FileForums - Call of Duty: World at War v1.2 PRIVATE SERVER PATCH

FileForums (https://fileforums.com/index.php)

- Multi Player Games (https://fileforums.com/forumdisplay.php?f=9)

- - Call of Duty: World at War v1.2 PRIVATE SERVER PATCH (https://fileforums.com/showthread.php?t=85755)

Call of Duty: World at War v1.2 PRIVATE SERVER PATCH

Call of Duty: World at War v1.2 PRIVATE SERVER PATCH

http://m0001.gamecopyworld.com/games...SERVER%20PATCH

Above file dus not work as it should,

And how should it? A more precise report, please!

It's Original 1.2 MPEXE file! so not a PRIVATE SERVER PATCH !
btw I have problem with FrozenKiller's World at War v1.2 PRIVATE CLIENT & SERVER PATCH too , in the begining we can join crack server, but not a sure time later all players get "Awaiting games....." Error, when I check server TCP connect found 69.60.4.70:3074 no longer exist!

What makes it original?

Edited files such as cracks etc can have the same file size as the original file.

OK here iam :D

@newage
if you wanna test my server PM ;)

let's make long things short *G*

Server
1: if you compare your original file with my file you should see something like this

original: JE SHORT CoDWaWmp.00617A7D
patched: JMP SHORT CoDWaWmp.00617A7D

Client
2: in my client patch i forgot something to patch i hope my new fix work 100%

original: JNZ SHORT CoDWaWmp.0049A12E
patched: JMP SHORT CoDWaWmp.0049A12E

!!! but i forgot to patch !!!

original: JE SHORT CoDWaWmp.0049A12E
patched: JMP SHORT CoDWaWmp.0049A12E

i uploaded my new file to gcw so you have just to wait that they put it on there page :D

ps:sry for my bad eng ;)

mfg Frozen

erm why not patch the procedure, not the conditional, results in a cleaner crack, and higher probability that its cracked properly...

the conditional is set from a call i would imagine, so patch the call

There is no direct call or something

just search with olly or something for dw_connectafterlogin

if you finde another way so please tell me

mfg frozen

would do, if you documented exactly where you patched... i haven't got the original exe to check, but im pretty convinced there has to be a call or something similar which sets the conditional for the branches, paste me the va's that you patch, then i'll take a look

Thats the code from the original:

0049A0F6 . E8 65F51200 CALL CoDWaWmp.005C9660
0049A0FB . 83C4 18 ADD ESP,18
0049A0FE . 85C0 TEST EAX,EAX
0049A100 . 75 2C JNE SHORT CoDWaWmp.0049A12E
0049A102 . E8 198C1700 CALL CoDWaWmp.00612D20
0049A107 . 83F8 04 CMP EAX,4
0049A10A . 74 22 JE SHORT CoDWaWmp.0049A12E
0049A10C . 68 78388300 PUSH CoDWaWmp.00833878
0049A111 . 6A 40 PUSH 40
0049A113 . B0 01 MOV AL,1
0049A115 . BF E4DD8400 MOV EDI,CoDWaWmp.0084DDE4 ; ASCII "dw_connectafterlogin"
0049A11A . E8 91431200 CALL CoDWaWmp.005BE4B0
0049A11F . 83C4 08 ADD ESP,8
0049A122 . 891D EC73F300 MOV DWORD PTR DS:[F373EC],EBX
0049A128 . 5F POP EDI
0049A129 . 5E POP ESI
0049A12A . 5D POP EBP
0049A12B . 5B POP EBX
0049A12C . 59 POP ECX
0049A12D . C3 RETN
0049A12E > 83FE 02 CMP ESI,2

and thats the same part with my patch:

0049A0F6 . E8 65F51200 CALL CoDWaWmp.005C9660
0049A0FB . 83C4 18 ADD ESP,18
0049A0FE . 85C0 TEST EAX,EAX
0049A100 . EB 2C JMP SHORT CoDWaWmp.0049A12E
0049A102 . E8 198C1700 CALL CoDWaWmp.00612D20
0049A107 . 83F8 04 CMP EAX,4
0049A10A . EB 22 JMP SHORT CoDWaWmp.0049A12E
0049A10C . 68 78388300 PUSH CoDWaWmp.00833878
0049A111 . 6A 40 PUSH 40
0049A113 . B0 01 MOV AL,1
0049A115 . BF E4DD8400 MOV EDI,CoDWaWmp.0084DDE4 ; ASCII "dw_connectafterlogin"
0049A11A . E8 91431200 CALL CoDWaWmp.005BE4B0
0049A11F . 83C4 08 ADD ESP,8
0049A122 . 891D EC73F300 MOV DWORD PTR DS:[F373EC],EBX
0049A128 . 5F POP EDI
0049A129 . 5E POP ESI
0049A12A . 5D POP EBP
0049A12B . 5B POP EBX
0049A12C . 59 POP ECX
0049A12D . C3 RETN
0049A12E > 83FE 02 CMP ESI,2

mfg frozen

Quote:

Originally Posted by FrozenKiller (Post 367642)

omg I didnt mean your upload is original MPEXE! I said your crack server side have problem, sometimes all players wouldn't join in behinde the "Awaiting games..." windows:)

Hi guys. Somebody can run server 1.2 with that cracks? Because i can´t..

Thanks!

yes i can and some of my friends with server can 2

just google for private-servers and you find many cracked servers running 1.2

mfg frozen

Code:



[original]

0049A0F6 . E8 65F51200 CALL CoDWaWmp.005C9660

0049A0FB . 83C4 18 ADD ESP,18

0049A0FE . 85C0 TEST EAX,EAX

0049A100 . 75 2C JNE SHORT CoDWaWmp.0049A12E



[your patch]

0049A0F6 . E8 65F51200 CALL CoDWaWmp.005C9660

0049A0FB . 83C4 18 ADD ESP,18

0049A0FE . 85C0 TEST EAX,EAX

0049A100 . EB 2C JMP SHORT CoDWaWmp.0049A12E << the patch...

so, from that i could only assume that .5c9660 is the 'core' function that sets the conditional for the code you patch (eax)...

Code:



.005C9660: F30F7E442404                   movq        xmm0,[esp][4]

.005C9666: 53                             push        ebx

.005C9667: 83EC18                         sub         esp,018

.005C966A: 8BC4                           mov         eax,esp

.005C966C: 660FD600                       movq        [eax],xmm0

.005C9670: F30F7E442428                   movq        xmm0,[esp][028]

.005C9676: 660FD64008                     movq        [eax][8],xmm0

.005C967B: F30F7E442430                   movq        xmm0,[esp][030]

.005C9681: 660FD64010                     movq        [eax][010],xmm0

.005C9686: E875FFFFFF                     call       .0005C9600

.005C968B: 83C418                         add         esp,018

.005C968E: 85C0                           test        eax,eax

.005C9690: 7407                           jz         .0005C9699

.005C9692: B801000000                     mov         eax,1 ; successful return

.005C9697: 5B                             pop         ebx

.005C9698: C3                             retn ; -^-^-^-^-^-^-^-^-^-^-^

.005C9699: 8B0D7C8F470F                   mov         ecx,[00F478F7C]

.005C969F: 33C0                           xor         eax,eax

.005C96A1: 85C9                           test        ecx,ecx

.005C96A3: 7E35                           jle        .0005C96DA

.005C96A5: 8A54240E                       mov         dl,[esp][00E]

.005C96A9: 8DA42400000000                 lea         esp,[esp][0]

.005C96B0: 8A5C240C                       mov         bl,[esp][00C]

.005C96B4: 3A1C85808F470F                 cmp         bl,[eax]*4[00F478F80]

.005C96BB: 7516                           jnz        .0005C96D3

.005C96BD: 8A5C240D                       mov         bl,[esp][00D]

.005C96C1: 3A1C85818F470F                 cmp         bl,[eax]*4[00F478F81]

.005C96C8: 7509                           jnz        .0005C96D3

.005C96CA: 3A1485828F470F                 cmp         dl,[eax]*4[00F478F82]

.005C96D1: 74BF                           jz         .0005C9692

.005C96D3: 83C001                         add         eax,1

.005C96D6: 3BC1                           cmp         eax,ecx

.005C96D8: 7CD6                           jl         .0005C96B0

.005C96DA: 33C0                           xor         eax,eax ; unsuccessful result

.005C96DC: 5B                             pop         ebx

.005C96DD: C3                             retn ; -^-^-^-^-^-^-^-^-^-^-^-^-^

.005C96DE: CC                             int         3 ; << padding between procs for alignment

.005C96DF: CC                             int         3

so, .005C96DA should be the line we want to patch, the best method is probably to patch in a jmp to .005C9692...

we have from .005C96DC -> .005C96E0 to play which which is 6 bytes.. luckily we only need 5 :)

which would be

Code:

.005C96DA: E9B3FFFFFF jmp .0005C9692

and that fits nicely, due to the int 3 padding provided by the compiler :)

and, now that you've smacked the proc and NOT the conditionals acting on the return value from the proc, if the proc is called in a sneaky way it will always pass...

try it please, see if it works...

Yes it works so i learnd someting new THX

next time i try it @ your way

mfg frozen

with the 1.1 patch the client never needed a modded .exe only the server,

Call of Duty: World at War v1.2 PRIVATE SERVER PATCH - From what i see makes now difference to the server than the org

And the client/server 1 - Gives "bad address" to all cracked players