Thread: Want to disable Xtrap? Try this :D

Originally Posted by eduardowgt

Could anybody help me?
the process for in this line

Put a breakpoint on this call, you can ever go to Ctrl+G and put the line that this call goes into, and check it. run ever by alt+F9, I'm using this method right now and analyzing (slowly, but analyzing) aika packets, and using SH to up fast my sniper

'll test.
I think it does not work (the speed), for it always happens dc

I couldn´t find the message box.

#rhu
press ctrl+g and paste 0041DCBE
press enter.

Originally Posted by snOw.

#rhu
press ctrl+g and paste 0041DCBE
press enter.

You can find BA, analyze packets, decrypt them, dump them, change adresses, and use speed but it takes 2~3 min to get dc, so you can reset this time going to char selection screen =) You can do much more than simple use speed with no xtrap.

gm3x,u have msn?
if yes,send me by pm

just click on the msn icon on my profile (:

FOLLOW ALL RIGHT, BUT IN TIME TO OPEN AND CLOSE THE GAME ALONE.
The JE EXCHANGE BY JNZ Gazette DPS AE AFTER FILL NOPs have no doubt PROCEGUIR AS SOMEONE OF A LIGHT?

Originally Posted by cobradagua

FOLLOW ALL RIGHT, BUT IN TIME TO OPEN AND CLOSE THE GAME ALONE.
The JE EXCHANGE BY JNZ Gazette DPS AE AFTER FILL NOPs have no doubt PROCEGUIR AS SOMEONE OF A LIGHT?

This method is for open the client with debugger, running by alt+F9, not to run it alone, coz have other line to NOP to cancel the process exit, but Ive not found it

GM3X, I tried to run it on IDA PRO, and it closes before appear loading screen too.
This the log that it showed me:

PHP Code:

6C240000: loaded C:\Windows\SysWOW64\atiu9pag.dll
65640000: loaded C:\Windows\SysWOW64\atiumdag.dll
68A30000: loaded C:\Windows\SysWOW64\atiumdva.dll
77302C81: thread has started (tid=804)
68E4524E: thread has started (tid=1840)
68E4524E: thread has started (tid=4692)
68E4524E: thread has started (tid=2052)
68E4524E: thread has started (tid=4936)
68E4524E: thread has started (tid=2160)
68E4524E: thread has started (tid=4904)
68E4524E: thread has started (tid=4516)
5DBBA0: thread has started (tid=564)
70240000: loaded C:\Windows\SysWOW64\es.dll
714F0000: loaded C:\Windows\SysWOW64\cryptsp.dll
714B0000: loaded C:\Windows\SysWOW64\rsaenh.dll
70C80000: loaded C:\Windows\SysWOW64\RpcRtRemote.dll
7619C89D: thread has started (tid=3892)
Debugger: thread 4800 has exited (code 0)
-------------------------------------------
Debugger: thread 804 has exited (code 0)
-------------------------------------------
Debugger: thread 2160 has exited (code 0)
-------------------------------------------
Debugger: thread 564 has exited (code 0)
-------------------------------------------
Debugger: thread 4936 has exited (code 0)
-------------------------------------------
Debugger: thread 3012 has exited (code 0)
-------------------------------------------
Debugger: thread 3892 has exited (code 0)
-------------------------------------------
Debugger: thread 1932 has exited (code 0)
-------------------------------------------
Debugger: thread 4516 has exited (code 0)
-------------------------------------------
Debugger: thread 2052 has exited (code 0)
-------------------------------------------
Debugger: thread 3132 has exited (code 0)
-------------------------------------------
Debugger: thread 3984 has exited (code 0)
-------------------------------------------
Debugger: thread 3816 has exited (code 0)
-------------------------------------------
Debugger: thread 4904 has exited (code 0)
-------------------------------------------
Debugger: thread 4692 has exited (code 0)
-------------------------------------------
Debugger: thread 1840 has exited (code 0)
-------------------------------------------
Debugger: thread 3224 has exited (code 0)
-------------------------------------------
Debugger: process has exited (exit code 0) 


Is it useful?