Jump to content
  • 0
Judas

2013 Ragexe Area

Question

525 answers to this question

Recommended Posts

  • 0

is this possible with the old style diffing(remember k3dt diff patch tool)? so that newbies and lazies like me won't do the manual search and replace..

 

:meow:

Share this post


Link to post
Share on other sites
  • 0

Can't find this. I'm trying to manually apply all hex string using nohs ragexe given by k3..

 

 

Patch: Disable Ragexe Filename Check
findhex:    3D 5C CD BA 00 75 32
replacehex: 3D 5C CD BA 00 EB 32
 
 
because with this strings..
 

 

Patch: Disable HShield IV
findhex:    3D 5C CD BA 00 75 32 E8 FB DE FF FF 84 C0
replacehex: 3D 5C CD BA 00 EB 32 E8 FB DE FF FF 84 C0
 
 
The disable ragexe filename check is present. Correct me if I'm wrong. I'm doing a run for everything.
 
Also can't seem to find the hex string..
 

 

Patch: Disable rag1
findhex:    08 85 C0 75 5F 68
replacehex: 08 85 C0 EB 5F 68
Edited by mybitch

Share this post


Link to post
Share on other sites
  • 0

Yeah that's what I did using the client which k3 gave.

 

Just a question after patching restore login windows. Do I need the bat file?

Edited by mybitch

Share this post


Link to post
Share on other sites
  • 0

First hex (Pretty hard to find... Not all the exe has been uncrypt... so....)

Find :68 DC 99 92 00 B9 0C E9 BA 00 88 15 E2 8A C0 00 E8 A9 48 D8 FFToE8 75 7A 16 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90Not sure:E8 ?? ?? ?? 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90It's a CALL 00?????? // crypted // I think it's 009D605C but not sure

 

I can't find the following... it's not uncryted sry for that.

I can't find anything related to rdata.grf. That mean it's not use by ragexe.exe ? (just by the old ragexeRe.exe) ?

If yes maybe there is just one more patch to search and not 2.

Any other diff to try ?

 

// I'm going to look patch by patch if the hex replace are working and who is the hex who make the client crash on exit.

Edited by Shakto

Share this post


Link to post
Share on other sites
  • 0

First hex (Pretty hard to find... Not all the exe has been uncrypt... so....)

Find :68 DC 99 92 00 B9 0C E9 BA 00 88 15 E2 8A C0 00 E8 A9 48 D8 FFToE8 75 7A 16 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90Not sure:E8 ?? ?? ?? 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90It's a CALL 00?????? // crypted // I think it's 009D605C but not sure

 

I can't find the following... it's not uncryted sry for that.

I can't find anything related to rdata.grf. That mean it's not use by ragexe.exe ? (just by the old ragexeRe.exe) ?

If yes maybe there is just one more patch to search and not 2.

Any other diff to try ?

 

// I'm going to look patch by patch if the hex replace are working and who is the hex who make the client crash on exit.

 

My client crashes after inputting the login credentials. Applied all diffs.

Edited by mybitch

Share this post


Link to post
Share on other sites
  • 0

Yeah it's the crash i was talking about, I"m testing where diff is wrong

Edited by Shakto

Share this post


Link to post
Share on other sites
  • 0

Judas, you miss some hex editing for hshield no ?

Search :8C D0 9D 00 DC 38 4E 00 00 00 00 00 00 00 00 00 00 00 00 00 F4 D0 9D 00 F0 38 4E 00 00 00 00 00 00 00 00 00 00 00 00 00 7E D1 9D 00 10 39 4E 00 00 00 00 00 00 00 00 00 00 00 00 00 A0 D1 9D 00 1C 39 4E 00 00 00 00 00 00 00 00 00 00 00 00 00 F0 D6 9D 00 D8 39 4E 00 00 00 00 00 00 00 00 00 00 00 00 00 24 D7 9D 00 EC 39 4E 00 00 00 00 00 00 00 00 00 00 00 00 00 0C DC 9D 00 AC 3A 4ETo:F4 D0 9D 00 F0 38 4E 00 00 00 00 00 00 00 00 00 00 00 00 00 7E D1 9D 00 10 39 4E 00 00 00 00 00 00 00 00 00 00 00 00 00 A0 D1 9D 00 1C 39 4E 00 00 00 00 00 00 00 00 00 00 00 00 00 F0 D6 9D 00 D8 39 4E 00 00 00 00 00 00 00 00 00 00 00 00 00 24 D7 9D 00 EC 39 4E 00 00 00 00 00 00 00 00 00 00 00 00 00 0C DC 9D 00 AC 3A 4E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00-------------Search :61 6F 73 73 64 6B 2E 64 6C 6C 00 00 0B 00 41 6F 73 73 64 6B 5F 53 74 61 72 74 41 6F 73 53 44 4B 41 00 06 00 41 6F 73 73 64 6B 5F 53 65 74 41 75 74 68 53 65 72 76 65 72 41 00 04 00 41 6F 73 73 64 6B 5F 47 65 74 4D 6B 64 53 34 4F 62 6A 65 63 74 00 0F 00 41 6F 73 73 64 6B 5F 54 65 72 6D 69 6E 61 74 65 50 64 41 To :00 00 00 00 00 00 00 00 00 00 00 00 0B 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 

Share this post


Link to post
Share on other sites
  • 0

 

Read data folder first 

Find :80 3D 08 E9 BA 00 00 53 8BTo :90 A1 08 E9 BA 00 40 53 8B

 

I tested it it works fine, you can add this Judas if you want to :)

Share this post


Link to post
Share on other sites
  • 0

Edit :

It seems that there is no need anymore lua before lub reading.

My patch for read data folder first show me an error on one lua file. So maybe it already reads them ?

 

Edit2 : For now i applied the patch without crash when enter login/pass

Patch: Restore Login Window

Patch: Restore Login Window 2

Patch: Read Data Folder First

Patch: Skip Packet Obfuscation

Patch: Disable rag1

Patch: Disable Ragexe Filename Check

 

Edit3 : There is a conflict with the hshield hack ^^

 

Edit4: I saw that there is no need to hex edit the patch 1,2,3 for hshield to disable it °°

Edited by Shakto

Share this post


Link to post
Share on other sites
  • 0

Edit :

It seems that there is no need anymore lua before lub reading.

My patch for read data folder first show me an error on one lua file. So maybe it already reads them ?

 

Edit2 : For now i applied the patch without crash when enter login/pass

Patch: Restore Login Window

Patch: Restore Login Window 2

Patch: Read Data Folder First

Patch: Skip Packet Obfuscation

Patch: Disable rag1

 

Edit3 : There is a conflict with the hshield hack ^^

 

Edit4: I saw that there is no need to hex edit the patch 1,2,3 for hshield to disable it °°

 

With this.. Only Disable Hackshield IV and V must be patched?

Share this post


Link to post
Share on other sites
  • 0

I'm still testing, i'll give you what to patch when i'll finish that

 

Thanks. I've downloaded an unpacked version of 2013-03-20 w/o any diffs. Hehe!

 

Note: I've also tested what you have did. It works just fine and now trying to download hackshield. lol.

Edited by mybitch

Share this post


Link to post
Share on other sites
  • 0

Ok i found my own 1st hshield patch - It looks like the 2nd patch - But with that, i'm sure my own is ok

Find :83 3D BC F1 BA 00 00 74 04 33 C0To :31 C0 40 90 90 90 90 90 90 90 90

Edit : Ok the Patch hShield 5 finish the hack but it makes crash the client, i'll looking for it ^^

 

I made my own diff for that too but still crashing. Humm i'll try to contact k3dt to see that with him

Edited by Shakto

Share this post


Link to post
Share on other sites
  • 0

FOUND IT TOO (Judas delete all the previous patch for hshield that you wrote, there is just 2 patch for it)

2nd patch 

Find8B F1 E8 A8 FE FF FF 84 C0 74 16 8B CETo90 90 90 90 90 90 90 90 90 90 90 90 90

I just have now to find my own patch to bypass the research for the dll but it don't load anymore hshield with my patch :D

Edited by Shakto

Share this post


Link to post
Share on other sites
  • 0

Yes for now, i need one more patch if i can find it.

You can replace for now the hShield patch 2 by #146 

Share this post


Link to post
Share on other sites
  • 0

Break for today !

I've some trouble with the 5th patch. I've to find something to seperate the good function that i want with the bad that i want to delete ^^

Edited by Shakto

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Answer this question...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.