Hex to enable /nc in WoE

[PunkBuster]

This is a continuation of the question I brought posted here.

I am running a server in PK mode. I want guild emblems to show hovering over players in all PK maps. It turned out that this behavior was governed by the ragexe, not the src. Modifying the packets I was able to fool the game into thinking PK maps were GvG maps, and thus it displayed the emblems like intended. However, it also started hiding WoE damage and enforcing /nc off.

Making damage visible was easy because this was a known hex edit. The /nc issue is more difficult, I couldn't find anything about hexing/diffing a client to not have to hold down the Mouse1 button to continuously attack in WoE. Has anybody ever done this?

 

[Ai4rei]

I was bored, so here you go @PunkBuster:

// long jmp
F:85C00F85????00006A11
R:85C00F85000000006A11

// short jmp
F:85C075??6A11
R:85C075006A11

Any combination of these two patches should yield total of 4 hits. You did not state a client version, so these are only tested up to 2012.

 

[Ai4rei]

As per private request, patches for 2015-09-16aRagexe (unpacked):

// long jmp (1)
F:85C00F85????FFFF6A11
R:85C00F85000000006A11

// short jmp (3)
F:85C075??6A11
R:85C075006A11

Which is basically the same, as above, except that the long jmp is negative. For wild-card impaired hex-editors the patches are:

F:85C0752F6A11
R:85C075006A11

F:85C075396A11
R:85C075006A11

F:85C00F8528FEFFFF6A11
R:85C00F85000000006A11

F:85C0752F6A11
R:85C075006A11

The key sequence for this patch is:

CALL <150916A.CSession::IsSiegeMode>
TEST EAX,EAX
JNZ <150916A.+??>
PUSH 11 ; /Key = VK_CONTROL
CALL NEAR EBX ; \GetAsyncKeyState


Where the call to GetAsyncKeyState may take various forms.