Quote:
Originally Posted by kavee55
I've been searching for a tutorial to remove the above, but have been unsuccessful thus far. Anyone kind enough to either point me in the right direction or provide me a guide? Thanks in advance.
|
Removing background click checks:
Code:
00561FB8 > FF15 3C7A7800 CALL DWORD PTR DS:[<&USER32.GetActiveWin>; [GetActiveWindow
00561FBE . 50 PUSH EAX
00561FBF . E8 0E3B1700 CALL <JMP.&MFC42.#2864>
00561FC4 . 3BC3 CMP EAX,EBX
00561FC6 . 75 1E JNZ SHORT Conquer.00561FE6
00561FC8 . 393D 78DD8600 CMP DWORD PTR DS:[86DD78],EDI
00561FCE . 75 0E JNZ SHORT Conquer.00561FDE
00561FD0 . 6A 0A [COLOR="Red"]PUSH 0A[/COLOR]
00561FD2 . E8 34A40800 [COLOR="Red"]CALL Conquer.005EC40B[/COLOR]
00561FD7 . 8BC8 [COLOR="Red"]MOV ECX,EAX[/COLOR]
00561FD9 . E8 6B9C0800 [COLOR="Red"][B]CALL Conquer.005EBC49[/B] <-----[/COLOR]
As you can see, Conquer calls the "GetActiveWindow" to see which window is active. If it's not the Conquer window, it pushes 0xA (which is an argument in one of the 0x271A packets - tells the server that you're using an auto clicker) then it calls a function to get your character ID (the "CALL Conquer.005EC40B")
It then calls the actual function that sends the "cheater packet" or whatever you wanna call it (the "CALL Conquer.005EBC49") . What I suggest is that you go inside that function and change the first line of it to a "RET" (0xC3), like this:
From this
Code:
005EBC49 /$ B8 029B7600 MOV EAX,Conquer.00769B02
005EBC4E |. E8 0DA20E00 CALL Conquer.006D5E60
005EBC53 |. 81EC 60080000 SUB ESP,860
005EBC59 |. 53 PUSH EBX
005EBC5A |. 56 PUSH ESI
005EBC5B |. 6A 01 PUSH 1
To this
Code:
005EBC49 C3 RETN
005EBC4A 90 NOP
005EBC4B 90 NOP
005EBC4C 90 NOP
005EBC4D 90 NOP
005EBC4E |. E8 0DA20E00 CALL Conquer.006D5E60
005EBC53 |. 81EC 60080000 SUB ESP,860
005EBC59 |. 53 PUSH EBX
005EBC5A |. 56 PUSH ESI
005EBC5B |. 6A 01 PUSH 1
As for removing the away status, you might wanna check my signature
Edit:
Editing your Conquer.exe is not recommended unless you know what you're doing