[Question] LUA protection disabler for 4.0.6a menu

User Tag List

Page 1 of 2 12 LastLast
Results 1 to 15 of 19
  1. #1
    vabatta's Avatar Member
    Reputation
    5
    Join Date
    May 2008
    Posts
    31
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    [Question] LUA protection disabler for 4.0.6a

    Hi all,
    I would ask if is possible to "re-create" another Lua Ninja updated for 4.0.6a.
    My purpose is to use protected macro in wow (for example in BG).

    Thanks for help !

    [Question] LUA protection disabler for 4.0.6a
  2. #2
    IceFire32's Avatar Active Member
    Reputation
    47
    Join Date
    Feb 2009
    Posts
    33
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    http://dl.dropbox.com/u/9764890/Aufzeichnen.JPG

    That's my method, patching the switchtable-entry at 0x42C798 (Base: 0x1000).

    Write 1, 2 or 3 to enable protected lua (was too lazy to look where's the difference between 'em) or 0 to disable it.

    There are some commands like TargetUnit which seem to have a second protection, but I was too lazy to find out how they are protected cuz I have no use for protected lua

  3. #3
    Cypher's Avatar Kynox's Sister's Pimp
    Reputation
    1356
    Join Date
    Apr 2006
    Posts
    5,368
    Thanks G/R
    0/4
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by IceFire32 View Post
    http://dl.dropbox.com/u/9764890/Aufzeichnen.JPG

    That's my method, patching the switchtable-entry at 0x42C798 (Base: 0x1000).

    Write 1, 2 or 3 to enable protected lua (was too lazy to look where's the difference between 'em) or 0 to disable it.

    There are some commands like TargetUnit which seem to have a second protection, but I was too lazy to find out how they are protected cuz I have no use for protected lua
    Not all Lua callbacks call the protection check function, some of them 'inline' the check and look whether the calling code is secure or not directly via the use of the same global variable used in the protection check func.

    Note: I know this is horribly vague, but I wrote LuaNinja a long time ago, and whilst I remember running into the same problem the OP had when in the 'research' phase, I forget all the implementation details. Sorry.

  4. #4
    amadmonk's Avatar Active Member
    Reputation
    124
    Join Date
    Apr 2008
    Posts
    772
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Isn't it just a flag in the Lua state object? IOW, can't you just monkey with the state object?

    Been a while since I looked at it (obviously).
    Don't believe everything you think.

  5. #5
    Cypher's Avatar Kynox's Sister's Pimp
    Reputation
    1356
    Join Date
    Apr 2006
    Posts
    5,368
    Thanks G/R
    0/4
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by amadmonk View Post
    Isn't it just a flag in the Lua state object? IOW, can't you just monkey with the state object?

    Been a while since I looked at it (obviously).
    Even if that were the case (I'm unsure if it is), how do you ensure that the flag stays set? Wouldn't it just be reset every time there's a transition to or from protected code?

    I guess a hook on FrameScript__Execute would work to ensure the flag was set?

  6. #6
    CrazyCactuaR's Avatar Contributor
    Reputation
    84
    Join Date
    Sep 2008
    Posts
    201
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by IceFire32 View Post
    http://dl.dropbox.com/u/9764890/Aufzeichnen.JPG

    That's my method, patching the switchtable-entry at 0x42C798 (Base: 0x1000).

    Write 1, 2 or 3 to enable protected lua (was too lazy to look where's the difference between 'em) or 0 to disable it.

    There are some commands like TargetUnit which seem to have a second protection, but I was too lazy to find out how they are protected cuz I have no use for protected lua

    Tried this and failed miserably, Would love to know how to go abouts learning how to disable this protection every patch etc, I miss running those /run commands

  7. #7
    wowsc4p3's Avatar Active Member
    Reputation
    59
    Join Date
    Nov 2007
    Posts
    380
    Thanks G/R
    0/2
    Trade Feedback
    2 (100%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    I posted a thread, you can find the pattern there for a hex editor. You change the bytes to 7

  8. #8
    hampe98's Avatar Member
    Reputation
    1
    Join Date
    Jul 2010
    Posts
    6
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    are any options out there that is free?

  9. #9
    LogicWin's Avatar Master Sergeant
    Reputation
    51
    Join Date
    Mar 2011
    Posts
    103
    Thanks G/R
    4/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by hampe98 View Post
    are any options out there that is free?
    Look one post above you...

  10. #10
    dzikuman's Avatar Private
    Reputation
    1
    Join Date
    Apr 2010
    Posts
    3
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Hi all,
    I would ask if is possible to disable Lua protection on 4.0.6a server.
    My purpose is same as "IceFire32". I would like to use protected macro in wow for example: /run CastSpellByName("Judgement")

    I've searched google all day, And only what I found about 4.0.6a patch is here. It should disable Lua protection. But it doesnt.

    I've changed these 0x42C798 offsets in Cheat Engine - doesnt any change. So I put these offset to Lua protection Remover 1.0, pick custom adress. And again, it doesnt work.

    so the question is: Does anybody knows, what's offsets working on 4.0.6a to disable Lua prot ?. Or have some links. Or if it's not only way to do this, then what should I do to disable protection Lua ? For Any help will be very grateful.

  11. #11
    Vandra's Avatar Contributor
    Reputation
    288
    Join Date
    Mar 2008
    Posts
    471
    Thanks G/R
    26/26
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by dzikuman View Post
    Hi all,
    I would ask if is possible to disable Lua protection on 4.0.6a server.
    My purpose is same as "IceFire32". I would like to use protected macro in wow for example: /run CastSpellByName("Judgement")

    I've searched google all day, And only what I found about 4.0.6a patch is here. It should disable Lua protection. But it doesnt.

    I've changed these 0x42C798 offsets in Cheat Engine - doesnt any change. So I put these offset to Lua protection Remover 1.0, pick custom adress. And again, it doesnt work.

    so the question is: Does anybody knows, what's offsets working on 4.0.6a to disable Lua prot ?. Or have some links. Or if it's not only way to do this, then what should I do to disable protection Lua ? For Any help will be very grateful.
    (Base: 0x1000) and you need to add wow.exe as baseadress

  12. #12
    dzikuman's Avatar Private
    Reputation
    1
    Join Date
    Apr 2010
    Posts
    3
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by Vandra View Post
    (Base: 0x1000) and you need to add wow.exe as baseadress
    I did same, like IceFire32 on screenshot. In CE: add adress manually - > adress: wow.exe + 42C798 - > ok. And vaule is on 0 always. Changing beetween 0, 1, 2, 3. Nothing changes.

    using while game is on, example macro: /run CastSpellByName("Judgement")
    And still, write " a macro script has been blocked from an action... "
    So any reasons ?

  13. #13
    Vandra's Avatar Contributor
    Reputation
    288
    Join Date
    Mar 2008
    Posts
    471
    Thanks G/R
    26/26
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by dzikuman View Post
    I did same, like IceFire32 on screenshot. In CE: add adress manually - > adress: wow.exe + 42C798 - > ok. And vaule is on 0 always. Changing beetween 0, 1, 2, 3. Nothing changes.

    using while game is on, example macro: /run CastSpellByName("Judgement")
    And still, write " a macro script has been blocked from an action... "
    So any reasons ?
    Try wow.exe+42C6F0 (can't test by myself, don't have 4.0.6)

  14. #14
    dzikuman's Avatar Private
    Reputation
    1
    Join Date
    Apr 2010
    Posts
    3
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by Vandra View Post
    Try wow.exe+42C6F0 (can't test by myself, don't have 4.0.6)
    Tried in Cheat Engine. Wow, this time is crashing, but always is the same value = 85. Changing it to 3 or 0= crash.

  15. #15
    _Mike's Avatar Contributor
    Reputation
    310
    Join Date
    Apr 2008
    Posts
    531
    Thanks G/R
    0/2
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by dzikuman View Post
    Tried in Cheat Engine. Wow, this time is crashing, but always is the same value = 85. Changing it to 3 or 0= crash.
    You have no idea what you're doing, do you?
    That address is code, not data. You can't go around randomly changing it to whatever you want.
    Examine the address in a disassembler and then figure out what to change it to.


    Originally Posted by Cypher View Post
    Even if that were the case (I'm unsure if it is), how do you ensure that the flag stays set? Wouldn't it just be reset every time there's a transition to or from protected code?

    I guess a hook on FrameScript__Execute would work to ensure the flag was set?
    I know this is an old reply, almost a year, but I thought I'd just fill in some more info.
    There is a global flag/value (not part of the lua state though), but it has 378 references out of which 128 are writes. I haven't checked how many of them are needed to be patched to unprotect every code path.
    I have tried doing a DR write trigger on it but depending on number of addons etc. it is potentially written to several thousand times per frame.
    I also haven't examined what it's different values actually means, but forcing it to 0 unprotects everything.

Page 1 of 2 12 LastLast

Similar Threads

  1. [Hack] Lua Protection Disabler For Private Servers (3.3.5a & 2.4.3)
    By Ramono in forum WoW EMU Programs
    Replies: 17
    Last Post: 11-03-2018, 06:47 PM
  2. [Tool] Lua protection disabler and injector
    By liberatedcheats in forum World of Warcraft Bots and Programs
    Replies: 0
    Last Post: 10-13-2012, 05:56 AM
  3. [Question] LUA memory editing, disable protection?
    By vabatta in forum WoW Memory Editing
    Replies: 9
    Last Post: 09-27-2011, 02:52 PM
  4. [Hack] Lua Protection Disabler For Private Servers (3.3.5a & 2.4.3)
    By Ramono in forum World of Warcraft Bots and Programs
    Replies: 0
    Last Post: 06-18-2011, 05:37 PM
  5. [WTB/Request] Lua Protection disabler
    By huhutheman in forum WoW Bots Questions & Requests
    Replies: 0
    Last Post: 05-07-2011, 11:44 AM
All times are GMT -5. The time now is 05:26 AM. Powered by vBulletin® Version 4.2.3
Copyright © 2024 vBulletin Solutions, Inc. All rights reserved. User Alert System provided by Advanced User Tagging (Pro) - vBulletin Mods & Addons Copyright © 2024 DragonByte Technologies Ltd.
Digital Point modules: Sphinx-based search