[TUT] DomainCommand ("mole") "Fix"

[343]

First, open the gamedbd daemon in IDA free/pro:

Find the function "domaincmd"... When you get the list, which should look similar to pic below, select/follow the SECOND (2nd) one in the list that says "GNET:omainCmd:rocess ... ... ..."

Locate the line (as highlighted in SS below) "JNZ" (just before the last "JMP")

"NOP" it..! Should look like this once that's correctly done:

Second, open gdeliveryd in IDA free/pro:

Find the function "domaindaemon"... When you get the list, which should look similar to pic below, select/follow the one with "OnLogin" in the name...

Locate the line (as highlighted in SS below) "JNZ" (just after "CMP" and just before "PUSH")

NOP it..! Should look like this once that's correctly done:

Next, (and quite possibly the most important part here!) Find/follow the function for "domaindaemon" with "OnValidate" in the name...

Should look like below:

 

[343]

Scroll toward the end of the function, last few lines should be JNZ, MOV, MOV, JMP (as pictured below):

CHANGE that "JNZ" to a "JMP" as shown below:

*presto* no more "mole"...!!!...!!!

 

[ramonymous]

this release same like pw155moleremoved.7z? (in another thread, that you commented, sry forgot the thread)