SHORT 0043ED61
    but ID 130001 is client and server sided. client is edit here. :
    Code:
     
    theduel.exe
    004414B4   . E9 86000000    JMP 0044153F
    004414B9     90             NOP
    I have not edited server. to bypass ID 130001. (I do not need it.) but here will appear. :
    Code:
     
    MatchServer.exe
    00434640  |. C786 B8000000 >MOV DWORD PTR DS:[ESI+B8],1FBD1
    0043464A  |. 68 24815500    PUSH 00558124                   ;  ASCII "x-trap hacking detected."
     
    0043489B  |. C786 B8000000 >MOV DWORD PTR DS:[ESI+B8],1FBD1
    004348A5  |. 68 50815500    PUSH 00558150                   ;  ASCII "dll injectoin"
     
    004349CB  |. C786 B8000000 >MOV DWORD PTR DS:[ESI+B8],1FBD1
    004349D5  |. 68 60815500    PUSH 00558160                   ;  ASCII "invalid stage setting."
    But I'm telling you, the edit you mentioned for Message ID 9601 is already present in the runnable. There's nothing to edit.

    As for ID 130001, could you tell me the exact edit to disable it?

    Thanks.



Advertisement