Finding Lua protection function using OllyDBG. (3.3.5a)

[Ramono]

Hello,

I've been active on a TBC private server for quite a while now. and after lots of searching and learning the first steps of reverse engineering I found the offset in 2.4.3 to enable lua protected functions in that version.

However I just joined a 3.3.5a server and i've been trying to do thesame for a few hours now. however I cant find it.
I've also been trying to compare the 2.4.3 and 3.3.5a lua calls and no luck finding it that either, alot of it isn't even similair.

I'm fairly new to Reverse engineering and OllyDBG in general, so far I managed to 'hack' a few cool things in a hl1 server, disabled some checks in WoW but all basic, mostly easy to find stuff(String searching :] )

So, could anyone steer me into the right direction?
Where should I look? What should I look for? General tips for finding offsets like these?
And how Warden-proof is it, as I noticed some of these private servers use some kind of warden scanning. (I dont care if i get banned testing, but I'd like to play with it obviously)


Thanks,
Ramon

[semk]

I have working Lua protected function unloker for 3.3.5a, tested on most popular priwate server.
I have .exe compilation and source code in .au3.
I dont autor of it.
I do not remember where I found it, can here, but it is unlikely.
If you want I can put it on file sharing.
Or do you basically need to do it myself?

Sorry for bad english if some phrases looks strange, it's bad translation.

[Ramono]

I havent coded for autoit before, But im sure I can find usefull information in it.
Could you share the source please?

Thanks,
-Ramon

[Ramono]

Got the adress..

Simple edit using OllyDBG:
@ 0x5191C0

mov eax, 1
ret

and it'll accept protected functions.

[semk]

Yes, this is it.

[Ramono]

http://www.mmowned.com/forums/world-...a-2-4-3-a.html