make app UD in C++..?

[R3bel19]

Hello, I have a "little" question.:confused:
Ever when i make my hacks in c++ i change some strings which I think i can change and the hacks work, but they do not stay very long UD.
Some days only sometimes... :(

Now I would like to know if someone can help me finding stings I have/can change?
I would give the Person adresses or maybe an Account if he/she helps me.

Would be nice if someone help me out.
Thank to all which try to help, really!:D

R3bel19

[Dxt-Credzis]

Detour your application...

If u know C++, u can view the files from msdetours and u will find out how it works...

http://research.microsoft.com/research/downloads/Details/10e5d78c-592c-419d-a53e-bae8dbd81801/Details.aspx

[purple.d1amond]

how did u find the functions to detour? are they in the pbcl.dll? or just in the warrock.exe?
am i right, if i say, i have just to detour the function which calls the 0min ban, the 1440min etc?

edit: finally i found sth like the 'file not found %s' function... is it the function i am searching for?
cause i dont find anything like the error message with the bans.
r u using ida pro or ollydbg?

[thimo]

how did u find the functions to detour? are they in the pbcl.dll? or just in the warrock.exe?
am i right, if i say, i have just to detour the function which calls the 0min ban, the 1440min etc?

edit: finally i found sth like the 'file not found %s' function... is it the function i am searching for?
cause i dont find anything like the error message with the bans.
r u using ida pro or ollydbg?

no u gotta to wait untill pb runs a command
and then
an if command
like

f(pbcheck = 1){
disable all hacks
}

[purple.d1amond]

okay many thx! seems easier i expected...
but how can i see if punkbuster checks the memory?
do i need a special program?

that method doesnt look like a detour for me....

[R3bel19]

I cant see the detour.... I cant open it.
But I only have to change strings or not?
Could I post an example of sourcecode and u correct them here?

So other people could see if u want, I just need for myself!

Or I begin what I changed and u say what I 4got?

I changed:
-Writelong
-WriteFloat
-Proc_id
-hProcess

Is this the right way?
I also have some probs with the language...
But thanks for all.

EDIT: They Bann for 1440min (Multihack)

R3bel19

[Dxt-Credzis]

Search the "pbcl.dll" file with an dissambler like IDA Pro or Ollydbg

[purple.d1amond]

- deleted -