Title says... (with asm). for 2008..
Printable View
Title says... (with asm). for 2008..
why would wana do that?
In hex, find /suicide and replace by something fucked up.
well hex editing dose the job ,but it dosent disable all it dose is change the /suicide to other stuff.
and yeah i agree its a stupid way
Open the runnable in OllyDBG, search for all referenced text strings, search for suicide or something like that, when you fond it, follow it in disassembler and NOP the address.
NOP will kill the whole shit bad idea
Simply NOP the function call to MMatchServer::OnRequestSuicide at MMatchServer::OnCommand.
OR
Remove the command "/suicide" from the runnable using NOP over the function that deals with adding the command callback for it.
The /suicide command it self isn't located in OllyDbg neither Hex editing lol.
That's because "/suicide" is being fetched off the string table.
Code:0042EAAC |. 6A 01 PUSH 1
0042EAAE |. 6A FF PUSH -1
0042EAB0 |. 6A FF PUSH -1
0042EAB2 |. 6A 04 PUSH 4
0042EAB4 |. 68 10C04200 PUSH Gunz_(Un.0042C010
0042EAB9 |. 6A 0F PUSH 0F ; ChatCmds => '/suicide' (CMD ID: 15 / 0x0F, <STR id="CMD_NAME_15">suicide</STR>)
0042EABB |. 8D55 E4 LEA EDX,DWORD PTR SS:[EBP-1C]
0042EABE |. 52 PUSH EDX
0042EABF |. 56 PUSH ESI
0042EAC0 |. E8 0BF8FFFF CALL Gunz_(Un.0042E2D0
0042EAC5 |. 6A 01 PUSH 1 ; |Arg8 = 00000001
0042EAC7 |. 6A FF PUSH -1 ; |Arg7 = FFFFFFFF
0042EAC9 |. 6A FF PUSH -1 ; |Arg6 = FFFFFFFF
0042EACB |. 6A 04 PUSH 4 ; |Arg5 = 00000004
0042EACD |. 68 80D44200 PUSH Gunz_(Un.0042D480 ; |Arg4 = 0042D480
0042EAD2 |. 6A 10 PUSH 10 ; |Arg3 = 00000010
0042EAD4 |. 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C] ; |
0042EAD7 |. 50 PUSH EAX ; |Arg2
0042EAD8 |. 56 PUSH ESI ; |Arg1
0042EAD9 |. E8 F2F7FFFF CALL Gunz_(Un.0042E2D0 ; \Gunz_(Un.0042E2D0
0042EADE |. 83C4 40 ADD ESP,40
Wait so, If I basically hook up to that address, I could manage to change /suicide to something else?
You should make /suicide like ijji, like 10 seconds of not moving and then you die.