How To Fix This Hack On v2240

[Enterz]

http://rapidshare.com/files/29687395...YL2_GMHack.zip

Plz Teach Me How To Fix It.

[MentaL]

[Tyfix]

Well 1 easy way is to relocate the GM position in memory.

Granted it wont stop anyone that are targeting your server to modify the hack but it will stop all server purpose hacks meaning they would have to make a special version for your server. (or make it support your server by a couple checks in the hack)

As for chat as has been discussed elsewhere just disable GM chatting all together. (type 9)

[ernesto2]

pliz create guide pliz

[Enterz]

Oh Well..I Have Fix It But Some One Reupdate That Hack..So They Can Use Back..

For Who Love RYL Plz Teach Me How To Fix It..

Save Our Server...RYL Rock!!

[Tyfix]

There isn't a way to fix it if the ones targeting the server really want to they can get around it no matter what you do. Is the sad truth about the security on the official server/client architecture.

[Enterz]

can u give guide example to fix it..like remove gm text.how?..

[Tyfix]

Well it depends where you have some free code space in your gameserver, one way would be to change the chat command from 09 to 00 for instance which would make the chat come out as local chat instead of global gm message.

You would still need some code space to manipulate the register before its sent on to chatserver.

The offset for the incoming chat packet (subcmd compare) is here (2240 GameServer): 0047B283

so the changes could look something like this:

0047B283 JMP 0050A416
0047B288 NOP
0047B289 NOP
0047B28A NOP
0047B28B NOP
0047B28C MOVZX EDX,BYTE PTR DS:[EAX+47B600]

..

0050A416 CMP EAX,0E
0050A419 JA 0047B4EC
0050A41F CMP EAX,9
0050A422 JNZ SHORT 0050A426
0050A424 XOR EAX,EAX
0050A426 JMP 0047B28C
0050A42B INT3
0050A42C INT3

---

Same edit just with hex search/replace 2 edits:

Find:
83 F8 0E 0F 87 60 02 00 00 0F B6 90 00 B6 47 00
Replace with:
E9 8E F1 08 00 90 90 90 90 0F B6 90 00 B6 47 00

Find:
83 C1 19 0F AF C1 59 C3 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC
Replace with:
83 C1 19 0F AF C1 59 C3 83 F8 0E 0F 87 CD 10 F7 FF 83 F8 09 75 02 33 C0 E9 61 0E F7 FF CC

[Enterz]

TryFix This Must Change At Gameserver Or Client?..Littel Confius..

[Tyfix]

Let me quote myself.

Well it depends where you have some free code space in your gameserver

The offset for the incoming chat packet (subcmd compare) is here (2240 GameServer): 0047B283

[EliteAk47]

you have to know how to live with the hackers..
because that you have no specific solution to block that hack.
its the last knockout to that game :\

[Tyfix]

not exactly true.. Can block it by just disabling anything gm related actually. Granted means your real GM's can do shit but.

[EliteAk47]

RYL without a game modering is no game..
so like i said it the last knockout until the server files source code will released by emmm...
anyway post a Guide how to do disable it..
that would be a little breathing

[Enterz]

Thx So Much TyFix..U Are Great!!! Asome!!! Thx For Your Guide...

[Enterz]

OMG!! Both Change..Not Shout Talk..

TyFix How To Remove GM Oren Text Only?..

[babitelor]

you're funny xD