I bet all is about a simple thing. NoEx probably don't even know about this, because he would have fixed it until now. It's probably a simple thing as I said like windows automatically restarted it for updates or w/e (I'm sure he don't use windows anyways)
@fox, portal
If you can tell me how do I redirect the bot to localhost, I can try my best If doad used domains instead of ip i would use hosts file (**** me im so smart xDD) (I do not know anything about unpacking, but at least I know a bit about PHP )
@sarkoplata
the same way you do for silkroad.
make a native dll [c++] and use microsoft detours to redirect connection.
if you are lost use the drew_benton tutorial about silkroad loader you will find the redirection function.
@sarkoplata
the same way you do for silkroad.
make a native dll [c++] and use microsoft detours to redirect connection.
if you are lost use the drew_benton tutorial about silkroad loader you will find the redirection function.
screw that **** not hooking the wsa.connect method again
well, by redirecting to localhost, you will have forever bot without the "risk" of having your data stolen
wdf, so he did that on purpose? omq if that's true then "I think" that NoEx did that so he can wait Doad to offer him money to stop the bot from working whenever he wants, but if so, why didn't he do that earlier, and remember these are all thoughts, maybe the server accidently went down... Lets just wait for NoEx to give us a response.
wdf, so he did that on purpose? omq if that's true then "I think" that NoEx did that so he can wait Doad to offer him money to stop the bot from working whenever he wants, but if so, why didn't he do that earlier, and remember these are all thoughts, maybe the server accidently went down... Lets just wait for NoEx to give us a response.
i didnt mean to say he is stealing stuff
but by making it local you can be sure(for conspirators) your info is safe
Actually ideas are clear, I have also investigated in that since the crack is down (i just read this thread now, if only i did it before ),
So here are my observations:
-> Crack Forces mBot to bind IP to noEx Server, which is hosted @Dedibox...
-> mBot sends to noEx Server a HTTP Form which contain encrypted(?) informations concerning current version
-> The server sends {{LAST_VERSION}}...
-> Same thing for ID&PW (http form)
-> The Server normally should send a reply that is different then @1.100@ which means that ID&PW are wrong...
And here are my doubts:
-> I don't know if noEx Server sends a reply that said that ID & PW are correct or noEx have used jumping technique (JMP to a specific @ddress)
Finally what I ask from you:
->How Hell Can we force mbot (or any application) to bind to a specific ip ... i've tried ForceBindIP but it has never find WinSock.dll to do its stuff ...
Can you help me please, and can we create a small team to work together for resolving that issue
actually we can create a socket application that receive a 1st packet (whatever its content is) and replies with [HTTP stuff concatenated to "{{LAST_VERSION}}"] and receive 2nd packet and replies with [HTTP stuff concatenated to the reply that mbot server send when id & pw are correct]...
that will avoid making PHP page and force everybody to install apache server or so ...
if you could not create a dll to redirect the connection as i explained before ... you can also install a loop back adaptor and set the ip to the server's ip.
this will make you avoid the apache thing.
GCPH All-player The real reason for the delay in the hack releases 07/31/2010 - Grand Chase Hacks, Bots, Cheats & Exploits - 3 Replies The true reason for the delays for the release of the hacks is because the "bypass" for the injection method (I think that is what the "bypass" is for) has been patched by gcph NOT THE MAIN.EXE shortcut bypass since hackers use this method as a substitute for the absence of the v4 compiler. Hackers correct me if I'm wrong about the true function of this "bypass"
he hack obviously got patched. They did it quick this time, completely blocking the bypass method in only one month. I already have...
gcph[ANNOUNCEMENT/ADVISORY] The real reason for the delay in the hack releases 07/26/2010 - Grand Chase Philippines - 3 Replies The true reason for the delays for the release of the hacks is because the "bypass" for the injection method (I think that is what the "bypass" is for) has been patched by gcph NOT THE MAIN.EXE shortcut bypass since hackers use this method as a substitute for the absence of the v4 compiler. Hackers correct me if I'm wrong about the true function of this "bypass"
I have renamed them all, but sadly, even if you were able to make it, you still need the bypass, which was patched. Thats why the...
The Real Reason Why VIP Is Offline Right Now 12/20/2009 - SRO Private Server - 6 Replies Quotation from the official forums:
I can just repeat myself. They're a pserver and doing their best. So don't flame this thread.
Constructive Posts are welcome.
Let's be happy that they're trying to fix it + bugged chars should be recovered.
The real reason alpha ZO is shutdown 11/30/2008 - Zero - 32 Replies The real reason why Alpha ZO is temporary shutdown is because EME and god hacked the dedicated server and now the PM's can't access it.
I don't know how to they did it but I strongly believe that god and EME teamed up and hacked the server so that no one can play.
They did it before, remember the time when the PM's can't access the dedi?
It was EME and god's doing.
They blocked the access to the dedi that's why the dedi can't be accessed and necron had to restart it.
And now they...
If doad used domains instead of ip i would use hosts file 
(**** me im so smart xDD) (I do not know anything about unpacking, but at least I know a bit about PHP 
)
),
