Announcement

Collapse
No announcement yet.

SOCOM II : Memory Dumper

Collapse
X
Collapse
 
  • Page of 1
  • Filter
  • Time
  • Show
Clear All
new posts
Previous template Next
  • #1

    SOCOM II : Memory Dumper

    I wrote this recently, It was never done for SOCOM II and it could be pretty useful. It works very similar to the code master projects memory dumping tutorials, however SOCOM II seems to be a bit different. As you can see just fill the arguments and press L1 + R1

    Code:
    //Code Designer Source Code

address $200a0000

__McWrite:
/*
SOCOM II - r0001
Memory dumper
>a0 File name
>a1 File pointer
>a2 File size
*/

//Change this here
setreg a0, $000a5000
setreg a1, $00300000
setreg a2, $00000539

addiu sp, sp, $FA90
sw ra, $0000(sp)
sw s0, $0004(sp)
sw s1, $0008(sp)
sw s2, $000c(sp)
daddu s0, a0, zero,
daddu s1, a1, zero,
daddu s2, a2, zero,

setreg t0, $00436460

lw a0, $0020(t0)
lw a1, $0024(t0)

//file name
daddu a2, s0, zero
jal $001b3d40 
addiu a3, zero, $0202

daddu a0, zero, zero,
addiu a1, sp, $056c
jal $001b4390
addiu a2, sp, $0564
lw a0, $0564(sp)

//file pointer
daddu a1, s1, zero
jal $001b41d8

//file size
daddu a2, s2, zero,

daddu a0, zero, zero,
addiu a1, sp, $056c
jal $001b4390
addiu a2, sp, $0568
jal $001b3ea0
lw a0, $0564(sp)

daddu a0, zero, zero,
addiu a1, sp, $056c
jal $001b4390
addiu a2, sp, $0568

lw ra, $0000(sp)
lw s0, $0004(sp)
lw s1, $0008(sp)
lw s2, $000c(sp)
jr ra
addiu sp, sp, $0570

address $200a5000
print "CRONOTRIGGA0x539.RAW"

//L1+R1
address $D044F15C 
hexcode $0000F3FF
address $202CED04
j :__McWrite

address $D044F15C 
hexcode $0000FFFF
address $202CED04
jr ra
    Last edited by Cronotrigga; 03-30-2016, 12:06:35 PM.
    Tags: None
  • #2
    Very impressed man. I know on psp socom had a label where you download different patches for the game. I just use a working hook and it would download the patch. But good work.

    Comment

    • #3
      Originally posted by Professor-X View Post
      Very impressed man. I know on psp socom had a label where you download different patches for the game. I just use a working hook and it would download the patch. But good work.
      That's awesome! I always wanted to try that.

      Comment

      • #4
        I'm not sure what the labels are like on socom ps2 but I've always wanted to mess with the server label to see if could create my own server and host it. I found a function that dealt with a lot the online sending and receiving information and if I change certain values to it some of the ppl that have boot codes on would get kick from the room or they would just freeze. Turning it on disable a lot of features and players object within the game when it starts. It was very weird but cool. Dealing with the modified md5 encryption scanner. I was very limited to what I could do but I would love to know how the cheat scanner work on the game and where it's located.
        Last edited by Professor-X; 05-12-2016, 06:08:20 AM.

        Comment

        • #5
          Originally posted by Professor-X View Post
          I'm not sure what the labels are like on socom ps2 but I've always wanted to mess with the server label to see if could create my own server and host it. I found a function that dealt with a lot the online sending and receiving information and if I change certain values to it some of the ppl that have boot codes on would get kick from the room or they would just freeze. Turning it on disable a lot of features and players object within the game when it starts. It was very weird but cool. Dealing with the modified md5 encryption scanner. I was very limited to what I could do but I would love to know how the cheat scanner work on the game and where it's located.
          GTLCPimp actually bypassed the scanner on ca. He basically just turned his codes off let the scanner run then turned them back on. He would be able to explain how it works and where its located. I do have his code laying around somewhere.

          Comment

          • #6
            Originally posted by Professor-X View Post
            I'm not sure what the labels are like on socom ps2 but I've always wanted to mess with the server label to see if could create my own server and host it. I found a function that dealt with a lot the online sending and receiving information and if I change certain values to it some of the ppl that have boot codes on would get kick from the room or they would just freeze. Turning it on disable a lot of features and players object within the game when it starts. It was very weird but cool. Dealing with the modified md5 encryption scanner. I was very limited to what I could do but I would love to know how the cheat scanner work on the game and where it's located.
            Running a server with the original game really isn't going to happen. The most you might be able to do is set the host file to the socom uri's and relocate them to ether a local server or a separate server. Without the original server source you will be limited to what you can do. This means each individual packet on the server would need to be disassembled and handled in the code you write for the server. You could however go the lan concept, which will work and possibly enable online features. The issue with ether route is the packet encryption. If the packet were to be raw data you could do anything but it isn't which means you would need to hack a code similar to what GTLCPimp did on ca for his v gate where he disables the packet encryption. The disadvantage to this method is the fact that everyone would need the ability to load up codes to be able to play on your server. The upside to this concept is that you could literally recreate the entire server packet by packet. Enabling what is needed and leaving what isn't.

            Comment

            • #7
              Originally posted by Cronotrigga View Post
              Running a server with the original game really isn't going to happen. The most you might be able to do is set the host file to the socom uri's and relocate them to ether a local server or a separate server. Without the original server source you will be limited to what you can do. This means each individual packet on the server would need to be disassembled and handled in the code you write for the server. You could however go the lan concept, which will work and possibly enable online features. The issue with ether route is the packet encryption. If the packet were to be raw data you could do anything but it isn't which means you would need to hack a code similar to what GTLCPimp did on ca for his v gate where he disables the packet encryption. The disadvantage to this method is the fact that everyone would need the ability to load up codes to be able to play on your server. The upside to this concept is that you could literally recreate the entire server packet by packet. Enabling what is needed and leaving what isn't.
              I agree, everyone would need the ability to load up codes to be able to play on the server. I haven't really put this into work but I would like to see what I get. I've found most of fireteam bravo series tcp socket and network functions and my theory behind it was to recreate the entire server function or at least edit what is needed to send and receive each packet data. I'm going to be looking more into it over the weekend and post what I came up with.
              Last edited by Professor-X; 05-26-2016, 09:16:34 AM.

              Comment

              • #8
                Originally posted by Cronotrigga View Post
                I wrote this recently, It was never done for SOCOM II and it could be pretty useful. It works very similar to the code master projects memory dumping tutorials, however SOCOM II seems to be a bit different. As you can see just fill the arguments and press L1 + R1

                Code:
                //Code Designer Source Code

address $200a0000

__McWrite:
/*
SOCOM II - r0001
Memory dumper
>a0 File name
>a1 File pointer
>a2 File size
*/

//Change this here
setreg a0, $000a5000
setreg a1, $00300000
setreg a2, $00000539

addiu sp, sp, $FA90
sw ra, $0000(sp)
sw s0, $0004(sp)
sw s1, $0008(sp)
sw s2, $000c(sp)
daddu s0, a0, zero,
daddu s1, a1, zero,
daddu s2, a2, zero,

setreg t0, $00436460

lw a0, $0020(t0)
lw a1, $0024(t0)

//file name
daddu a2, s0, zero
jal $001b3d40 
addiu a3, zero, $0202

daddu a0, zero, zero,
addiu a1, sp, $056c
jal $001b4390
addiu a2, sp, $0564
lw a0, $0564(sp)

//file pointer
daddu a1, s1, zero
jal $001b41d8

//file size
daddu a2, s2, zero,

daddu a0, zero, zero,
addiu a1, sp, $056c
jal $001b4390
addiu a2, sp, $0568
jal $001b3ea0
lw a0, $0564(sp)

daddu a0, zero, zero,
addiu a1, sp, $056c
jal $001b4390
addiu a2, sp, $0568

lw ra, $0000(sp)
lw s0, $0004(sp)
lw s1, $0008(sp)
lw s2, $000c(sp)
jr ra
addiu sp, sp, $0570

address $200a5000
print "CRONOTRIGGA0x539.RAW"

//L1+R1
address $D044F15C 
hexcode $0000F3FF
address $202CED04
j :__McWrite

address $D044F15C 
hexcode $0000FFFF
address $202CED04
jr ra
                Is there anyway for users to determine the file size if they did not know?
                Last edited by Professor-X; 06-05-2016, 12:55:07 AM.

                Comment

                • #9
                  Originally posted by Professor-X View Post
                  Is there anyway for users to determine the file size if they did not know?
                  Sure so the size can be calculated pretty much the same way an offset is calculated.
                  Code:
                  Higher address - lower address = Offset
Offset / 4 = byte count
Now take the byte count and convert it to an int. I usually do this with windows calculator in programming mode.
                  Last edited by Cronotrigga; 06-06-2016, 05:29:10 PM.

                  Comment

                  • #10
                    Originally posted by Professor-X View Post
                    I'm not sure what the labels are like on socom ps2 but I've always wanted to mess with the server label to see if could create my own server and host it. I found a function that dealt with a lot the online sending and receiving information and if I change certain values to it some of the ppl that have boot codes on would get kick from the room or they would just freeze. Turning it on disable a lot of features and players object within the game when it starts. It was very weird but cool. Dealing with the modified md5 encryption scanner. I was very limited to what I could do but I would love to know how the cheat scanner work on the game and where it's located.
                    I'm not sure about SOCOM II, but on SOCOM 3/Combined Assault the cheat detection system was a total asshole. Disable it? Get disconnected with X error code thrown. After 3 attempts from the server to get a response (failing with disconnection), automatically assumes you have it disabled (via cheats) and "detected" (aka banned).

                    With it enabled it operates a full scan upon login, hence the sudden intense lag immediately after you successfully logged in. This first load actually checks a lot more memory than the random checks during game operation. Funny side note when they patched the game to detect code majic, they set it to read the sub routine memory address, but were dumb and made it check to see if the actual sub routine IS there rather than check if the memory block is not vacant lol.

                    After that the server randomly sends a request containing a memory address, data size, and hash. The cheat detection function then builds a new hash from that memory section using the hash from the packet, then returns the new hash to the server. If the server's "results" hash doesn't perfectly match what the PS2 sent, you obviously have codes on. When I say randomly sends, I mean it randomly sends a request at random times. Each time though is in order from the last memory address + memory size checked. Which is the exact reason why some of you go "I had this code on for 30 minutes and didn't get detected but earlier I turned it on and bam detected within 2 seconds"

                    If you are actually curious, here is a full dump of the "cheat detection system" packets. I have my notes in it so you can get a rough idea of what is what.
                    Side note: FNC #9 is the initializing function for the scan to start, FNC #5 is the actual "scan" function
                    Code:
                    ======================================================================= First Load
Packet Size: 13
FNC: 09
...: 01075F60
Start: 00000000
Size: 00000000
Hash: 

Packet Size: 13
FNC: 09
...: 01075F8B
Start: 00000000
Size: 00000000
Hash: 

Packet Size: 29
FNC: 05
...: 01075FA2
Start: 8007B000
Size: 00000100
Hash: 338596BD2F07A5FD8357180384DC616F

Packet Size: 29
FNC: 05
...: 01075FB4
Start: 00080000
Size: 00000100
Hash: 6B2827D41B288BCCD717817E064EEE03

Packet Size: 29
FNC: 05
...: 01075FEA
Start: 00080000
Size: 00000100
Hash: 47DCFBDF5D60D597B3D4E9D0EBC721EA

Packet Size: 29
FNC: 05
...: 01076007
Start: 80050000
Size: 00000100
Hash: 7632D7A47F2141C29C684C8D38EAFB6B

Packet Size: 29
FNC: 05
...: 01076027
Start: 00080000
Size: 00000100
Hash: A5EC691F8964674381F73D47206A0B3C

Packet Size: 29
FNC: 05
...: 01076048
Start: 00080000
Size: 00000100
Hash: 9B3D07C029801A3D2DACC59656CB3556

Packet Size: 29
FNC: 05
...: 01076063
Start: 000F1078
Size: 00000100
Hash: F5D873C39FC686C84E62911B86A14429

Packet Size: 29
FNC: 05
...: 0107607C
Start: 000C0000
Size: 00000100
Hash: EA54A7FE53A11EAB68C2E9A6A73E8E72

Packet Size: 29
FNC: 05
...: 01076095
Start: 00080000
Size: 00000100
Hash: E0054D7782FC6F9600032595D078B8A6

Packet Size: 29
FNC: 05
...: 010760AF
Start: 00080000
Size: 00000100
Hash: 13A9D797A6C918F6AC997C3383413FE7

Packet Size: 29
FNC: 05
...: 010760CB
Start: 00080000
Size: 00000100
Hash: 288E414B4AD9625C10289718BBE1B793

Packet Size: 29
FNC: 05
...: 010760E3
Start: 000C0000
Size: 00000100
Hash: 87971D387477D9A4FAE444EE141A4A23

Packet Size: 29
FNC: 05
...: 01076101
Start: 000C0000
Size: 00000100
Hash: 0EDC51BB6570AEFA5F12820F84647D4D

Packet Size: 29
FNC: 05
...: 01076119
Start: 000C0000
Size: 00000100
Hash: E05449E41989A2D3E924F74636E8EDAC

Packet Size: 29
FNC: 05
...: 01076130
Start: 000C0000
Size: 00000100
Hash: 671013FC2362698C8683C5C39014D5C9

Packet Size: 29
FNC: 05
...: 01076147
Start: 000C0000
Size: 00000100
Hash: 34CB62D3DD30EB5EDA23A5B8DFF4D6B1

Packet Size: 29
FNC: 05
...: 01076160
Start: 000C0000
Size: 00000100
Hash: C626CE2EAE2FAC6E6C243E55879803FA

Packet Size: 29
FNC: 05
...: 01076181
Start: 000C0000
Size: 00000100
Hash: 9EF98E29297F5C9BF7A7360907EB9E74

Packet Size: 29
FNC: 05
...: 010761A4
Start: 00080000
Size: 00000100
Hash: 67A4334473B01CD88BE8A023CD9096C6

Packet Size: 29
FNC: 05
...: 010761C1
Start: 00080080
Size: 00000100
Hash: 889BDD9F60D26DDC3918F101BA6920C7

Packet Size: 29
FNC: 05
...: 010761DF
Start: 00180000
Size: 0047E0CC
Hash: 2AC6868CC753E807DE031406534E7CCD

Packet Size: 29
FNC: 05
...: 0107621F
Start: 00180000
Size: 0047E0CC
Hash: 96098F7D5EFBEA7DF35A2AC97C05BA9B

Packet Size: 29
FNC: 05
...: 01076267
Start: 00180000
Size: 00514FDA
Hash: 1F2BC3C502925B8F193787BBFC9334C4

Packet Size: 29
FNC: 05
...: 010762A6
Start: 00710640
Size: 00000264
Hash: 48CD1EA0964694D78A88D49281439958

Packet Size: 41
FNC: 15
...: 010762C0
Start: 00000000
Size: 00000000
Hash: 636476645F64726976657200D618C87C4369092C8E612C2B9AC554F2







======================================================================= Joined Game In Lobby
Packet Size: 13
FNC: 09
...: 0007A970
Start: 00000000
Size: 00000000
Hash: 00

Packet Size: 29
FNC: 05
...: 0007A98C
Start: 00180000
Size: 00020000
Hash: 0708FB56E7093180D87E071F21C3542D

Packet Size: 29
FNC: 05
...: 0007A9A9
Start: 001A0000
Size: 00020000
Hash: 01A5423F144C5030EC1FADE87783040C

Packet Size: 29
FNC: 05
...: 0007AAA7
Start: 001C0000
Size: 00020000
Hash: C667940F9E6317A15A4DA8B55014A1F5

Packet Size: 29
FNC: 05
...: 0007AABD
Start: 001E0000
Size: 00020000
Hash: 313CF7BBC5998DB023E6FE88D1AD9C33

Packet Size: 29
FNC: 05
...: 0007AADA
Start: 00200000
Size: 00020000
Hash: 88E9276543CC9DE102A84679DF2B9630

Packet Size: 29
FNC: 05
...: 0007AAF6
Start: 00220000
Size: 00020000
Hash: 594326B90FBC8ECF9F5C4961DD2FFAB1

Packet Size: 29
FNC: 05
...: 0007AB0E
Start: 00240000
Size: 00020000
Hash: 1174F512F891D0DAF758139AC1A9BADD

Packet Size: 29
FNC: 05
...: 0007AB26
Start: 00260000
Size: 00020000
Hash: AD8205749D0A7980F42F5AC3B91531F9

Packet Size: 29
FNC: 05
...: 0007AB3E
Start: 00280000
Size: 00020000
Hash: A46ED00412AD2B454835B11A94C80B64

Packet Size: 29
FNC: 05
...: 0007AB53
Start: 002A0000
Size: 00020000
Hash: 4CCF01533212307430D24FF1E7B3240C

Packet Size: 29
FNC: 05
...: 0007AB6C
Start: 002C0000
Size: 00020000
Hash: BA75C4D55FCE8EFBC81B11733CF94B9E

Packet Size: 29
FNC: 05
...: 0007AB82
Start: 002E0000
Size: 00020000
Hash: 9EB09A6EBEFF0F120F05A61FA2B787BE

Packet Size: 29
FNC: 05
...: 0007AB96
Start: 00300000
Size: 00020000
Hash: CFB43CF3353639702A45807F447FF87F

Packet Size: 29
FNC: 05
...: 0007ABAA
Start: 00320000
Size: 00020000
Hash: 864A58EA35D0AC50C29552DA895F8DA7

Packet Size: 29
FNC: 05
...: 0007ABBE
Start: 00340000
Size: 00020000
Hash: 93A09F0480603BBA70E2FB873B3D7F88

Packet Size: 29
FNC: 05
...: 0007ABD8
Start: 00360000
Size: 00020000
Hash: 3BC0FB8F8E7937BDB8A6851E826B2E56

Packet Size: 29
FNC: 05
...: 0007ABF2
Start: 00380000
Size: 00020000
Hash: 1CBE67A551ACBDC260B493E61F02AB3F

Packet Size: 29
FNC: 05
...: 0007AC0A
Start: 003A0000
Size: 00020000
Hash: DF2C47E9695A7ED28DDBF68BEA18B706

Packet Size: 29
FNC: 05
...: 0007AC25
Start: 003C0000
Size: 00020000
Hash: 476EACC8871B0EE8FC2360B633A88CB0

Packet Size: 29
FNC: 05
...: 0007AC3B
Start: 003E0000
Size: 00020000
Hash: 2AC197C47EF4D9EE8238DF4D422D0F0C

Packet Size: 29
FNC: 05
...: 0007AC59
Start: 00400000
Size: 00020000
Hash: D7AA189B701EBF7841838AC8FA85DC65

Packet Size: 29
FNC: 05
...: 0007AC72
Start: 00420000
Size: 00020000
Hash: 5B7002C4F67A8E5CFC451AA3C1A21989

Packet Size: 29
FNC: 05
...: 0007AC8D
Start: 00440000
Size: 00020000
Hash: 47FA0392C492DEC67ADB88610EB8D74F

Packet Size: 29
FNC: 05
...: 0007ACA2
Start: 00460000
Size: 00020000
Hash: 03E450DE589744B836411E5339D47376

Packet Size: 29
FNC: 05
...: 0007ACBA
Start: 00480000
Size: 00020000
Hash: C517C2A1AC0C4AF3B1505938CA6CC950

Packet Size: 29
FNC: 05
...: 0007ACCE
Start: 004A0000
Size: 00020000
Hash: 8C7B48C23C849BE90529CEB121C24F54

Packet Size: 29
FNC: 05
...: 0007ACE1
Start: 004C0000
Size: 00020000
Hash: 0AA935B8593F03CF86964290B9F2A985

Packet Size: 29
FNC: 05
...: 0007ACF3
Start: 004E0000
Size: 00020000
Hash: CB1374F06FA98F7A566A6DD9D7303E95

Packet Size: 29
FNC: 05
...: 0007AD02
Start: 00500000
Size: 00020000
Hash: 15520CD0036A775482D4DD21806A77EE

Packet Size: 29
FNC: 05
...: 0007AD15
Start: 00520000
Size: 00020000
Hash: 16F19CD811011E9F122D8938D591609D

Packet Size: 29
FNC: 05
...: 0007AD23
Start: 00540000
Size: 00020000
Hash: FD90EA2A66A80B1EAA0990B32682CE15

Packet Size: 29
FNC: 05
...: 0007AD5A
Start: 00560000
Size: 00020000
Hash: 46598E4ABC74E58115C1DB581876F629

Packet Size: 29
FNC: 05
...: 0007AD74
Start: 00580000
Size: 00020000
Hash: 94D6D62E238C61154EAD196B3F182667

Packet Size: 29
FNC: 05
...: 0007AD8E
Start: 005A0000
Size: 00020000
Hash: 0EB538E15CDA10AA50D6AAA5011FC40F

Packet Size: 29
FNC: 05
...: 0007ADAB
Start: 005C0000
Size: 00020000
Hash: 1D85721C3003E278C66ADC29671E2C70

Packet Size: 29
FNC: 05
...: 0007ADC4
Start: 005E0000
Size: 00020000
Hash: F55D73915D01469941E636D6BBCAE86C

Packet Size: 29
FNC: 05
...: 0007ADDB
Start: 00600000
Size: 00020000
Hash: A819802113E25E5C70C241E9D672D04A

Packet Size: 29
FNC: 05
...: 0007ADEF
Start: 00620000
Size: 00020000
Hash: 20C7AE8A15518D4D248247820000E2E5

Packet Size: 29
FNC: 05
...: 0007AE06
Start: 00640000
Size: 00020000
Hash: 7E4F80D3C6306BAF259B48B021CC6338

Packet Size: 29
FNC: 05
...: 0007AE1D
Start: 00660000
Size: 00020000
Hash: 5C5AD1AF3632B0253561FAAB6E8CB481

Packet Size: 29
FNC: 05
...: 0007AE36
Start: 00680000
Size: 00014FD4
Hash: 5A1CCE169325FA31DCF3E8468079B2B3

Packet Size: 29
FNC: 05
...: 0007AE4D
Start: 00710640
Size: 00000264
Hash: 6EFA88468C6117441E942C48040DF581




======================================================================= Second Load In Game Lobby
Packet Size: 13
FNC: 09
...: 0007BF1F
Start: 00000000
Size: 00000000
Hash: 00

Packet Size: 29
FNC: 05
...: 0007BF3B
Start: 00180000
Size: 00020000
Hash: B11C66D303C0C5EEB578BFA3E420FDB0

Packet Size: 29
FNC: 05
...: 0007BF60
Start: 001A0000
Size: 00020000
Hash: 1F049AF11F7A26191DF6FCC84BD989EC

Packet Size: 29
FNC: 05
...: 0007BF7F
Start: 001C0000
Size: 00020000
Hash: 9BC1DC15C4751267A743DA0FDF054428

Packet Size: 29
FNC: 05
...: 0007BF9A
Start: 001E0000
Size: 00020000
Hash: 05F37AB88C27361D6CAA58830C81E05D

Packet Size: 29
FNC: 05
...: 0007BFB6
Start: 00200000
Size: 00020000
Hash: 7D4CA4359D6A1446F7C19E3E8EC6E60F

Packet Size: 29
FNC: 05
...: 0007BFD0
Start: 00220000
Size: 00020000
Hash: 91FD573C77F277C9473CAC045B6D23BC

Packet Size: 29
FNC: 05
...: 0007BFE8
Start: 00240000
Size: 00020000
Hash: 276F8A88B18AABA048B70524357DFC37

Packet Size: 29
FNC: 05
...: 0007C002
Start: 00260000
Size: 00020000
Hash: CE57634CF16E2C2B0ECC10A2582D2029

Packet Size: 29
FNC: 05
...: 0007C014
Start: 00280000
Size: 00020000
Hash: 15DFF5E3C47360B0FBCA5D545D6EA33F

Packet Size: 29
FNC: 05
...: 0007C029
Start: 002A0000
Size: 00020000
Hash: A6CB65A5BDA2228006B05FC9FF1AA77D

Packet Size: 29
FNC: 05
...: 0007C03B
Start: 002C0000
Size: 00020000
Hash: 42CEA2A14236DB48833AB2866BECFC4A

Packet Size: 29
FNC: 05
...: 0007C04D
Start: 002E0000
Size: 00020000
Hash: 53BE091B95DDCC2F2FC59A08EDE4BCF3

Packet Size: 29
FNC: 05
...: 0007C05F
Start: 00300000
Size: 00020000
Hash: ED93974BA217390886A3964801D342D4

Packet Size: 29
FNC: 05
...: 0007C070
Start: 00320000
Size: 00020000
Hash: 58D2D93B3E777345616B4388ADA3A7E6

Packet Size: 29
FNC: 05
...: 0007C082
Start: 00340000
Size: 00020000
Hash: 8087611BE97990D82857EAFF5A94AE2B

Packet Size: 29
FNC: 05
...: 0007C09C
Start: 00360000
Size: 00020000
Hash: A920691DE8AD2BBB66ACC8A31CEFA0D4

Packet Size: 29
FNC: 05
...: 0007C0BF
Start: 00380000
Size: 00020000
Hash: 1C2E6C29F037E6F4A903FC35C9CF506B

Packet Size: 29
FNC: 05
...: 0007C0D8
Start: 003A0000
Size: 00020000
Hash: C6C3008ED326816DF2D581B6AC8CF83C

Packet Size: 29
FNC: 05
...: 0007C0F2
Start: 003C0000
Size: 00020000
Hash: 4480C02446EE4B1A4588FDDB7C238523

Packet Size: 29
FNC: 05
...: 0007C10B
Start: 003E0000
Size: 00020000
Hash: 11364E018D01036D1B467065C0174F14

Packet Size: 29
FNC: 05
...: 0007C126
Start: 00400000
Size: 00020000
Hash: F91C1FB67A56D18FA68275B4B39816AF

Packet Size: 29
FNC: 05
...: 0007C13D
Start: 00420000
Size: 00020000
Hash: EF00B728E1D6B92FF22EAB4E85A4A2C6

Packet Size: 29
FNC: 05
...: 0007C157
Start: 00440000
Size: 00020000
Hash: C9E1448A35B3C9CD6CA90437B02BD39E

Packet Size: 29
FNC: 05
...: 0007C178
Start: 00460000
Size: 00020000
Hash: FBDD62B53273E5134517B87A600E6D37

Packet Size: 29
FNC: 05
...: 0007C195
Start: 00480000
Size: 00020000
Hash: 38331AD8611137D52C529F018DE2E84B

Packet Size: 29
FNC: 05
...: 0007C1AB
Start: 004A0000
Size: 00020000
Hash: 359CE2AE5EB90C2EFBB4085E99C4414A

Packet Size: 29
FNC: 05
...: 0007C1BF
Start: 004C0000
Size: 00020000
Hash: E8AEA2A5098679EB2FA52C09D2C85369

Packet Size: 29
FNC: 05
...: 0007C1DD
Start: 004E0000
Size: 00020000
Hash: FB5A87331A97E55F0FB16EDD322BF43F

Packet Size: 29
FNC: 05
...: 0007C1F1
Start: 00500000
Size: 00020000
Hash: C3095CE99B8909D1B312E2623542E601

Packet Size: 29
FNC: 05
...: 0007C211
Start: 00520000
Size: 00020000
Hash: F1D8516F01579F29B8CCF71E7F18BF2F

Packet Size: 29
FNC: 05
...: 0007C231
Start: 00540000
Size: 00020000
Hash: F6056CBA8153CF1CC9F1B9016B4517A7

Packet Size: 29
FNC: 05
...: 0007C253
Start: 00560000
Size: 00020000
Hash: 89ED78685F2D03A3597C96C4CE500EC0

Packet Size: 29
FNC: 05
...: 0007C270
Start: 00580000
Size: 00020000
Hash: D9A2AC115698189187B555CB59B581D1

Packet Size: 29
FNC: 05
...: 0007C291
Start: 005A0000
Size: 00020000
Hash: 643728F94AABA79CDA33829AF99DA0D1

Packet Size: 29
FNC: 05
...: 0007C2B5
Start: 005C0000
Size: 00020000
Hash: BE831D866CA96F2FDCAC7C065FD2CD88

Packet Size: 29
FNC: 05
...: 0007C2DB
Start: 005E0000
Size: 00020000
Hash: D29E3B31FC65F7D0C2B466DA92A07014

Packet Size: 29
FNC: 05
...: 0007C2FB
Start: 00600000
Size: 00020000
Hash: E36CF1BE3870443A0D8F51C8F3CE242E

Packet Size: 29
FNC: 05
...: 0007C31A
Start: 00620000
Size: 00020000
Hash: 7794E32A529AF9CE0371672D389A251F

Packet Size: 29
FNC: 05
...: 0007C32F
Start: 00640000
Size: 00020000
Hash: 34A90DB1F2879A82457437E885F83D0B

Packet Size: 29
FNC: 05
...: 0007C346
Start: 00660000
Size: 00020000
Hash: C209E6D16B1FF3EFC54D0753E2A1ABA0

Packet Size: 29
FNC: 05
...: 0007C363
Start: 00680000
Size: 00014FD4
Hash: 1D36FEBFF526BBE89C95E3307AD126FA

Packet Size: 29
FNC: 05
...: 0007C37D
Start: 00710640
Size: 00000264
Hash: D70FAA7097FABBA568EDA62EE2A9ABDF

======================================================================================== Third Load In Lobby
Packet Size: 13
FNC: 09
...: 0007D481
Start: 00000000
Size: 00000000
Hash: 00

Packet Size: 29
FNC: 05
...: 0007D4A3
Start: 00180000
Size: 00020000
Hash: 94FF4869DF1C3D7BA6F6BFDDEBCB9E79

Packet Size: 29
FNC: 05
...: 0007D4CA
Start: 001A0000
Size: 00020000
Hash: FBD60345CA5AE265CA0ECA7711219B64

Packet Size: 29
FNC: 05
...: 0007D4F1
Start: 001C0000
Size: 00020000
Hash: DBF36C356EDE9166521485DB3BF29880

Packet Size: 29
FNC: 05
...: 0007D515
Start: 001E0000
Size: 00020000
Hash: 8971F42AA11FA782E89EDE127D3D32E6

Packet Size: 29
FNC: 05
...: 0007D53A
Start: 00200000
Size: 00020000
Hash: 2137CF460A4A90815B02C6E34054FCD3

Packet Size: 29
FNC: 05
...: 0007D559
Start: 00220000
Size: 00020000
Hash: 8928447E02DE1765CBB3D955FC572280

Packet Size: 29
FNC: 05
...: 0007D57A
Start: 00240000
Size: 00020000
Hash: 3747A3D2E0F1A84FC6FF85ADCBD8B6DC

Packet Size: 29
FNC: 05
...: 0007D5A0
Start: 00260000
Size: 00020000
Hash: D7128B541D56CD3D411610CCCCF583E7

Packet Size: 29
FNC: 05
...: 0007D5CB
Start: 00280000
Size: 00020000
Hash: 47D1409AEFBCA5AEDF351DBC6B77C569

Packet Size: 29
FNC: 05
...: 0007D5E8
Start: 002A0000
Size: 00020000
Hash: 6C4A47FC19A93A4730FA309D526E5710

Packet Size: 29
FNC: 05
...: 0007D604
Start: 002C0000
Size: 00020000
Hash: D63FEB47131AB2DA0F482C8358010A58

Packet Size: 29
FNC: 05
...: 0007D615
Start: 002E0000
Size: 00020000
Hash: BE3359E393CF9B1746E8631BECA68280

Packet Size: 29
FNC: 05
...: 0007D62A
Start: 00300000
Size: 00020000
Hash: E0D16EFA3B4A0B840FA4F11B8DE5911B

Packet Size: 29
FNC: 05
...: 0007D63F
Start: 00320000
Size: 00020000
Hash: F6F5DAE52F1E8B8ADB009D473CF9DDF8

Packet Size: 29
FNC: 05
...: 0007D660
Start: 00340000
Size: 00020000
Hash: 28D25073154A15B313108CCC308B9D9A

Packet Size: 29
FNC: 05
...: 0007D683
Start: 00360000
Size: 00020000
Hash: 6939DEDD2DE073575424C04FAE84FAD0

Packet Size: 29
FNC: 05
...: 0007D6A2
Start: 00380000
Size: 00020000
Hash: F95BE05CE0231576FD73EF8FC58A3026

Packet Size: 29
FNC: 05
...: 0007D6C3
Start: 003A0000
Size: 00020000
Hash: EE25DB233D8CC9976C213C1374E30FEF

Packet Size: 29
FNC: 05
...: 0007D6DE
Start: 003C0000
Size: 00020000
Hash: 08003A275B89034476B2F6FD57027FDD

Packet Size: 29
FNC: 05
...: 0007D6F9
Start: 003E0000
Size: 00020000
Hash: 594EF402CF01623E6C754134F1279E4F

Packet Size: 29
FNC: 05
...: 0007D714
Start: 00400000
Size: 00020000
Hash: CC5F7289139A48311F3BA5A42409C98B

Packet Size: 29
FNC: 05
...: 0007D730
Start: 00420000
Size: 00020000
Hash: 210007DD1713B9CD2C7EF38F97D2E13A

Packet Size: 29
FNC: 05
...: 0007D74A
Start: 00440000
Size: 00020000
Hash: EF839E07E347DB01ECDBB84CEC88F244

Packet Size: 29
FNC: 05
...: 0007D760
Start: 00460000
Size: 00020000
Hash: FC54C1C2C00DA5C64EE45287EDE8A160

Packet Size: 29
FNC: 05
...: 0007D774
Start: 00480000
Size: 00020000
Hash: 2A61FF59462526837E548DF7B0CC084D

Packet Size: 29
FNC: 05
...: 0007D789
Start: 004A0000
Size: 00020000
Hash: 2EA76F8B294F7AE0586F2C3750ED4B56

Packet Size: 29
FNC: 05
...: 0007D79E
Start: 004C0000
Size: 00020000
Hash: BA4BE0FCE923DD5FC16404958E73B178

Packet Size: 29
FNC: 05
...: 0007D7AC
Start: 004E0000
Size: 00020000
Hash: 623FC48F7B7183D5CFEB7A725F90E45C

Packet Size: 29
FNC: 05
...: 0007D7C0
Start: 00500000
Size: 00020000
Hash: 74A2320EDA2EEAA2B5BBC762E6807F10

Packet Size: 29
FNC: 05
...: 0007D7E3
Start: 00520000
Size: 00020000
Hash: DCF9F27905237A37CF8BDA0C2584D8BB

Packet Size: 29
FNC: 05
...: 0007D807
Start: 00540000
Size: 00020000
Hash: 603C7026BFC9156487ACEDC0164EDF65

Packet Size: 29
FNC: 05
...: 0007D82B
Start: 00560000
Size: 00020000
Hash: EDDC9CCE6D834587E1D67F92EBD5A4C6

Packet Size: 29
FNC: 05
...: 0007D84A
Start: 00580000
Size: 00020000
Hash: 324FE400E0826E8557A2E89D24352415

Packet Size: 29
FNC: 05
...: 0007D86B
Start: 005A0000
Size: 00020000
Hash: 1B8397E98E507B783DBCCBD29356CC19

Packet Size: 29
FNC: 05
...: 0007D890
Start: 005C0000
Size: 00020000
Hash: 20B7C20E85D28F721CAA6766E781D7EA

Packet Size: 29
FNC: 05
...: 0007D8AA
Start: 005E0000
Size: 00020000
Hash: 764F6DB71344CBB4BF7975C0A4D9AD04

Packet Size: 29
FNC: 05
...: 0007D8C8
Start: 00600000
Size: 00020000
Hash: 5FCC7B97509ECBB98699F8AA95457B7B

Packet Size: 29
FNC: 05
...: 0007D8E3
Start: 00620000
Size: 00020000
Hash: 8B509345655EAF96C6BE7285056DC3CA

Packet Size: 29
FNC: 05
...: 0007D8F8
Start: 00640000
Size: 00020000
Hash: 5F94A13D0662C86D527D36BAB440FCCB

Packet Size: 29
FNC: 05
...: 0007D915
Start: 00660000
Size: 00020000
Hash: C49871085F85FF615771C4A61AA0C846

Packet Size: 29
FNC: 05
...: 0007D931
Start: 00680000
Size: 00014FD4
Hash: F8383723EDE3023DEDD8BC730F27D5B8

Packet Size: 29
FNC: 05
...: 0007D945
Start: 00710640
Size: 00000264
Hash: 50F26865F390F350B10317270C0CB7F4
                    Last edited by Gtlcpimp; 06-30-2016, 06:19:45 AM.

                    Comment

                    • #11
                      Originally posted by Gtlcpimp View Post
                      I'm not sure about SOCOM II, but on SOCOM 3/Combined Assault the cheat detection system was a total asshole. Disable it? Get disconnected with X error code thrown. After 3 attempts from the server to get a response (failing with disconnection), automatically assumes you have it disabled (via cheats) and "detected" (aka banned).

                      With it enabled it operates a full scan upon login, hence the sudden intense lag immediately after you successfully logged in. This first load actually checks a lot more memory than the random checks during game operation. Funny side note when they patched the game to detect code majic, they set it to read the sub routine memory address, but were dumb and made it check to see if the actual sub routine IS there rather than check if the memory block is not vacant lol.

                      After that the server randomly sends a request containing a memory address, data size, and hash. The cheat detection function then builds a new hash from that memory section using the hash from the packet, then returns the new hash to the server. If the server's "results" hash doesn't perfectly match what the PS2 sent, you obviously have codes on. When I say randomly sends, I mean it randomly sends a request at random times. Each time though is in order from the last memory address + memory size checked. Which is the exact reason why some of you go "I had this code on for 30 minutes and didn't get detected but earlier I turned it on and bam detected within 2 seconds"

                      If you are actually curious, here is a full dump of the "cheat detection system" packets. I have my notes in it so you can get a rough idea of what is what.
                      Side note: FNC #9 is the initializing function for the scan to start, FNC #5 is the actual "scan" function
                      Code:
                      ======================================================================= First Load
Packet Size: 13
FNC: 09
...: 01075F60
Start: 00000000
Size: 00000000
Hash: 

Packet Size: 13
FNC: 09
...: 01075F8B
Start: 00000000
Size: 00000000
Hash: 

Packet Size: 29
FNC: 05
...: 01075FA2
Start: 8007B000
Size: 00000100
Hash: 338596BD2F07A5FD8357180384DC616F

Packet Size: 29
FNC: 05
...: 01075FB4
Start: 00080000
Size: 00000100
Hash: 6B2827D41B288BCCD717817E064EEE03

Packet Size: 29
FNC: 05
...: 01075FEA
Start: 00080000
Size: 00000100
Hash: 47DCFBDF5D60D597B3D4E9D0EBC721EA

Packet Size: 29
FNC: 05
...: 01076007
Start: 80050000
Size: 00000100
Hash: 7632D7A47F2141C29C684C8D38EAFB6B

Packet Size: 29
FNC: 05
...: 01076027
Start: 00080000
Size: 00000100
Hash: A5EC691F8964674381F73D47206A0B3C

Packet Size: 29
FNC: 05
...: 01076048
Start: 00080000
Size: 00000100
Hash: 9B3D07C029801A3D2DACC59656CB3556

Packet Size: 29
FNC: 05
...: 01076063
Start: 000F1078
Size: 00000100
Hash: F5D873C39FC686C84E62911B86A14429

Packet Size: 29
FNC: 05
...: 0107607C
Start: 000C0000
Size: 00000100
Hash: EA54A7FE53A11EAB68C2E9A6A73E8E72

Packet Size: 29
FNC: 05
...: 01076095
Start: 00080000
Size: 00000100
Hash: E0054D7782FC6F9600032595D078B8A6

Packet Size: 29
FNC: 05
...: 010760AF
Start: 00080000
Size: 00000100
Hash: 13A9D797A6C918F6AC997C3383413FE7

Packet Size: 29
FNC: 05
...: 010760CB
Start: 00080000
Size: 00000100
Hash: 288E414B4AD9625C10289718BBE1B793

Packet Size: 29
FNC: 05
...: 010760E3
Start: 000C0000
Size: 00000100
Hash: 87971D387477D9A4FAE444EE141A4A23

Packet Size: 29
FNC: 05
...: 01076101
Start: 000C0000
Size: 00000100
Hash: 0EDC51BB6570AEFA5F12820F84647D4D

Packet Size: 29
FNC: 05
...: 01076119
Start: 000C0000
Size: 00000100
Hash: E05449E41989A2D3E924F74636E8EDAC

Packet Size: 29
FNC: 05
...: 01076130
Start: 000C0000
Size: 00000100
Hash: 671013FC2362698C8683C5C39014D5C9

Packet Size: 29
FNC: 05
...: 01076147
Start: 000C0000
Size: 00000100
Hash: 34CB62D3DD30EB5EDA23A5B8DFF4D6B1

Packet Size: 29
FNC: 05
...: 01076160
Start: 000C0000
Size: 00000100
Hash: C626CE2EAE2FAC6E6C243E55879803FA

Packet Size: 29
FNC: 05
...: 01076181
Start: 000C0000
Size: 00000100
Hash: 9EF98E29297F5C9BF7A7360907EB9E74

Packet Size: 29
FNC: 05
...: 010761A4
Start: 00080000
Size: 00000100
Hash: 67A4334473B01CD88BE8A023CD9096C6

Packet Size: 29
FNC: 05
...: 010761C1
Start: 00080080
Size: 00000100
Hash: 889BDD9F60D26DDC3918F101BA6920C7

Packet Size: 29
FNC: 05
...: 010761DF
Start: 00180000
Size: 0047E0CC
Hash: 2AC6868CC753E807DE031406534E7CCD

Packet Size: 29
FNC: 05
...: 0107621F
Start: 00180000
Size: 0047E0CC
Hash: 96098F7D5EFBEA7DF35A2AC97C05BA9B

Packet Size: 29
FNC: 05
...: 01076267
Start: 00180000
Size: 00514FDA
Hash: 1F2BC3C502925B8F193787BBFC9334C4

Packet Size: 29
FNC: 05
...: 010762A6
Start: 00710640
Size: 00000264
Hash: 48CD1EA0964694D78A88D49281439958

Packet Size: 41
FNC: 15
...: 010762C0
Start: 00000000
Size: 00000000
Hash: 636476645F64726976657200D618C87C4369092C8E612C2B9AC554F2







======================================================================= Joined Game In Lobby
Packet Size: 13
FNC: 09
...: 0007A970
Start: 00000000
Size: 00000000
Hash: 00

Packet Size: 29
FNC: 05
...: 0007A98C
Start: 00180000
Size: 00020000
Hash: 0708FB56E7093180D87E071F21C3542D

Packet Size: 29
FNC: 05
...: 0007A9A9
Start: 001A0000
Size: 00020000
Hash: 01A5423F144C5030EC1FADE87783040C

Packet Size: 29
FNC: 05
...: 0007AAA7
Start: 001C0000
Size: 00020000
Hash: C667940F9E6317A15A4DA8B55014A1F5

Packet Size: 29
FNC: 05
...: 0007AABD
Start: 001E0000
Size: 00020000
Hash: 313CF7BBC5998DB023E6FE88D1AD9C33

Packet Size: 29
FNC: 05
...: 0007AADA
Start: 00200000
Size: 00020000
Hash: 88E9276543CC9DE102A84679DF2B9630

Packet Size: 29
FNC: 05
...: 0007AAF6
Start: 00220000
Size: 00020000
Hash: 594326B90FBC8ECF9F5C4961DD2FFAB1

Packet Size: 29
FNC: 05
...: 0007AB0E
Start: 00240000
Size: 00020000
Hash: 1174F512F891D0DAF758139AC1A9BADD

Packet Size: 29
FNC: 05
...: 0007AB26
Start: 00260000
Size: 00020000
Hash: AD8205749D0A7980F42F5AC3B91531F9

Packet Size: 29
FNC: 05
...: 0007AB3E
Start: 00280000
Size: 00020000
Hash: A46ED00412AD2B454835B11A94C80B64

Packet Size: 29
FNC: 05
...: 0007AB53
Start: 002A0000
Size: 00020000
Hash: 4CCF01533212307430D24FF1E7B3240C

Packet Size: 29
FNC: 05
...: 0007AB6C
Start: 002C0000
Size: 00020000
Hash: BA75C4D55FCE8EFBC81B11733CF94B9E

Packet Size: 29
FNC: 05
...: 0007AB82
Start: 002E0000
Size: 00020000
Hash: 9EB09A6EBEFF0F120F05A61FA2B787BE

Packet Size: 29
FNC: 05
...: 0007AB96
Start: 00300000
Size: 00020000
Hash: CFB43CF3353639702A45807F447FF87F

Packet Size: 29
FNC: 05
...: 0007ABAA
Start: 00320000
Size: 00020000
Hash: 864A58EA35D0AC50C29552DA895F8DA7

Packet Size: 29
FNC: 05
...: 0007ABBE
Start: 00340000
Size: 00020000
Hash: 93A09F0480603BBA70E2FB873B3D7F88

Packet Size: 29
FNC: 05
...: 0007ABD8
Start: 00360000
Size: 00020000
Hash: 3BC0FB8F8E7937BDB8A6851E826B2E56

Packet Size: 29
FNC: 05
...: 0007ABF2
Start: 00380000
Size: 00020000
Hash: 1CBE67A551ACBDC260B493E61F02AB3F

Packet Size: 29
FNC: 05
...: 0007AC0A
Start: 003A0000
Size: 00020000
Hash: DF2C47E9695A7ED28DDBF68BEA18B706

Packet Size: 29
FNC: 05
...: 0007AC25
Start: 003C0000
Size: 00020000
Hash: 476EACC8871B0EE8FC2360B633A88CB0

Packet Size: 29
FNC: 05
...: 0007AC3B
Start: 003E0000
Size: 00020000
Hash: 2AC197C47EF4D9EE8238DF4D422D0F0C

Packet Size: 29
FNC: 05
...: 0007AC59
Start: 00400000
Size: 00020000
Hash: D7AA189B701EBF7841838AC8FA85DC65

Packet Size: 29
FNC: 05
...: 0007AC72
Start: 00420000
Size: 00020000
Hash: 5B7002C4F67A8E5CFC451AA3C1A21989

Packet Size: 29
FNC: 05
...: 0007AC8D
Start: 00440000
Size: 00020000
Hash: 47FA0392C492DEC67ADB88610EB8D74F

Packet Size: 29
FNC: 05
...: 0007ACA2
Start: 00460000
Size: 00020000
Hash: 03E450DE589744B836411E5339D47376

Packet Size: 29
FNC: 05
...: 0007ACBA
Start: 00480000
Size: 00020000
Hash: C517C2A1AC0C4AF3B1505938CA6CC950

Packet Size: 29
FNC: 05
...: 0007ACCE
Start: 004A0000
Size: 00020000
Hash: 8C7B48C23C849BE90529CEB121C24F54

Packet Size: 29
FNC: 05
...: 0007ACE1
Start: 004C0000
Size: 00020000
Hash: 0AA935B8593F03CF86964290B9F2A985

Packet Size: 29
FNC: 05
...: 0007ACF3
Start: 004E0000
Size: 00020000
Hash: CB1374F06FA98F7A566A6DD9D7303E95

Packet Size: 29
FNC: 05
...: 0007AD02
Start: 00500000
Size: 00020000
Hash: 15520CD0036A775482D4DD21806A77EE

Packet Size: 29
FNC: 05
...: 0007AD15
Start: 00520000
Size: 00020000
Hash: 16F19CD811011E9F122D8938D591609D

Packet Size: 29
FNC: 05
...: 0007AD23
Start: 00540000
Size: 00020000
Hash: FD90EA2A66A80B1EAA0990B32682CE15

Packet Size: 29
FNC: 05
...: 0007AD5A
Start: 00560000
Size: 00020000
Hash: 46598E4ABC74E58115C1DB581876F629

Packet Size: 29
FNC: 05
...: 0007AD74
Start: 00580000
Size: 00020000
Hash: 94D6D62E238C61154EAD196B3F182667

Packet Size: 29
FNC: 05
...: 0007AD8E
Start: 005A0000
Size: 00020000
Hash: 0EB538E15CDA10AA50D6AAA5011FC40F

Packet Size: 29
FNC: 05
...: 0007ADAB
Start: 005C0000
Size: 00020000
Hash: 1D85721C3003E278C66ADC29671E2C70

Packet Size: 29
FNC: 05
...: 0007ADC4
Start: 005E0000
Size: 00020000
Hash: F55D73915D01469941E636D6BBCAE86C

Packet Size: 29
FNC: 05
...: 0007ADDB
Start: 00600000
Size: 00020000
Hash: A819802113E25E5C70C241E9D672D04A

Packet Size: 29
FNC: 05
...: 0007ADEF
Start: 00620000
Size: 00020000
Hash: 20C7AE8A15518D4D248247820000E2E5

Packet Size: 29
FNC: 05
...: 0007AE06
Start: 00640000
Size: 00020000
Hash: 7E4F80D3C6306BAF259B48B021CC6338

Packet Size: 29
FNC: 05
...: 0007AE1D
Start: 00660000
Size: 00020000
Hash: 5C5AD1AF3632B0253561FAAB6E8CB481

Packet Size: 29
FNC: 05
...: 0007AE36
Start: 00680000
Size: 00014FD4
Hash: 5A1CCE169325FA31DCF3E8468079B2B3

Packet Size: 29
FNC: 05
...: 0007AE4D
Start: 00710640
Size: 00000264
Hash: 6EFA88468C6117441E942C48040DF581




======================================================================= Second Load In Game Lobby
Packet Size: 13
FNC: 09
...: 0007BF1F
Start: 00000000
Size: 00000000
Hash: 00

Packet Size: 29
FNC: 05
...: 0007BF3B
Start: 00180000
Size: 00020000
Hash: B11C66D303C0C5EEB578BFA3E420FDB0

Packet Size: 29
FNC: 05
...: 0007BF60
Start: 001A0000
Size: 00020000
Hash: 1F049AF11F7A26191DF6FCC84BD989EC

Packet Size: 29
FNC: 05
...: 0007BF7F
Start: 001C0000
Size: 00020000
Hash: 9BC1DC15C4751267A743DA0FDF054428

Packet Size: 29
FNC: 05
...: 0007BF9A
Start: 001E0000
Size: 00020000
Hash: 05F37AB88C27361D6CAA58830C81E05D

Packet Size: 29
FNC: 05
...: 0007BFB6
Start: 00200000
Size: 00020000
Hash: 7D4CA4359D6A1446F7C19E3E8EC6E60F

Packet Size: 29
FNC: 05
...: 0007BFD0
Start: 00220000
Size: 00020000
Hash: 91FD573C77F277C9473CAC045B6D23BC

Packet Size: 29
FNC: 05
...: 0007BFE8
Start: 00240000
Size: 00020000
Hash: 276F8A88B18AABA048B70524357DFC37

Packet Size: 29
FNC: 05
...: 0007C002
Start: 00260000
Size: 00020000
Hash: CE57634CF16E2C2B0ECC10A2582D2029

Packet Size: 29
FNC: 05
...: 0007C014
Start: 00280000
Size: 00020000
Hash: 15DFF5E3C47360B0FBCA5D545D6EA33F

Packet Size: 29
FNC: 05
...: 0007C029
Start: 002A0000
Size: 00020000
Hash: A6CB65A5BDA2228006B05FC9FF1AA77D

Packet Size: 29
FNC: 05
...: 0007C03B
Start: 002C0000
Size: 00020000
Hash: 42CEA2A14236DB48833AB2866BECFC4A

Packet Size: 29
FNC: 05
...: 0007C04D
Start: 002E0000
Size: 00020000
Hash: 53BE091B95DDCC2F2FC59A08EDE4BCF3

Packet Size: 29
FNC: 05
...: 0007C05F
Start: 00300000
Size: 00020000
Hash: ED93974BA217390886A3964801D342D4

Packet Size: 29
FNC: 05
...: 0007C070
Start: 00320000
Size: 00020000
Hash: 58D2D93B3E777345616B4388ADA3A7E6

Packet Size: 29
FNC: 05
...: 0007C082
Start: 00340000
Size: 00020000
Hash: 8087611BE97990D82857EAFF5A94AE2B

Packet Size: 29
FNC: 05
...: 0007C09C
Start: 00360000
Size: 00020000
Hash: A920691DE8AD2BBB66ACC8A31CEFA0D4

Packet Size: 29
FNC: 05
...: 0007C0BF
Start: 00380000
Size: 00020000
Hash: 1C2E6C29F037E6F4A903FC35C9CF506B

Packet Size: 29
FNC: 05
...: 0007C0D8
Start: 003A0000
Size: 00020000
Hash: C6C3008ED326816DF2D581B6AC8CF83C

Packet Size: 29
FNC: 05
...: 0007C0F2
Start: 003C0000
Size: 00020000
Hash: 4480C02446EE4B1A4588FDDB7C238523

Packet Size: 29
FNC: 05
...: 0007C10B
Start: 003E0000
Size: 00020000
Hash: 11364E018D01036D1B467065C0174F14

Packet Size: 29
FNC: 05
...: 0007C126
Start: 00400000
Size: 00020000
Hash: F91C1FB67A56D18FA68275B4B39816AF

Packet Size: 29
FNC: 05
...: 0007C13D
Start: 00420000
Size: 00020000
Hash: EF00B728E1D6B92FF22EAB4E85A4A2C6

Packet Size: 29
FNC: 05
...: 0007C157
Start: 00440000
Size: 00020000
Hash: C9E1448A35B3C9CD6CA90437B02BD39E

Packet Size: 29
FNC: 05
...: 0007C178
Start: 00460000
Size: 00020000
Hash: FBDD62B53273E5134517B87A600E6D37

Packet Size: 29
FNC: 05
...: 0007C195
Start: 00480000
Size: 00020000
Hash: 38331AD8611137D52C529F018DE2E84B

Packet Size: 29
FNC: 05
...: 0007C1AB
Start: 004A0000
Size: 00020000
Hash: 359CE2AE5EB90C2EFBB4085E99C4414A

Packet Size: 29
FNC: 05
...: 0007C1BF
Start: 004C0000
Size: 00020000
Hash: E8AEA2A5098679EB2FA52C09D2C85369

Packet Size: 29
FNC: 05
...: 0007C1DD
Start: 004E0000
Size: 00020000
Hash: FB5A87331A97E55F0FB16EDD322BF43F

Packet Size: 29
FNC: 05
...: 0007C1F1
Start: 00500000
Size: 00020000
Hash: C3095CE99B8909D1B312E2623542E601

Packet Size: 29
FNC: 05
...: 0007C211
Start: 00520000
Size: 00020000
Hash: F1D8516F01579F29B8CCF71E7F18BF2F

Packet Size: 29
FNC: 05
...: 0007C231
Start: 00540000
Size: 00020000
Hash: F6056CBA8153CF1CC9F1B9016B4517A7

Packet Size: 29
FNC: 05
...: 0007C253
Start: 00560000
Size: 00020000
Hash: 89ED78685F2D03A3597C96C4CE500EC0

Packet Size: 29
FNC: 05
...: 0007C270
Start: 00580000
Size: 00020000
Hash: D9A2AC115698189187B555CB59B581D1

Packet Size: 29
FNC: 05
...: 0007C291
Start: 005A0000
Size: 00020000
Hash: 643728F94AABA79CDA33829AF99DA0D1

Packet Size: 29
FNC: 05
...: 0007C2B5
Start: 005C0000
Size: 00020000
Hash: BE831D866CA96F2FDCAC7C065FD2CD88

Packet Size: 29
FNC: 05
...: 0007C2DB
Start: 005E0000
Size: 00020000
Hash: D29E3B31FC65F7D0C2B466DA92A07014

Packet Size: 29
FNC: 05
...: 0007C2FB
Start: 00600000
Size: 00020000
Hash: E36CF1BE3870443A0D8F51C8F3CE242E

Packet Size: 29
FNC: 05
...: 0007C31A
Start: 00620000
Size: 00020000
Hash: 7794E32A529AF9CE0371672D389A251F

Packet Size: 29
FNC: 05
...: 0007C32F
Start: 00640000
Size: 00020000
Hash: 34A90DB1F2879A82457437E885F83D0B

Packet Size: 29
FNC: 05
...: 0007C346
Start: 00660000
Size: 00020000
Hash: C209E6D16B1FF3EFC54D0753E2A1ABA0

Packet Size: 29
FNC: 05
...: 0007C363
Start: 00680000
Size: 00014FD4
Hash: 1D36FEBFF526BBE89C95E3307AD126FA

Packet Size: 29
FNC: 05
...: 0007C37D
Start: 00710640
Size: 00000264
Hash: D70FAA7097FABBA568EDA62EE2A9ABDF

======================================================================================== Third Load In Lobby
Packet Size: 13
FNC: 09
...: 0007D481
Start: 00000000
Size: 00000000
Hash: 00

Packet Size: 29
FNC: 05
...: 0007D4A3
Start: 00180000
Size: 00020000
Hash: 94FF4869DF1C3D7BA6F6BFDDEBCB9E79

Packet Size: 29
FNC: 05
...: 0007D4CA
Start: 001A0000
Size: 00020000
Hash: FBD60345CA5AE265CA0ECA7711219B64

Packet Size: 29
FNC: 05
...: 0007D4F1
Start: 001C0000
Size: 00020000
Hash: DBF36C356EDE9166521485DB3BF29880

Packet Size: 29
FNC: 05
...: 0007D515
Start: 001E0000
Size: 00020000
Hash: 8971F42AA11FA782E89EDE127D3D32E6

Packet Size: 29
FNC: 05
...: 0007D53A
Start: 00200000
Size: 00020000
Hash: 2137CF460A4A90815B02C6E34054FCD3

Packet Size: 29
FNC: 05
...: 0007D559
Start: 00220000
Size: 00020000
Hash: 8928447E02DE1765CBB3D955FC572280

Packet Size: 29
FNC: 05
...: 0007D57A
Start: 00240000
Size: 00020000
Hash: 3747A3D2E0F1A84FC6FF85ADCBD8B6DC

Packet Size: 29
FNC: 05
...: 0007D5A0
Start: 00260000
Size: 00020000
Hash: D7128B541D56CD3D411610CCCCF583E7

Packet Size: 29
FNC: 05
...: 0007D5CB
Start: 00280000
Size: 00020000
Hash: 47D1409AEFBCA5AEDF351DBC6B77C569

Packet Size: 29
FNC: 05
...: 0007D5E8
Start: 002A0000
Size: 00020000
Hash: 6C4A47FC19A93A4730FA309D526E5710

Packet Size: 29
FNC: 05
...: 0007D604
Start: 002C0000
Size: 00020000
Hash: D63FEB47131AB2DA0F482C8358010A58

Packet Size: 29
FNC: 05
...: 0007D615
Start: 002E0000
Size: 00020000
Hash: BE3359E393CF9B1746E8631BECA68280

Packet Size: 29
FNC: 05
...: 0007D62A
Start: 00300000
Size: 00020000
Hash: E0D16EFA3B4A0B840FA4F11B8DE5911B

Packet Size: 29
FNC: 05
...: 0007D63F
Start: 00320000
Size: 00020000
Hash: F6F5DAE52F1E8B8ADB009D473CF9DDF8

Packet Size: 29
FNC: 05
...: 0007D660
Start: 00340000
Size: 00020000
Hash: 28D25073154A15B313108CCC308B9D9A

Packet Size: 29
FNC: 05
...: 0007D683
Start: 00360000
Size: 00020000
Hash: 6939DEDD2DE073575424C04FAE84FAD0

Packet Size: 29
FNC: 05
...: 0007D6A2
Start: 00380000
Size: 00020000
Hash: F95BE05CE0231576FD73EF8FC58A3026

Packet Size: 29
FNC: 05
...: 0007D6C3
Start: 003A0000
Size: 00020000
Hash: EE25DB233D8CC9976C213C1374E30FEF

Packet Size: 29
FNC: 05
...: 0007D6DE
Start: 003C0000
Size: 00020000
Hash: 08003A275B89034476B2F6FD57027FDD

Packet Size: 29
FNC: 05
...: 0007D6F9
Start: 003E0000
Size: 00020000
Hash: 594EF402CF01623E6C754134F1279E4F

Packet Size: 29
FNC: 05
...: 0007D714
Start: 00400000
Size: 00020000
Hash: CC5F7289139A48311F3BA5A42409C98B

Packet Size: 29
FNC: 05
...: 0007D730
Start: 00420000
Size: 00020000
Hash: 210007DD1713B9CD2C7EF38F97D2E13A

Packet Size: 29
FNC: 05
...: 0007D74A
Start: 00440000
Size: 00020000
Hash: EF839E07E347DB01ECDBB84CEC88F244

Packet Size: 29
FNC: 05
...: 0007D760
Start: 00460000
Size: 00020000
Hash: FC54C1C2C00DA5C64EE45287EDE8A160

Packet Size: 29
FNC: 05
...: 0007D774
Start: 00480000
Size: 00020000
Hash: 2A61FF59462526837E548DF7B0CC084D

Packet Size: 29
FNC: 05
...: 0007D789
Start: 004A0000
Size: 00020000
Hash: 2EA76F8B294F7AE0586F2C3750ED4B56

Packet Size: 29
FNC: 05
...: 0007D79E
Start: 004C0000
Size: 00020000
Hash: BA4BE0FCE923DD5FC16404958E73B178

Packet Size: 29
FNC: 05
...: 0007D7AC
Start: 004E0000
Size: 00020000
Hash: 623FC48F7B7183D5CFEB7A725F90E45C

Packet Size: 29
FNC: 05
...: 0007D7C0
Start: 00500000
Size: 00020000
Hash: 74A2320EDA2EEAA2B5BBC762E6807F10

Packet Size: 29
FNC: 05
...: 0007D7E3
Start: 00520000
Size: 00020000
Hash: DCF9F27905237A37CF8BDA0C2584D8BB

Packet Size: 29
FNC: 05
...: 0007D807
Start: 00540000
Size: 00020000
Hash: 603C7026BFC9156487ACEDC0164EDF65

Packet Size: 29
FNC: 05
...: 0007D82B
Start: 00560000
Size: 00020000
Hash: EDDC9CCE6D834587E1D67F92EBD5A4C6

Packet Size: 29
FNC: 05
...: 0007D84A
Start: 00580000
Size: 00020000
Hash: 324FE400E0826E8557A2E89D24352415

Packet Size: 29
FNC: 05
...: 0007D86B
Start: 005A0000
Size: 00020000
Hash: 1B8397E98E507B783DBCCBD29356CC19

Packet Size: 29
FNC: 05
...: 0007D890
Start: 005C0000
Size: 00020000
Hash: 20B7C20E85D28F721CAA6766E781D7EA

Packet Size: 29
FNC: 05
...: 0007D8AA
Start: 005E0000
Size: 00020000
Hash: 764F6DB71344CBB4BF7975C0A4D9AD04

Packet Size: 29
FNC: 05
...: 0007D8C8
Start: 00600000
Size: 00020000
Hash: 5FCC7B97509ECBB98699F8AA95457B7B

Packet Size: 29
FNC: 05
...: 0007D8E3
Start: 00620000
Size: 00020000
Hash: 8B509345655EAF96C6BE7285056DC3CA

Packet Size: 29
FNC: 05
...: 0007D8F8
Start: 00640000
Size: 00020000
Hash: 5F94A13D0662C86D527D36BAB440FCCB

Packet Size: 29
FNC: 05
...: 0007D915
Start: 00660000
Size: 00020000
Hash: C49871085F85FF615771C4A61AA0C846

Packet Size: 29
FNC: 05
...: 0007D931
Start: 00680000
Size: 00014FD4
Hash: F8383723EDE3023DEDD8BC730F27D5B8

Packet Size: 29
FNC: 05
...: 0007D945
Start: 00710640
Size: 00000264
Hash: 50F26865F390F350B10317270C0CB7F4
                      How were you able to to find it?

                      Comment

                      • #12
                        I ran a stack trace on a function that handles packets being received. Followed it all the way back to the function that receives the actual encrypted packet. Dumped register values and the packet contents at various points inside that function to map it out. Then logged all the packet headers it receives during log in (since the intense lag moment was a well known full scan it always detects anything when it lagged upon login). Everything became self explanatory when the header was showing literally the same function index to be called a whole lot during the lag period.

                        Comment

                        • #13
                          Originally posted by Gtlcpimp View Post
                          I ran a stack trace on a function that handles packets being received. Followed it all the way back to the function that receives the actual encrypted packet. Dumped register values and the packet contents at various points inside that function to map it out. Then logged all the packet headers it receives during log in (since the intense lag moment was a well known full scan it always detects anything when it lagged upon login). Everything became self explanatory when the header was showing literally the same function index to be called a whole lot during the lag period.
                          Glad too see my under study doing big things (wink) (wink) haha :P glad too see everyone around

                          Comment

                          Previous template Next
                          Working...
                          X