| View previous topic :: View next topic |
| Author |
Message |
blackmorpheus
Expert Cheater
![]() Reputation: 0
Joined: 05 Apr 2008
Posts: 159
|
 Posted: Sun Mar 22, 2009 1:58 pm Post subject: Giving Parameter |
 |
|
I'm trying to run PristonTale2.exe NOT using the loader.
But it will give an error because it must be loaded using the loader.
THe pt2loader.exe open pt2.exe and gives certain parameters to open PT2.exe using ShellExecuteA.
I've debugged with Olly and found the parameters.
BUt now I have 2 problems:
The parameters seem to be encrypted, but also change everytime i start another instance of pt2loader..
An example of the parameter is this:
| Code: | 0012F3A8 70 1E 12 13 13 18 1E 09 p .
0012F3B0 60 7F 64 6E 73 64 6D 73 `dnsdms
0012F3B8 6F 6D 73 6C 64 6B 67 6A omsldkgj
0012F3C0 6E 6D 6D 7F 7D 70 11 18 nmm}p
0012F3C8 7D 70 0E 18 18 19 60 18 }p`
0012F3D0 18 6A 1E 6B 1F 6F 6D 69 j k omi
0012F3D8 68 6C 6F 64 18 6E 6F 6F hlodnoo
0012F3E0 6B 6B 69 6E 6E 64 6E 1C kkinndn
0012F3E8 6D 1B 6D 1F 19 18 69 mm i |
As you can see the parameters are stored in 0012F3A8.
See the picture.
Second question: How can I give the parameters to the program?
I normally used an injector that gave the parameters,
or i made a shortcut and added them. BUt these aren't normal ASCII letters.
Also, this game is protected by GameGuard.
I have already made a succesful bot for this game, but i want to fully remove GameGuard  |
|
| Back to top |
|
 |
rapion124
Grandmaster Cheater Supreme
![]() Reputation: 0
Joined: 25 Mar 2007
Posts: 1095
|
| Posted: Sun Mar 22, 2009 4:27 pm Post subject: |
|
|
| Find the encryption function or the plaintext string. Maybe there's a parameter there that tells the game to run GameGuard or not. If the loader starts GameGuard, then just patch that. |
|
| Back to top |
|
|
dnsi0
I post too much
![]() Reputation: 0
Joined: 04 Jan 2007
Posts: 2674
|
| Posted: Sun Mar 22, 2009 4:54 pm Post subject: |
|
|
| Eh... Patch CreateProcessA? |
|
| Back to top |
|
|
blackmorpheus
Expert Cheater
![]() Reputation: 0
Joined: 05 Apr 2008
Posts: 159
|
| Posted: Sun Mar 22, 2009 5:03 pm Post subject: |
|
|
| rapion124 wrote: | | Find the encryption function or the plaintext string. Maybe there's a parameter there that tells the game to run GameGuard or not. If the loader starts GameGuard, then just patch that. |
Loader doesn't load GameGuard, unfortunately 
THe game itself (PT2.exe) does.
What do you mean by patch CreateProcessA?
When i dont insert the right parameters, my game will just not start. It needs to have the parameters for server ip etc. |
|
| Back to top |
|
|
BanMe
Master Cheater
![]() Reputation: 0
Joined: 29 Nov 2005
Posts: 375
Location: Farmington NH, USA
|
| Posted: Sun Mar 22, 2009 5:26 pm Post subject: |
|
|
get the string from RTL_USER_PROCESS_PARAMETERS block during runtime (NT/XP)o0 or hook strlen :/
_________________
don't +rep me..i do not wish to have "status" or "recognition" from you or anyone.. thank you. |
|
| Back to top |
|
|
dnsi0
I post too much
![]() Reputation: 0
Joined: 04 Jan 2007
Posts: 2674
|
| Posted: Sun Mar 22, 2009 5:44 pm Post subject: |
|
|
Hmm... I got an idea. This is what I used to get the launch parameter from latale:
1. Download ProcExp from sysinternals
2. Run it O.o
3. Start the game
4. Find the process in ProcExp and click properties and it should have this thing that says Command Line. |
|
| Back to top |
|
|
sponge
I'm a spammer
 Reputation: 1
Joined: 07 Nov 2006
Posts: 6009
|
| Posted: Sun Mar 22, 2009 7:05 pm Post subject: |
|
|
CreateProcess()
lpCommandLine should contain your file's path and the encrypted string.
Also, to solve your little encryption problem, set a breakpoint on write for 00443785.
_________________
|
|
| Back to top |
|
|
blackmorpheus
Expert Cheater
![]() Reputation: 0
Joined: 05 Apr 2008
Posts: 159
|
| Posted: Mon Mar 23, 2009 4:18 am Post subject: |
|
|
| dnsi0 wrote: | Hmm... I got an idea. This is what I used to get the launch parameter from latale:
1. Download ProcExp from sysinternals
2. Run it O.o
3. Start the game
4. Find the process in ProcExp and click properties and it should have this thing that says Command Line. |
GameGuard insta-hides PT2.exe when it's loaded. So i can't find the process with ProcExp.
ALso, i have given the program those weird parameters, and a MessageBox popped up and said: U must be one of the PT2 programmers. lol!
I have seen the decrypted parameter and it should be like this:
-CONNECs="93.90.20.196:7300" -LE -SEED=1FD5F06B4B8C48019D5B5EB00B3FDC3F
But how they get the seed? i have no clue. |
|
| Back to top |
|
|
brasco
How do I cheat?
![]() Reputation: 0
Joined: 24 Mar 2013
Posts: 1
|
| Posted: Sun Mar 24, 2013 4:50 am Post subject: TO BLACKMORPHEUS |
|
|
Can you please contact me, I cannot PM myself! I need your help, can you PM me or send an email: tonyb0102(at)yahoo(dot)com
thank you
TB |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
