Some basic offsets to let you play offline menu

User Tag List

Page 2 of 6 FirstFirst 123456 LastLast
Results 16 to 30 of 86
  1. #16
    ZLOFENIX's Avatar Member
    Reputation
    2
    Join Date
    Nov 2019
    Posts
    4
    Thanks G/R
    1/1
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by Kladdkakan View Post
    Feel free to share anything you find with the rest of the community, as I doubt Blizzard will care about improving their tech alpha demos security at this point.
    Its not only this game, same protection in scr, w3r, overwatch, wow, d3..

    These ads disappear when you log in.

  2. #17
    king48488's Avatar ★ Elder ★


    Reputation
    1389
    Join Date
    Nov 2008
    Posts
    825
    Thanks G/R
    34/430
    Trade Feedback
    0 (0%)
    Mentioned
    6 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by ZLOFENIX View Post
    Its not only this game, same protection in scr, w3r, overwatch, wow, d3..
    almost the same but not exactly!

  3. #18
    king48488's Avatar ★ Elder ★


    Reputation
    1389
    Join Date
    Nov 2008
    Posts
    825
    Thanks G/R
    34/430
    Trade Feedback
    0 (0%)
    Mentioned
    6 Post(s)
    Tagged
    0 Thread(s)
    Just to clarify some stuff: It is NOT my problem if you are not able to apply these patches or others yourself. You won't get any help from me for that, there are other resources related to OW/Wow/... that help you to do that. Insulting me on discord or writing random stupid stuff just because you want the whole arm after getting the hand from me won't help you either.

  4. #19
    MrNoble's Avatar ezclap CoreCoins Purchaser
    Reputation
    526
    Join Date
    Sep 2015
    Posts
    347
    Thanks G/R
    163/216
    Trade Feedback
    2 (100%)
    Mentioned
    6 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by Xcesiuss View Post
    Can confirm that crc32 bypass works for diablo, seems to be missing a few new offsets for it to work though.

    crcCaveRegInstructOffsets
    That crcCaveRegInstructOffsets offset is unrelated to the game lol.

    I will not help you guys patch your Diablo clients, but let me at least explain how my crc32 patcher works.
    The crcCaveRegInstructOffsets is used in the crcCave buffer as seen below:



    Which, results in the following disassembly:



    The above code cave is responsible for swapping the wow.exe address with that of a fake_wow.exe address, the fake_wow.exe acts as a copy of the original (unmodified) executable.
    The trick here is that the crc32 hook will check which address the crc32 is scanning and the redirect scans from wow.exe to wow.exe+(.text size) to fake_wow.exe to fake_wow.exe+(.text size).
    Finally, this will result in a valid crc32 check because the fake_wow.exe module was used instead of the (possible modified/patches) wow.exe module.

    Pro Tip (for the skids): if you fail to find those patch locations using Cheat Engine, go setting->Scan Settings and check the 'MEM_MAPPED' checkbox because the game is remapped and CE won't scan those sections by default.
    Any fool can write code that a computer can understand. good programmers write code that humans can understand.

  5. Thanks Xcesiuss, shelloux, dclone, ex0d (4 members gave Thanks to MrNoble for this useful post)
  6. #20
    shelloux's Avatar Member
    Reputation
    2
    Join Date
    May 2018
    Posts
    3
    Thanks G/R
    2/1
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by ferib View Post
    That crcCaveRegInstructOffsets offset is unrelated to the game lol.

    I will not help you guys patch your Diablo clients, but let me at least explain how my crc32 patcher works.
    The crcCaveRegInstructOffsets is used in the crcCave buffer as seen below:



    Which, results in the following disassembly:



    The above code cave is responsible for swapping the wow.exe address with that of a fake_wow.exe address, the fake_wow.exe acts as a copy of the original (unmodified) executable.
    The trick here is that the crc32 hook will check which address the crc32 is scanning and the redirect scans from wow.exe to wow.exe+(.text size) to fake_wow.exe to fake_wow.exe+(.text size).
    Finally, this will result in a valid crc32 check because the fake_wow.exe module was used instead of the (possible modified/patches) wow.exe module.

    Pro Tip (for the skids): if you fail to find those patch locations using Cheat Engine, go setting->Scan Settings and check the 'MEM_MAPPED' checkbox because the game is remapped and CE won't scan those sections by default.
    Maybe y can help patch D2R client for money? Just say your price. Because i give up

  7. #21
    dclone's Avatar Member
    Reputation
    1
    Join Date
    Apr 2021
    Posts
    11
    Thanks G/R
    1/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Thanks for explaining (again) and for your initial blogpost and sharing your method!

    I have my loader cleanly remap D2R (no crashes without applying patches) but as soon as I use my C++ port of your method the game will crash after random 10-60 seconds. I suppose that the crc bypasses are not working correctly for me.

    So would you assume that to be a bug in my C++ port of your code or are there things on D2R where your method needs to be adjusted for a new game?

    Thanks

  8. #22
    ex0d's Avatar Member
    Reputation
    2
    Join Date
    Apr 2021
    Posts
    7
    Thanks G/R
    5/1
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Thanks @ferib.

    Your solution enables memory write access (and seems to be bypassing CRCs based on the output) but unfortunately the game process crashes straight away on 'NtResumeProcess(hProcess);'. I can see memory changes to write while the process is still suspended and I see the offsets @king48488 mentioned. Changing them doesn't change the outcome though and the process still crashes immediately on NtResumeProcess.

    Edit: I forgot to add that even with CRC check section commented out it still crashes on Resume. It doesn't seem to like NtUnmapViewOfSection/ NtMapViewOfSection.
    Last edited by ex0d; 04-12-2021 at 10:54 AM.

  9. #23
    R3peat's Avatar Site Donator while(true) CoreCoins Purchaser
    Reputation
    189
    Join Date
    Aug 2012
    Posts
    410
    Thanks G/R
    0/131
    Trade Feedback
    27 (100%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    anybody be so kind to tell me where to get d2r alpha client files?
    pm appreciated if you dont wanna talk about this in a pub post

  10. #24
    malloc84's Avatar Member
    Reputation
    7
    Join Date
    Mar 2012
    Posts
    57
    Thanks G/R
    8/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Thank your for the help @king48488 and @ferib.

  11. #25
    0x7C's Avatar Member
    Reputation
    1
    Join Date
    Apr 2021
    Posts
    1
    Thanks G/R
    1/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by R3peat View Post
    anybody be so kind to tell me where to get d2r alpha client files?
    pm appreciated if you dont wanna talk about this in a pub post
    Release v1.3 . barncastle/Battle.Net-Installer . GitHub

    BNetInstaller.exe --prod osib --lang enus --dir "C:\D2R"

  12. #26
    ex0d's Avatar Member
    Reputation
    2
    Join Date
    Apr 2021
    Posts
    7
    Thanks G/R
    5/1
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by R3peat View Post
    anybody be so kind to tell me where to get d2r alpha client files?
    pm appreciated if you dont wanna talk about this in a pub post
    You can use this: GitHub - barncastle/Battle.Net-Installer: A command line tool for installing Blizzard games through Battle.Net.
    .\BNetInstaller.exe --prod osib --uid osi_beta --lang enus --dir "D:\Games\D2R"

    Edit: oops, before I wrote it 0x7C posted his reply already

  13. #27
    R3peat's Avatar Site Donator while(true) CoreCoins Purchaser
    Reputation
    189
    Join Date
    Aug 2012
    Posts
    410
    Thanks G/R
    0/131
    Trade Feedback
    27 (100%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    ok thx

  14. #28
    dclone's Avatar Member
    Reputation
    1
    Join Date
    Apr 2021
    Posts
    11
    Thanks G/R
    1/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by dclone View Post
    Thanks for explaining (again) and for your initial blogpost and sharing your method!

    I have my loader cleanly remap D2R (no crashes without applying patches) but as soon as I use my C++ port of your method the game will crash after random 10-60 seconds. I suppose that the crc bypasses are not working correctly for me.

    So would you assume that to be a bug in my C++ port of your code or are there things on D2R where your method needs to be adjusted for a new game?

    Thanks
    Turns out my remapping still is detected somehow - after a random amount of time in the multiple minutes the game crashes even without applying any patches whatsoever.

  15. #29
    ZeltMarv's Avatar Member
    Reputation
    1
    Join Date
    Apr 2021
    Posts
    5
    Thanks G/R
    4/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    I've been trying all day to figure out how to bypass the CRC checks. No luck so far.
    I tried interpreting ferib's guide and, while I more or less get what's going on, I can't make it work.
    The patching on memory part is easy, what's hard is bypassing the CRC check.

    I'll report back if I make any progress. x_x

  16. #30
    dclone's Avatar Member
    Reputation
    1
    Join Date
    Apr 2021
    Posts
    11
    Thanks G/R
    1/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by ZeltMarv View Post
    I've been trying all day to figure out how to bypass the CRC checks. No luck so far.
    I tried interpreting ferib's guide and, while I more or less get what's going on, I can't make it work.
    The patching on memory part is easy, what's hard is bypassing the CRC check.

    I'll report back if I make any progress. x_x
    Are you sure that you don't have crashes with remapping only? I thought so too but it crashes after a random time of several minutes.

Page 2 of 6 FirstFirst 123456 LastLast

Similar Threads

  1. [Selling] 6 x 55 Archeage Account with lots of properties to let you earn 1k gold
    By fatihbarut in forum ArcheAge Buy Sell Trade
    Replies: 0
    Last Post: 04-02-2016, 06:35 AM
  2. [Selling] RBG Boosting to 2200 / 2400/ 2600! For Gold and IRL money. You play your character!
    By Rbgboosters in forum World of Warcraft Buy Sell Trade
    Replies: 1
    Last Post: 06-11-2012, 07:29 PM
  3. Any hacks out with the feature to let you chat with opposite faction?
    By NeBz in forum WoW Bots Questions & Requests
    Replies: 0
    Last Post: 06-23-2011, 08:36 AM
  4. Some hacks brought to you by ISXAOC
    By Pickled in forum Age of Conan Exploits|Hacks
    Replies: 15
    Last Post: 10-04-2008, 09:02 AM
  5. just to let you guys know....
    By Manky in forum World of Warcraft General
    Replies: 9
    Last Post: 09-24-2008, 02:04 PM
All times are GMT -5. The time now is 03:25 PM. Powered by vBulletin® Version 4.2.3
Copyright © 2021 vBulletin Solutions, Inc. All rights reserved. User Alert System provided by Advanced User Tagging (Pro) - vBulletin Mods & Addons Copyright © 2021 DragonByte Technologies Ltd.
Digital Point modules: Sphinx-based search