Report Abuse

[PenguinGuys]

Haven't looked into it much, but here's the starting address:

0x00456C40

Looking into it, here's some parts I found interesting.

00456CAD  |. 68 30D65E00    PUSH theduel.005ED630                    ;  ASCII "%02d%02d_%02d%02d_%s_%s"
00456CB2  |. 52             PUSH EDX
00456CB3  |. FFD7           CALL EDI
00456CB5  |. E8 C63B0400    CALL theduel.0049A880
00456CBA  |. 8D8C24 C000000>LEA ECX,DWORD PTR SS:[ESP+C0]
00456CC1  |. 51             PUSH ECX
00456CC2  |. 68 28D65E00    PUSH theduel.005ED628                    ;  ASCII "gunz119"
00456CC7  |. 05 282B0000    ADD EAX,2B28
00456CCC  |. 50             PUSH EAX
00456CCD  |. 8D9424 CC01000>LEA EDX,DWORD PTR SS:[ESP+1CC]
00456CD4  |. 68 1CD65E00    PUSH theduel.005ED61C                    ;  ASCII "%s/%s/%s"
00456CD9  |. 52             PUSH EDX
00456CDA  |. FFD7           CALL EDI
00456CDC  |. 83C4 48        ADD ESP,48
00456CDF  |. E8 9C3B0400    CALL theduel.0049A880
00456CE4  |. 8D8C24 8C01000>LEA ECX,DWORD PTR SS:[ESP+18C]
00456CEB  |. 51             PUSH ECX
00456CEC  |. 68 48D65E00    PUSH theduel.005ED648                    ;  ASCII "119.txt"
00456CF1  |. 8D5424 14      LEA EDX,DWORD PTR SS:[ESP+14]
00456CF5  |. 52             PUSH EDX
00456CF6  |. 05 282A0000    ADD EAX,2A28
00456CFB  |. 50             PUSH EAX
00456CFC  |. 68 14D65E00    PUSH theduel.005ED614                    ;  ASCII "gunz"
00456D01  |. 8D8424 A002000>LEA EAX,DWORD PTR SS:[ESP+2A0]
00456D08  |. 68 B0D55E00    PUSH theduel.005ED5B0                    ;  ASCII "app=%s;addr=%s;port=21;id=ftp;passwd=ftp@;user=%s;localfile=%s;remotefile=%s;srcdelete=1;agree=1"
00456D0D  |. 50             PUSH EAX
00456D0E  |. FFD7           CALL EDI
00456D10  |. 8B15 5CB66800  MOV EDX,DWORD PTR DS:[68B65C]
00456D16  |. 83C4 1C        ADD ESP,1C
00456D19  |. 6A 00          PUSH 0                                   ; /IsShown = 0
00456D1B  |. 6A 00          PUSH 0                                   ; |DefDir = NULL
00456D1D  |. 8D8C24 9402000>LEA ECX,DWORD PTR SS:[ESP+294]           ; |
00456D24  |. 51             PUSH ECX                                 ; |Parameters
00456D25  |. 68 9CD55E00    PUSH theduel.005ED59C                    ; |FileName = "BAReport.exe"
00456D2A  |. 6A 00          PUSH 0                                   ; |Operation = NULL
00456D2C  |. 52             PUSH EDX                                 ; |hWnd => NULL
00456D2D  |. FF15 74635E00  CALL DWORD PTR DS:[<&SHELL32.ShellExecut>; \ShellExecuteA

Edit

	<BAREPORT>
		<ADDR>www.battlearena.com</ADDR>
		<DIR>incoming/gunz_global</DIR>
	</BAREPORT>
**In system.xml**

Looked into BarReport.exe (Ijji's I don't have it on 2007 files)

0040222E   . 68 081D4200    PUSH BAReport.00421D08                   ;  ASCII "USAGE_EX) BAReport app=acesaga;addr=moon.maiet.net;port=21;id=ftp;passwd=ftp@;gid=10;user=moanus;localfile=rslog.txt;remotefile=remote_rslog.txt;agree=0;srcdelete=0;"



00403113   . 68 9C1F4200    PUSH BAReport.00421F9C                   ; |Format = "incoming/info/_report_%s_%.2d%.2d_%.2d%.2d.txt"


004031F3   . 68 701F4200    PUSH BAReport.00421F70                   ;  ASCII "www.battlearena.com"

Very simple edits and it may work.

[MentaL]

[Creativity]

may work? xD
anyone tested yet? :P

[KillerStefan]

0040222E . 68 081D4200 PUSH BAReport.00421D08 ; ASCII "USAGE_EX) BAReport app=acesaga;addr=moon.maiet.net;port=21;id=ftp;passwd=ftp@;gid=10;user=moanus;localfile=rslog.txt;remotefile=remote_rslog.txt;agree=0;srcdelete=0;"

Lol I got Moanus from MAIET on MSN XD

[Nova]

PUSH theduel.005ED5B0                    ;  ASCII "app=%s;addr=%s;port=21;id=ftp;passwd=ftp@;user=%s;localfile=%s;remotefile=%s;srcdelete=1;agree=1"

Stores it on to an FTP. You have the user/pass there.

PUSH theduel.005ED61C ; ASCII "%s/%s/%s"

I'm guessing that's the username variable and the message variable.

PUSH theduel.005ED648 ; ASCII "119.txt"

Stores it to a file called 119.txt

That's a breif look at it.

[PenguinGuys]

may work? xD
anyone tested yet? :P

I said may because I'm not 100% sure. Their may be other places.
If anyone can upload their BAReport.exe, I'd be glad to look into it.