Posts: 313
Threads: 20
Thanks Received:
0 in 0 posts
Thanks Given: 0
Joined: Jul 2011
Reputation:
0
Suggestion for patching.
Use the function ReadProcessMemory, has same parameters as WriteProcessMemory.
If the client Unpacks correctly extract the byte from the Offset, and verify if it matches with the your data;
byte in;
ReadProcessMemory(PROC_HANDLE, offset, &in, sizeof(byte), null);
if(in == 0x75){
byte x=0xEB;
WriteProcessMemory(PROC_HANDLE, offset, &x, sizeof(byte), null);
Console.WriteLine("Done\n");
}
else{
Console.WriteLine("Wrong version or is Allready patched.\n");
}
Posts: 335
Threads: 22
Thanks Received:
0 in 0 posts
Thanks Given: 0
Joined: Aug 2011
Reputation:
0
Suggestion for patching.Use the function ReadProcessMemory, has same parameters as WriteProcessMemory.
If the client Unpacks correctly extract the byte from the Offset, and verify if it matches with the your data;
byte in;
ReadProcessMemory(PROC_HANDLE, offset, &in, sizeof(byte), null);
if(in == 0x75){
byte x=0xEB;
WriteProcessMemory(PROC_HANDLE, offset, &x, sizeof(byte), null);
Console.WriteLine("Done\n");
}
else{
Console.WriteLine("Wrong version or is Allready patched.\n");
}
thx, the byte in willl be always 0x75 ? i think for DES is another right?
and i will take the timing full out with just an pop up to patch yes/no
Posts: 313
Threads: 20
Thanks Received:
0 in 0 posts
Thanks Given: 0
Joined: Jul 2011
Reputation:
0
thx, the byte in willl be always 0x75 ? i think for DES is another right?and i will take the timing full out with just an pop up to patch yes/no
For DES will not change, (I think for XOR the same), but to be sure, put in the configuration another field called data, and compare the data from the memory.
The byte will change, over time, usually you can see that byte is when you look at the Offsets.
Posts: 768
Threads: 40
Thanks Received:
0 in 0 posts
Thanks Given: 0
Joined: May 2011
Reputation:
0
Sadly on 1548 it doesnt work anymore.
Probably the packer is more agressive now.
Posts: 335
Threads: 22
Thanks Received:
0 in 0 posts
Thanks Given: 0
Joined: Aug 2011
Reputation:
0
oO waht you done that this happened?
they have made no changes to the Engine.dll since version 1545 or 1546
Posts: 313
Threads: 20
Thanks Received:
0 in 0 posts
Thanks Given: 0
Joined: Jul 2011
Reputation:
0
Sadly on 1548 it doesnt work anymore. Probably the packer is more agressive now.
Still works, Just patched today.
Posts: 768
Threads: 40
Thanks Received:
0 in 0 posts
Thanks Given: 0
Joined: May 2011
Reputation:
0
haha i just did like u said.
copied the launcher.exe into the usa client, then start it. it asks to patch and i click yes.
and then that message pops up when i start the client