[Help] please help me to remove this Xtrap

[hoanghaidung]

Hello everyone, I'm new here!
I wanna remove Xtrap from my game.exe to play PT offline, but I can't. Some friend tell me this forum is the best place to learn about PToffline, so I'm here.
I'd searched and followed Skuld's guide ( http://forum.ragezone.com/f286/xtrap...0/#post5306545 )

but seem my game.exe is difference his one, so I don't know what to do now!
Please help me, thanks for reading


this is my game.exe

http://rapidshare.com/files/294485618/game.exe.html

or
http://www.megaupload.com/?d=HTPLSCR0

[MentaL]

[bobsobol]

Search intermodular calls. Sort by Description, locate the one of the three "kernel32:terminateprocess" calls which is a subroutine of it's own executing:-

invoke GetCurrentProcess, 0
invoke TerminateProcess, AX
RETN

As it would be in a macro assembler... "invoke" of course ensures you push the correct number and type of parameters before a call. (see Iczelion's Win32 ASM tutorial 2 for more details)

Place an IBP (Instruction Breakpoint) on that fist PUSH, and (with the XTrap folder and libraries deleted, or moved) run the program.

It will hit the IBP pretty quick, and the first value on the stack will be the return address which called that routine. Right click it and follow in disassembly.

The instruction above your highlighted line is the call to that Exit routine, highlight that call, and replace it with a JMP instruction to the next instruction filling the extra space with NOPs. (little check box on the assemble dialogue)

Select all the altered lines, copy them to the executable image and save them.

Jobs done.

P.S. There are other methods, the one you quote should work, but is not clean or elegant... If that's how you want to do it, for your self, that's fine.

I usually go through cleaning out the code that even looks for XTrap, but that's a lot of work, and very difficult to explain. Aside from freeing a little CPU time and a lot of wasted system calls, the only thing it gains you is some holes to put new routines of your own.

This method is a single line change and only disables the quit if XTrap not found routine.

[hoanghaidung]

can you please teach me by a TUT step by step :(
I'd started to learn ASM and OllDbg a few day, so I'm very slow to catch what you said :(

[bobsobol]

I could, and it's becoming a common question with a common set of answers, so it's worth doing I think. But believe it or not, planning out these lovely tutorials takes quite some time.

I patched a number of PT clients a little while ago, to get to grips with what could and couldn't be done with that, which clients would work with which servers and I'm still trying to figure out all the "why's and where-for's" of those that don't work together. I released the patches to them in a thread here, but you would need the exact same client I downloaded from the official sites to use my patch programs.

As a newcomer, looking to set up a home server, would you not be better off using a client released here that is already XTrap patched? Many also have several fixes and patches to work with the servers we release, who's development has branched from the official servers a long long time ago, despite the similarities in features.

[hoanghaidung]

yes,it's easy with a client that is already XTrap patched, but my PT has a few update that another doesn't. If you can help me please teach me, I wanna join to the community, start to learn and going to share. I'm not the one who only know how to eat and use another's work :)
and, thanks for everything :)

[bobsobol]

No no... I appreciate that, and I'm keen to get as many people on-board as possible. I'm just saying that a tutorial takes some a couple of days drafting and planning what to screen shot and what to describe etc. So in the mean time, you may be as well working with a pre-patched client till the guide can be made.