Author | Message | Time |
---|---|---|
rob | [code] Using Lockdown f:\lockdown-IX86-01.dll Server Seed: 46E0F1D21B0558DD63FDD7745BAE5AC4 Versioning File c:\program files\starcraft\starcraft.exe... Version: 10E0001 Shuffling server seed... Shuffled Seed: 22976777C0F32267DAAC24F0588A36B8 Initializing SHA... Hashing Lockdown Library... Hashing File c:\program files\starcraft\starcraft.exe... Hashing File c:\program files\starcraft\storm.dll... Hashing File c:\program files\starcraft\battle.snp... Hashing Video Image c:\sexp.bin... Calculating Checksum... Checksum: 30FD5080 Calculating Digest... Digest: 495E6A5F8CFCE22ACAA76BD7F6E2F9C7 Press any key to continue . . . [/code] | May 13, 2007, 5:18 PM |
rob | [code] Using Lockdown f:\lockdown-IX86-01.dll Server Seed: BA442D0EED0E4AADD386AAB57B290B86 Versioning File C:\Program Files\Warcraft II BNE\Warcraft II BNE.exe... Version: 2000200 Shuffling server seed... Shuffled Seed: 2A70CA08F076CD9A7ABF98215541747D Initializing SHA... Hashing Lockdown Library... Hashing File C:\Program Files\Warcraft II BNE\Warcraft II BNE.exe... Hashing File C:\Program Files\Warcraft II BNE\storm.dll... Hashing File C:\Program Files\Warcraft II BNE\battle.snp... Hashing Video Image c:\w2bn.bin... Calculating Checksum... Checksum: 9C3C318 Calculating Digest... Digest: AF47833F045CEE03A75F38264E185239 Press any key to continue . . . [/code] | May 13, 2007, 5:24 PM |
warz | woohoo | May 13, 2007, 6:17 PM |
Newby | grats. | May 13, 2007, 6:43 PM |
Barabajagal | how big's the bin file? | May 13, 2007, 7:09 PM |
MyStiCaL | mmmm.. | May 13, 2007, 8:53 PM |
rob | [quote author=RεalityRipplε link=topic=16694.msg168982#msg168982 date=1179083397] how big's the bin file? [/quote] It uses right around 30k. My buffer is 30720 bytes. | May 14, 2007, 4:27 AM |
Barabajagal | Easily distributable with other hash files... not bad at all. Any editing of the lockdown dll files? | May 14, 2007, 4:57 AM |
rob | [quote author=RεalityRipplε link=topic=16694.msg169001#msg169001 date=1179118634] Any editing of the lockdown dll files? [/quote] No not at all. The lockdown dll is hashed along with the game files. | May 14, 2007, 6:21 AM |
HeRo | Looks good! | May 14, 2007, 3:08 PM |
inner. | Are you using warz's code? Rob? | May 14, 2007, 8:23 PM |
warz | [quote author=inner.de link=topic=16694.msg169015#msg169015 date=1179174210] Are you using warz's code? Rob? [/quote] No, the project has progressed, and actually uses, almost entirely, code native to lockdown. Most of the code in the calling application is there to aid the flow of checkrevision. | May 14, 2007, 8:38 PM |
Barabajagal | So it basically calls the CheckRevision function in lockdown in the same manner as of old, but this time it sends it the directx buffer bin file as well? | May 14, 2007, 8:42 PM |
warz | [quote author=RεalityRipplε link=topic=16694.msg169017#msg169017 date=1179175376] So it basically calls the CheckRevision function in lockdown in the same manner as of old, but this time it sends it the directx buffer bin file as well? [/quote] No, that's what the project that I made public back in December did - I even made the mem dump available, too. This one does not call checkrevision, but it does use code native to lockdown. | May 14, 2007, 8:47 PM |
Barabajagal | so it just emulates the checkrevision function with some minor edits... like where to get the hash data from? | May 14, 2007, 8:54 PM |
warz | [quote author=RεalityRipplε link=topic=16694.msg169019#msg169019 date=1179176088] so it just emulates the checkrevision function with some minor edits... like where to get the hash data from? [/quote] more or less. think about it though - checkrvision is a function, in which other functions are called. if you've looked at checkrevision in a disassembler you'll see that just about every important routine is performed in its own function. why would you call checkrevision knowing you'll have to modify things, when you can simply call the things that checkrevision calls? that's the general idea. | May 14, 2007, 8:58 PM |
Barabajagal | Except... if they change the function without changing what it calls, you're up shit creek again and you have to do it all over. If you can correctly just call checkrevision and give it what it needs, you're only up shit creek when they change what it needs. | May 14, 2007, 9:09 PM |
warz | [quote author=RεalityRipplε link=topic=16694.msg169021#msg169021 date=1179176941] Except... if they change the function without changing what it calls, you're up shit creek again and you have to do it all over. If you can correctly just call checkrevision and give it what it needs, you're only up shit creek when they change what it needs. [/quote] Wrong. If they change anything in the dll it'll switch up the addresses. If you directly call checkrevision, like my old example, you'll have to go back and re-patch other addresses. If it were as easy as you've made it sound, it would have been fixed the same day it was released. The purpose to the current solution we are using is to have an immediate fix, while we also have pointers to the important functions so that we can begin to convert them all to C++. Currently, some of them are already in their respective C++ form. | May 14, 2007, 9:15 PM |
warz | [img]http://rafm.org/files/pics/rad.png[/img] | May 18, 2007, 4:07 AM |
rob | [ 3:33:48 AM ] [BNET] Connecting... [ 3:33:48 AM ] [BNET] Connected! [ 3:33:49 AM ] [DEBUG] Lockdown DLL: lockdown-IX86-03.dll [ 3:33:49 AM ] [DEBUG] Server Seed: 40 3F AC 4B 5B 4B 55 FA B8 9F F5 AB 7E A4 2D 0B 00 [ 3:33:49 AM ] [DEBUG] Game Version: 2000200 [ 3:33:49 AM ] [DEBUG] Checksum: 4BCD9AAC [ 3:33:49 AM ] [DEBUG] Result: E8 D5 1E 1E 41 C9 97 8F C6 04 C3 2B 82 15 AF 09 [ 3:33:49 AM ] [BNET] Verifying Version and CDKey... [ 3:33:49 AM ] [BNET] Verify Passed! | May 29, 2007, 7:35 AM |
Spilled[DW] | Very nice work Rob. Congratz. | May 30, 2007, 3:34 AM |
inner. | His DLL works miracles. | June 2, 2007, 3:00 PM |
BreW | shhh vuther. What dll are you talking about ? Nobody has ever and never will reverse lockdown CheckRevision! It's way too advanced for us. Oh great blizzard, why have you plauged us bot developers! We're going to have to stick with CHECK REVISION DATABASE or bnls forever! | June 2, 2007, 8:16 PM |
MyStiCaL | skywing reversed it, aswell as did warz and now im assuming rob, im guessing the dll was released somewhere, probley not here someone might remove the topic for distributing such a thing, lockdown should be public for my opinion, loaders are already out, but as well i can understand the hard work put into sucha thing that you wouldn't wanna release it public, but i'll be here waiting, if its not a how to, a dll would work just fine to, so such bots like stealthbot, and ect can be updated. | June 2, 2007, 10:18 PM |
Barabajagal | ... he was pretending people haven't done it so blizzard won't change it...... | June 2, 2007, 10:57 PM |
BreW | blizzard reads these forums daily. | June 3, 2007, 12:31 AM |
rabbit | Someone else has reversed lockdown completely. | June 3, 2007, 12:40 AM |
warz | i think the fact of the matter is that lockdown is old news. been there, done that. what's next? | June 3, 2007, 12:48 AM |
Denial | Starcraft 2 alpha. | June 3, 2007, 12:58 AM |
Quarantine | [quote author=brew link=topic=16694.msg169632#msg169632 date=1180815391] shhh vuther. What dll are you talking about ? Nobody has ever and never will reverse lockdown CheckRevision! It's way too advanced for us. Oh great blizzard, why have you plauged us bot developers! We're going to have to stick with CHECK REVISION DATABASE or bnls forever! [/quote] Lol. | June 3, 2007, 1:06 AM |
iago | [quote author=rabbit link=topic=16694.msg169637#msg169637 date=1180831258] Someone else has reversed lockdown completely. [/quote] 8) | June 3, 2007, 1:19 AM |
UserLoser | herzog, skywing, iago. ::) | June 3, 2007, 3:58 AM |
rob | http://www.onlythechosen.com/CheckRevision.zip Have fun.. | June 3, 2007, 4:57 AM |
Barabajagal | O.o wow.. it's actually been publicly released now. | June 3, 2007, 6:12 AM |
Newby | Go warz/rob. 8). | June 3, 2007, 6:31 AM |
DDA-TriCk-E | Awesome, good job guys 8) | June 3, 2007, 7:38 AM |
BreW | [quote author=Rob link=topic=16694.msg169643#msg169643 date=1180846634] http://www.onlythechosen.com/CheckRevision.zip Have fun.. [/quote] It doesn't work at all | June 3, 2007, 7:07 PM |
Quarantine | [quote author=brew link=topic=16694.msg169663#msg169663 date=1180897650] [quote author=Rob link=topic=16694.msg169643#msg169643 date=1180846634] http://www.onlythechosen.com/CheckRevision.zip Have fun.. [/quote] It doesn't work at all [/quote] Problem lies between the Monitor and the Chair. | June 3, 2007, 11:16 PM |
l2k-Shadow | [quote author=brew link=topic=16694.msg169663#msg169663 date=1180897650] [quote author=Rob link=topic=16694.msg169643#msg169643 date=1180846634] http://www.onlythechosen.com/CheckRevision.zip Have fun.. [/quote] It doesn't work at all [/quote] [quote] [2:53:06 PM] [BNET] Connecting... [2:53:06 PM] [BNET] Connected! [2:53:06 PM] [BNFTP] Connecting... [2:53:06 PM] [BNFTP] Connected! [2:53:06 PM] [BNFTP] Successfully downloaded lockdown-IX86-05.mpq. [2:53:06 PM] [BNFTP] Successfully extracted lockdown-IX86-05.dll. [2:53:06 PM] Loading CheckRevision.dll [2:53:07 PM] FilePath0: E:\BotDev\l2uthless Ops\Star\Starcraft.exe [2:53:07 PM] FilePath1: E:\BotDev\l2uthless Ops\Star\Storm.dll [2:53:07 PM] FilePath2: E:\BotDev\l2uthless Ops\Star\Battle.snp [2:53:07 PM] Lockdown : lockdown-IX86-05.dll [2:53:07 PM] HashValue: 1A 91 F4 EC 9C 86 EE 9E DF BE 18 29 4C 50 DC EE [2:53:07 PM] Checksum: 9235CCA9 [2:53:07 PM] Digest : 76 7E 47 6C E4 BA 56 08 9D 2D 5D 54 F6 E3 76 E3 [2:53:07 PM] [BNET] Sending version and CD-key check... [2:53:07 PM] [BNET] Version and CD-key check passed! [2:53:07 PM] [BNET] Sending logon information... [2:53:07 PM] [BNET] Logon passed! [2:53:07 PM] [BNET] Logged in as: l2k-Shadow [2:53:07 PM] Welcome to Battle.net! [2:53:07 PM] This server is hosted by AT&T. [2:53:07 PM] There are currently 25593 users playing 5246 games of Starcraft Broodwar, and 163061 users playing 34141 games on Battle.net. [2:53:07 PM] Last logon: Sun Jun 3 9:52 PM [2:53:07 PM] Account created: January 17, 2004 - 22:22:56.818 [2:53:07 PM] Last logon: June 3, 2007 - 21:53:1.687 [2:53:07 PM] Last logoff: June 3, 2007 - 21:52:18.156 [2:53:07 PM] Time logged: 327|5:44:40 [/quote] on the contrary, it works perfectly. | June 3, 2007, 11:34 PM |
Barabajagal | he was passing it lockdown-IX86-01.mpq instead of .dll. | June 3, 2007, 11:44 PM |
Quarantine | I was correct in my assumption then. | June 4, 2007, 1:06 AM |
Barabajagal | You used a lesser known alternate of a classic... PEBKAC: Problem Exists Between Keyboard And Chair. | June 4, 2007, 1:08 AM |
Quarantine | Didn't even know that existed, I've just always said that. Lol. | June 4, 2007, 1:25 AM |
iago | [quote author=·RealityRipple· link=topic=16694.msg169681#msg169681 date=1180919304] You used a lesser known alternate of a classic... PEBKAC: Problem Exists Between Keyboard And Chair. [/quote] I prefer PICNIC: Problem In Chair, Not In Computer | June 4, 2007, 1:31 AM |
Barabajagal | That one's fun... but it's a bit confusing if you say the error is caused by a PICNIC.... | June 4, 2007, 1:54 AM |
iago | [quote author=·RealityRipple· link=topic=16694.msg169685#msg169685 date=1180922078] That one's fun... but it's a bit confusing if you say the error is caused by a PICNIC.... [/quote] That's the point. you say, "Ah, I understand this problem, it's a PICNIC!" -- the user won't be offended at all :) | June 4, 2007, 2:43 AM |
Barabajagal | I don't think you'd say either if you want to keep your job.... Edit: What a coincidence... I was reading through a webcomic: [img]http://www.userfriendly.org/cartoons/archives/98may/uf980506.gif[/img] | June 4, 2007, 3:30 AM |
iago | PEBKAC reminds me of the pronounciation of "P'tak", which is a Klingon insult of some sort. | June 4, 2007, 4:55 AM |
Barabajagal | [img]http://www.userfriendly.org/cartoons/archives/97dec/uf78p213.gif[/img] | June 4, 2007, 5:22 AM |
BreW | errrr... | June 4, 2007, 4:28 PM |
iago | It's funny how both threads about lockdown went way off topic. Conspiracy? | June 4, 2007, 5:13 PM |
Barabajagal | No, just boredom with the topic. "Lockdown this" and "Lockdown that". You guys are giving it more attention than a box of open donuts at a conference meeting. | June 4, 2007, 7:39 PM |
MyStiCaL | wouldn't that be the point of the thread. | June 4, 2007, 10:49 PM |
Barabajagal | My point is there's too many threads about it already and I'm tired of hearing about it. So I guess I'm done viewing all this crap until next time bnet changes. | June 4, 2007, 11:35 PM |
BreW | Hey. I got an idea. Maybe we shouldnt yap our heads off about lockdown so blizzard doesn't get any ideas so there WON'T be a "next time". | June 5, 2007, 12:57 AM |
iago | [quote author=·RealityRipple· link=topic=16694.msg169733#msg169733 date=1181000140] My point is there's too many threads about it already and I'm tired of hearing about it. So I guess I'm done viewing all this crap until next time bnet changes. [/quote] I'm glad you can summarize a month of time I wasted for this community so glibly. | June 5, 2007, 1:04 AM |
warz | haha. :P | June 5, 2007, 1:06 AM |
dlStevens | I still commend you iago. | June 5, 2007, 1:28 AM |
Barabajagal | iago. Now that there's not one, but two ways to get around lockdown, it will be changed again, most likely before SC2 comes out. I was hoping no local workaround would be made public, I really was. They never seem to do anything if it's something like BNLS, but a local copy can be embedded in hacks, so they have twice the reason to change it. I don't mean to insult your work, I just sort of wish you hadn't made it public, though I'm usually for public code. | June 5, 2007, 3:54 AM |
iago | [quote author=·RealityRipple· link=topic=16694.msg169745#msg169745 date=1181015667] iago. Now that there's not one, but two ways to get around lockdown, it will be changed again, most likely before SC2 comes out. I was hoping no local workaround would be made public, I really was. They never seem to do anything if it's something like BNLS, but a local copy can be embedded in hacks, so they have twice the reason to change it. I don't mean to insult your work, I just sort of wish you hadn't made it public, though I'm usually for public code. [/quote] Implementing that in a hack would be incredibly stupid. It's way easier just to load the hack *after* Battle.net. If you embed it in a hack, the hack will still fail because it hashes memory, and the hack likely hooks the game's memory. So that's just silly. Honestly, the algorithm isn't that complicated. It does very little prevent bots, and does very little to prevent hacks. I suspect it was changed more because somebody was bored and decided to improve the code. I doubt they'll change it again any time soon. And if they do, I'll reverse it and release the code again. I'm their worst nightmare, I have 3 phonelines and absolutely nothing to do with my time! (Challenge: where's that quote from? :) ) | June 5, 2007, 4:04 AM |
Denial | Vontage? You be surprised They will throw Level 82 pokemon at you next. | June 5, 2007, 4:13 AM |
idiat | [quote author=Rob link=topic=16694.msg169643#msg169643 date=1180846634] http://www.onlythechosen.com/CheckRevision.zip Have fun.. [/quote] [code][2:16:19 AM] CheckRevisionEx("c:\program files\starcraft\starcraft.exe", "c:\program files\starcraft\storm.dll", "c:\program files\starcraft\battle.snp", "-è_œÒ¯p•KÜÜzµ", Version, Checksum, EXEInfo, "C:\...\Desktop\CRev\lockdown-IX86-18.dll", "C:\...\Desktop\CRev\lockdown-IX86-01.dll", "C:\...\Desktop\CRev\sexp.bin") [2:16:19 AM] CheckRevision Result: 0 [2:16:19 AM] Version: 0 [2:16:19 AM] Checksum: 0 [2:16:19 AM] EXEInfo: [/code] What am I doing wrong? ...Nevermind. | June 5, 2007, 7:24 PM |
Denial | [quote author=iago link=topic=16694.msg169746#msg169746 date=1181016244] [quote author=·RealityRipple· link=topic=16694.msg169745#msg169745 date=1181015667] [/quote] I doubt they'll change it again any time soon. And if they do, I'll reverse it and release the code again. I'm their worst nightmare, I have 3 phonelines and absolutely nothing to do with my time! (Challenge: where's that quote from? :) ) [/quote] Did you hear about the new warden starcraft files that they released today? | June 6, 2007, 4:46 AM |
iago | [quote author=Denial link=topic=16694.msg169801#msg169801 date=1181105174] [quote author=iago link=topic=16694.msg169746#msg169746 date=1181016244] [quote author=·RealityRipple· link=topic=16694.msg169745#msg169745 date=1181015667] [/quote] I doubt they'll change it again any time soon. And if they do, I'll reverse it and release the code again. I'm their worst nightmare, I have 3 phonelines and absolutely nothing to do with my time! (Challenge: where's that quote from? :) ) [/quote] Did you hear about the new warden starcraft files that they released today? [/quote] I seem to remember almost the same thing in another thread, where I said...... I say it was lucky timing. I'm told that they use Warden for all the other clients, it was just a matter of time before they used it for Starcraft. | June 6, 2007, 5:00 AM |
Denial | Lockdown 2 = Warden :) But this isnt the end of it wait until later this week. | June 6, 2007, 5:04 AM |
raylu | I'm still having trouble getting lockdown to work with FooLOps (CheckRevision.dll). [code] lockdownDLL = "lockdown\" & Replace$(mpqName, ".mpq", ".dll", 1, -1, vbTextCompare) AddChat lockdownDLL & " --- " & bin Call CheckRevisionLD(HashFiles(0), HashFiles(1), HashFiles(2), ChkSFormula, EXEVersion, CheckSum, ExeInfo, lockdownDLL, "lockdown\lockdown-IX86-01.dll", bin)[/code] [quote][01:21:15]BNET: Connecting (asia.battle.net)... [01:21:15]BNET: Connected! [01:21:15][Bot] Using hardcoded VerByte (0xD1) [01:21:16]lockdown\lockdown-IX86-16.dll --- STAR\SEXP.bin[/quote] The bot crashes at this point with behavior similar to kd_create without kd_init. I pulled the DLLs out of the MPQs after getting them with BnFTP.exe. I used WinMPQ to extract them and had to name them manually. SEXP.bin is 64kb. I also tried using iago's 10kb STAR.bin with no luck. EDIT: Nevermind. Seems I needed [code]ExeVersion = String$(16, vbNullChar)[/code] | June 6, 2007, 6:23 AM |
MyStiCaL | [quote author=raylu link=topic=16694.msg169808#msg169808 date=1181111039] I'm still having trouble getting lockdown to work with FooLOps (CheckRevision.dll). [code] lockdownDLL = "lockdown\" & Replace$(mpqName, ".mpq", ".dll", 1, -1, vbTextCompare) AddChat lockdownDLL & " --- " & bin Call CheckRevisionLD(HashFiles(0), HashFiles(1), HashFiles(2), ChkSFormula, EXEVersion, CheckSum, ExeInfo, lockdownDLL, "lockdown\lockdown-IX86-01.dll", bin)[/code] [quote][01:21:15]BNET: Connecting (asia.battle.net)... [01:21:15]BNET: Connected! [01:21:15][Bot] Using hardcoded VerByte (0xD1) [01:21:16]lockdown\lockdown-IX86-16.dll --- STAR\SEXP.bin[/quote] The bot crashes at this point with behavior similar to kd_create without kd_init. I pulled the DLLs out of the MPQs after getting them with BnFTP.exe. I used WinMPQ to extract them and had to name them manually. SEXP.bin is 64kb. I also tried using iago's 10kb STAR.bin with no luck. EDIT: Nevermind. Seems I needed [code]ExeVersion = String$(16, vbNullChar)[/code] [/quote] ever thought about maybe using App.Path? [code] lockdownDLL = App.PAth & "lockdown\" & Replace$(mpqName, ".mpq", ".dll", 1, -1, vbTextCompare) AddChat lockdownDLL & " --- " & bin Call CheckRevisionLD(HashFiles(0), HashFiles(1), HashFiles(2), ChkSFormula, EXEVersion, CheckSum, ExeInfo, lockdownDLL, App.Path & "lockdown\lockdown-IX86-01.dll", bin)[/code] | June 6, 2007, 9:38 PM |
DDA-TriCk-E | App.Path & "\lockdown\" *** App.Path doesn't have the trailing backslash. | June 6, 2007, 10:16 PM |
rob | I would use a buffer larger than 16. The return digest is variable length. I have seen 16 and 17 digits. | June 6, 2007, 11:48 PM |
idiat | [quote author=MyStiCaL link=topic=16694.msg169827#msg169827 date=1181165888] ever thought about maybe using App.Path? [code] lockdownDLL = App.PAth & "lockdown\" & Replace$(mpqName, ".mpq", ".dll", 1, -1, vbTextCompare) AddChat lockdownDLL & " --- " & bin Call CheckRevisionLD(HashFiles(0), HashFiles(1), HashFiles(2), ChkSFormula, EXEVersion, CheckSum, ExeInfo, lockdownDLL, App.Path & "lockdown\lockdown-IX86-01.dll", bin)[/code] [/quote] It works without use of App.Path. He was just following the format suggested by the example in the module provided with the .dll. | June 7, 2007, 12:20 AM |
Barabajagal | [quote author=Rob link=topic=16694.msg169834#msg169834 date=1181173681] I would use a buffer larger than 16. The return digest is variable length. I have seen 16 and 17 digits. [/quote] 15, 16, and 17. I have all 3 lengths of them logged in my db. Use a null string buffer 255 bytes and then get rid of everything that's null after say 3 null characters; you can account for D2/W3 requests as well that way. | June 7, 2007, 1:35 AM |
idiat | Does anybody have a drtl.bin for the Rob/betawarz CheckRevision.dll? | June 7, 2007, 5:50 PM |
BreW | Did anyone notice that rob's dll doesn't work when compiled (for some people it returns 11, for others it works just fine but doesn't return the proper values, and other times it returns 0 meaning it failed) in vb6? **Also, it returns incorrect values for W2BN. | June 9, 2007, 5:04 PM |
raylu | Why did someone post an answer to my question that involved changing working code after I got it working? Anyway... If I use a buffer of 17 and the length is actually 15 or 16, how would I know how many bytes to truncate? What if the last value is 00? And for 17, are you sure you're not counting the null terminator? | June 9, 2007, 5:18 PM |
HdxBmx27 | The 'valuestring' will never contain a null. So it's safe to truncate at the 1st null. Just create a large buffer. (32 is a nice round number) and go from there. ~Hdx | June 9, 2007, 5:28 PM |
Barabajagal | For 17, I'm sure. Go look at my Database. You'll find 17 character values. | June 9, 2007, 7:56 PM |
DDA-TriCk-E | I just tried implementing Rob's dll into a bot and it returned completely different values than BNLS (www.valhallalegends.com as BNLS server). Heres my output: [quote] [19:58:32] Connecting to BNLS... [19:58:32] Connected to BNLS! - (Server: 64.183.189.104) [19:58:33] Connected to Battle.net! - (Server: 211.233.0.49) [19:58:33] Version byte: D1 [19:58:33] Product ID: STAR [19:58:38] Using Old Login Style... [19:58:38] MPQ Archive: lockdown-IX86-06.mpq [19:58:38] ValueString: 867F36E75BD2197350144A21C98415D [19:58:38] CheckRevision result: 1 [19:58:38] - Version: 10F0001 [19:58:38] - Checksum: 6E281B1B [19:58:38] - Digest: E9780D5B8D1F46F4D40276A208AA22A [19:58:39] BNLS Result: 1 [19:58:39] - Version: 10F0001 [19:58:39] - Checksum: C9121135 [19:58:39] - Digest: E2169F90FD5EEC4C0831182E0244D8F[/quote] And heres my code * if you don't like VB6 code look away now * [code] ''Grab packet data ... .LogonType = r.ReadDWORD() .ServerToken = r.ReadDWORD() .UDPValue = r.ReadDWORD() .MPQfiletime = r.ReadVOID(8) .MPQfilename = r.ReadSTRING() .ValueString = r.ReadSTRING() .ClientToken = GetTickCount() ''Lockdown vars ... dll = App.Path & "\" & Replace$(.MPQfilename, ".mpq", ".dll") bin = App.Path & "\STAR.bin" dll01 = App.Path & "\lockdown-IX86-01.dll" .Digest = String$(17, vbNullChar) ''Checkrevision call ... AddChat Profile, vbGreen, "CheckRevision result: " & _ CheckRevisionLD(.Hashpath & .Hashes(0), .Hashpath & .Hashes(1), .Hashpath & .Hashes(2), .ValueString, _ .Version, .Checksum, .Digest, dll, dll01, bin) .Digest = Split(.Digest, vbNullChar)(0) [/code] I can't seem to figure out why the values are different from BNLS compared to the CheckRevision.dll, BNLS values allow me to login, whereas the CheckRevision ones return 0x101 (Invalid Version)... Thanks for any help you can give. | June 11, 2007, 10:14 AM |
rob | I am unable to replicate your return values. [ 6:51:08 AM ] [BNET] MPQName: lockdown-IX86-06.mpq [ 6:51:08 AM ] [BNET] ValueString: 86 7F 36 E7 5B D2 19 73 50 14 4A 21 C9 84 15 0D [ 6:50:45 AM ] [BNLS] Version: 10F0001 [ 6:50:45 AM ] [BNLS] Checksum: 3CF76238 [ 6:50:45 AM ] [BNLS] Digest: 57 A7 15 A6 71 8C 64 FD 1C 2B DA 35 6B 4B F6 78 [ 6:51:08 AM ] [LOCKDOWN] Version: 10F0001 [ 6:51:08 AM ] [LOCKDOWN] Checksum: 3CF76238 [ 6:51:08 AM ] [LOCKDOWN] Digest: 57 A7 15 A6 71 8C 64 FD 1C 2B DA 35 6B 4B F6 78 | June 11, 2007, 10:52 AM |
iago | [quote author=Rob link=topic=16694.msg169989#msg169989 date=1181559133] I am unable to replicate your return values. [ 6:51:08 AM ] [BNET] MPQName: lockdown-IX86-06.mpq [ 6:51:08 AM ] [BNET] ValueString: 86 7F 36 E7 5B D2 19 73 50 14 4A 21 C9 84 15 0D [ 6:50:45 AM ] [BNLS] Version: 10F0001 [ 6:50:45 AM ] [BNLS] Checksum: 3CF76238 [ 6:50:45 AM ] [BNLS] Digest: 57 A7 15 A6 71 8C 64 FD 1C 2B DA 35 6B 4B F6 78 [ 6:51:08 AM ] [LOCKDOWN] Version: 10F0001 [ 6:51:08 AM ] [LOCKDOWN] Checksum: 3CF76238 [ 6:51:08 AM ] [LOCKDOWN] Digest: 57 A7 15 A6 71 8C 64 FD 1C 2B DA 35 6B 4B F6 78 [/quote] Maybe post checksums of your data files (the image dump and all the rest) to ensure that he has them right. Those could be useful in general. I would do it, but I'm already late for work. | June 11, 2007, 1:01 PM |
raylu | You don't need App.Path & "\". CheckRevisionLD won't return the null terminator. | June 11, 2007, 2:00 PM |
l2k-Shadow | Use this file for your image dump. | June 11, 2007, 2:17 PM |
JoeTheOdd | [quote author=iago link=topic=16694.msg169990#msg169990 date=1181566877] [quote author=Rob link=topic=16694.msg169989#msg169989 date=1181559133] I am unable to replicate your return values. [ 6:51:08 AM ] [BNET] MPQName: lockdown-IX86-06.mpq [ 6:51:08 AM ] [BNET] ValueString: 86 7F 36 E7 5B D2 19 73 50 14 4A 21 C9 84 15 0D [ 6:50:45 AM ] [BNLS] Version: 10F0001 [ 6:50:45 AM ] [BNLS] Checksum: 3CF76238 [ 6:50:45 AM ] [BNLS] Digest: 57 A7 15 A6 71 8C 64 FD 1C 2B DA 35 6B 4B F6 78 [ 6:51:08 AM ] [LOCKDOWN] Version: 10F0001 [ 6:51:08 AM ] [LOCKDOWN] Checksum: 3CF76238 [ 6:51:08 AM ] [LOCKDOWN] Digest: 57 A7 15 A6 71 8C 64 FD 1C 2B DA 35 6B 4B F6 78 [/quote] Maybe post checksums of your data files (the image dump and all the rest) to ensure that he has them right. Those could be useful in general. I would do it, but I'm already late for work. [/quote] [tt]--------------------------------- -----Lockdown DLL Checksums------ --------------------------------- 9f37a118e4f35bf21903bcc6cd0e77e2 *lockdown-IX86-00.dll 70fbe2d67aef70920d0ba554a905263b *lockdown-IX86-01.dll df419a1724264cac53487f7b97a929be *lockdown-IX86-02.dll 9c12b0da5d87b8919fcc870674afdf6c *lockdown-IX86-03.dll d19e5466e4a1c8d2c22de74c23121ac5 *lockdown-IX86-04.dll 53b9d66f18e3403465211f420aafec96 *lockdown-IX86-05.dll e009429efb590e245a0f1ce67b54b496 *lockdown-IX86-06.dll f5e1eb6acb9fada1774d8844faeb74a2 *lockdown-IX86-07.dll f81ad78012b1db74ff9cc06f11c919ec *lockdown-IX86-08.dll 2da770d9c7b844601c9a57e8c95eb3db *lockdown-IX86-09.dll d336ed1b8cac37e65ea395e7c09ce9b4 *lockdown-IX86-10.dll 043a92692707b8434a092744d1dceb9b *lockdown-IX86-11.dll a025667e2cac83ac564ca1c2144361dc *lockdown-IX86-12.dll 5cab8102a6a63705277b3c1e36765060 *lockdown-IX86-13.dll 901c46becac2e88c2483b0d502b75606 *lockdown-IX86-14.dll de491cc0d6052113883eb71dea616e9b *lockdown-IX86-15.dll bfaa7cf32fa333ce741c529c6947deb7 *lockdown-IX86-16.dll 1170f7351b538e8be4ed98f40d0b9eb2 *lockdown-IX86-17.dll 07d2cf849901cfa5766434345a9d5530 *lockdown-IX86-18.dll d3d05836287db33f4b0f1cf67b13e5d0 *lockdown-IX86-19.dll --------------------------------- -----StarCraft File Checksums---- --------------------------------- 567f76abce5606dfd6a2edaf7044e4e1 *StarCraft.exe f4815c91277ca91b97b88b685e13fab0 *battle.snp fb3e2313a413a5ea4b99499114cae963 *storm.dll --------------------------------- -----WarCraft II File Checksums-- --------------------------------- 61ce5f2dd824187d3e85504d77620daa *Warcraft II BNE.exe 600283858cc830a96c641f221fdbb7a9 *battle.snp 1d72a53cb25fc46cc13b338901cffa74 *storm.dll --------------------------------- -----Other File Checksums-------- --------------------------------- eb574b236133e60c989c6f472f07827b *md5sum.exe c786abc84da2eb82b1104afaf03e7a5a *W2BN.bin 10cff304fd1737c72cddc52855003946 *STAR.bin --------------------------------- -----Lockdown Results------------ --------------------------------- Note: Either Starcraft OR Brood War will pass, not both. Warcraft 2 passed 19/19 tests Starcraft passed 0/11 tests Brood War passed 10/10 tests a76bd3ea 3e79e38c a1720661207???9505df37f46f6212bd 78d9f3e6bc78d4b2a34999b990de6c0e Press any key to continue . . .[/tt] Brood War is installed, obviously. | June 11, 2007, 4:13 PM |
DDA-TriCk-E | Rob and I figured out the problem, I was using iago's screen dumps instead of his. Heres the download to his screen dumps: http://www.onlythechosen.com/w2bn.bin http://www.onlythechosen.com/star.bin http://www.onlythechosen.com/sexp.bin Updated CheckRevision.dll: http://www.onlythechosen.com/CheckRevision.dll | June 12, 2007, 12:58 AM |
raylu | [quote author=Joe[x86] link=topic=16694.msg170000#msg170000 date=1181578409]--------------------------------- -----Other File Checksums-------- --------------------------------- eb574b236133e60c989c6f472f07827b *md5sum.exe[/quote] LOL? | June 12, 2007, 3:02 AM |
BreW | [quote author=Joe[x86] link=topic=16694.msg170000#msg170000 date=1181578409] [tt] eb574b236133e60c989c6f472f07827b *md5sum.exe [/tt] [/quote] md5......? joe are you allright..? | June 12, 2007, 3:06 AM |
idiat | [quote author=Chriso link=topic=16694.msg170017#msg170017 date=1181609900] Rob and I figured out the problem, I was using iago's screen dumps instead of his. Heres the download to his screen dumps: http://www.onlythechosen.com/w2bn.bin http://www.onlythechosen.com/star.bin http://www.onlythechosen.com/sexp.bin Updated CheckRevision.dll: http://www.onlythechosen.com/CheckRevision.dll [/quote] What about DRTL?!?!?! If nobody has the game, I could get it myself if I knew how. | June 12, 2007, 3:51 AM |
Barabajagal | Just find out what memory locations are read for those and read the same for d1? Although I think blake said the DLL doesn't work for d1. | June 12, 2007, 3:57 AM |
iago | [quote author=brew link=topic=16694.msg170020#msg170020 date=1181617602] [quote author=Joe[x86] link=topic=16694.msg170000#msg170000 date=1181578409] [tt] eb574b236133e60c989c6f472f07827b *md5sum.exe [/tt] [/quote] md5......? joe are you allright..? [/quote] He's likely checksumming all files in the folder. Does it really need to be pointed out twice? [quote author=·RealityRipple· link=topic=16694.msg170024#msg170024 date=1181620654] Just find out what memory locations are read for those and read the same for d1? Although I think blake said the DLL doesn't work for d1. [/quote] It should work the same as D1, but the program I wrote doesn't seem to work. I haven't had a chance to look into why, mostly because not a whole lot of people play D1. | June 12, 2007, 5:09 AM |