Call of Duty: World at War v1.2 PRIVATE SERVER PATCH

#1 08-02-2009, 04:25

Call of Duty: World at War v1.2 PRIVATE SERVER PATCH

http://m0001.gamecopyworld.com/games...SERVER%20PATCH

Above file dus not work as it should,

Joe Forster/STA · #2 08-02-2009, 08:37

And how should it? A more precise report, please!

newage · #3 08-02-2009, 18:31

It's Original 1.2 MPEXE file! so not a PRIVATE SERVER PATCH !
btw I have problem with FrozenKiller's World at War v1.2 PRIVATE CLIENT & SERVER PATCH too , in the begining we can join crack server, but not a sure time later all players get "Awaiting games....." Error, when I check server TCP connect found 69.60.4.70:3074 no longer exist!

DABhand · #4 08-02-2009, 18:48

What makes it original?

Edited files such as cracks etc can have the same file size as the original file.

FrozenKiller · #5 08-02-2009, 22:22

OK here iam

@newage
if you wanna test my server PM

let's make long things short *G*

Server
1: if you compare your original file with my file you should see something like this

original: JE SHORT CoDWaWmp.00617A7D
patched: JMP SHORT CoDWaWmp.00617A7D

Client
2: in my client patch i forgot something to patch i hope my new fix work 100%

original: JNZ SHORT CoDWaWmp.0049A12E
patched: JMP SHORT CoDWaWmp.0049A12E

!!! but i forgot to patch !!!

original: JE SHORT CoDWaWmp.0049A12E
patched: JMP SHORT CoDWaWmp.0049A12E

i uploaded my new file to gcw so you have just to wait that they put it on there page

ps:sry for my bad eng

mfg Frozen

TippeX · #6 08-02-2009, 23:03

erm why not patch the procedure, not the conditional, results in a cleaner crack, and higher probability that its cracked properly...

the conditional is set from a call i would imagine, so patch the call

FrozenKiller · #7 08-02-2009, 23:20

There is no direct call or something

just search with olly or something for dw_connectafterlogin

if you finde another way so please tell me

mfg frozen

TippeX · #8 08-02-2009, 23:58

would do, if you documented exactly where you patched... i haven't got the original exe to check, but im pretty convinced there has to be a call or something similar which sets the conditional for the branches, paste me the va's that you patch, then i'll take a look

FrozenKiller · #9 09-02-2009, 00:19

Thats the code from the original:

0049A0F6 . E8 65F51200 CALL CoDWaWmp.005C9660
0049A0FB . 83C4 18 ADD ESP,18
0049A0FE . 85C0 TEST EAX,EAX
0049A100 . 75 2C JNE SHORT CoDWaWmp.0049A12E
0049A102 . E8 198C1700 CALL CoDWaWmp.00612D20
0049A107 . 83F8 04 CMP EAX,4
0049A10A . 74 22 JE SHORT CoDWaWmp.0049A12E
0049A10C . 68 78388300 PUSH CoDWaWmp.00833878
0049A111 . 6A 40 PUSH 40
0049A113 . B0 01 MOV AL,1
0049A115 . BF E4DD8400 MOV EDI,CoDWaWmp.0084DDE4 ; ASCII "dw_connectafterlogin"
0049A11A . E8 91431200 CALL CoDWaWmp.005BE4B0
0049A11F . 83C4 08 ADD ESP,8
0049A122 . 891D EC73F300 MOV DWORD PTR DS:[F373EC],EBX
0049A128 . 5F POP EDI
0049A129 . 5E POP ESI
0049A12A . 5D POP EBP
0049A12B . 5B POP EBX
0049A12C . 59 POP ECX
0049A12D . C3 RETN
0049A12E > 83FE 02 CMP ESI,2

and thats the same part with my patch:

0049A0F6 . E8 65F51200 CALL CoDWaWmp.005C9660
0049A0FB . 83C4 18 ADD ESP,18
0049A0FE . 85C0 TEST EAX,EAX
0049A100 . EB 2C JMP SHORT CoDWaWmp.0049A12E
0049A102 . E8 198C1700 CALL CoDWaWmp.00612D20
0049A107 . 83F8 04 CMP EAX,4
0049A10A . EB 22 JMP SHORT CoDWaWmp.0049A12E
0049A10C . 68 78388300 PUSH CoDWaWmp.00833878
0049A111 . 6A 40 PUSH 40
0049A113 . B0 01 MOV AL,1
0049A115 . BF E4DD8400 MOV EDI,CoDWaWmp.0084DDE4 ; ASCII "dw_connectafterlogin"
0049A11A . E8 91431200 CALL CoDWaWmp.005BE4B0
0049A11F . 83C4 08 ADD ESP,8
0049A122 . 891D EC73F300 MOV DWORD PTR DS:[F373EC],EBX
0049A128 . 5F POP EDI
0049A129 . 5E POP ESI
0049A12A . 5D POP EBP
0049A12B . 5B POP EBX
0049A12C . 59 POP ECX
0049A12D . C3 RETN
0049A12E > 83FE 02 CMP ESI,2

mfg frozen

newage · #10 09-02-2009, 01:14

Quote:

Originally Posted by FrozenKiller

OK here iam

@newage
if you wanna test my server PM

let's make long things short *G*

Server
1: if you compare your original file with my file you should see something like this

original: JE SHORT CoDWaWmp.00617A7D
patched: JMP SHORT CoDWaWmp.00617A7D

Client
2: in my client patch i forgot something to patch i hope my new fix work 100%

original: JNZ SHORT CoDWaWmp.0049A12E
patched: JMP SHORT CoDWaWmp.0049A12E

!!! but i forgot to patch !!!

original: JE SHORT CoDWaWmp.0049A12E
patched: JMP SHORT CoDWaWmp.0049A12E

i uploaded my new file to gcw so you have just to wait that they put it on there page

ps:sry for my bad eng

mfg Frozen

omg I didnt mean your upload is original MPEXE! I said your crack server side have problem, sometimes all players wouldn't join in behinde the "Awaiting games..." windows

dune83 · #11 09-02-2009, 02:55

Hi guys. Somebody can run server 1.2 with that cracks? Because i can´t..

Thanks!

FrozenKiller · #12 09-02-2009, 03:34

yes i can and some of my friends with server can 2

just google for private-servers and you find many cracked servers running 1.2

mfg frozen

TippeX · #13 09-02-2009, 03:40

Code:

[original]
0049A0F6 . E8 65F51200 CALL CoDWaWmp.005C9660
0049A0FB . 83C4 18 ADD ESP,18
0049A0FE . 85C0 TEST EAX,EAX
0049A100 . 75 2C JNE SHORT CoDWaWmp.0049A12E

[your patch]
0049A0F6 . E8 65F51200 CALL CoDWaWmp.005C9660
0049A0FB . 83C4 18 ADD ESP,18
0049A0FE . 85C0 TEST EAX,EAX
0049A100 . EB 2C JMP SHORT CoDWaWmp.0049A12E << the patch...

so, from that i could only assume that .5c9660 is the 'core' function that sets the conditional for the code you patch (eax)...

Code:

.005C9660: F30F7E442404                   movq        xmm0,[esp][4]
.005C9666: 53                             push        ebx
.005C9667: 83EC18                         sub         esp,018
.005C966A: 8BC4                           mov         eax,esp
.005C966C: 660FD600                       movq        [eax],xmm0
.005C9670: F30F7E442428                   movq        xmm0,[esp][028]
.005C9676: 660FD64008                     movq        [eax][8],xmm0
.005C967B: F30F7E442430                   movq        xmm0,[esp][030]
.005C9681: 660FD64010                     movq        [eax][010],xmm0
.005C9686: E875FFFFFF                     call       .0005C9600
.005C968B: 83C418                         add         esp,018
.005C968E: 85C0                           test        eax,eax
.005C9690: 7407                           jz         .0005C9699
.005C9692: B801000000                     mov         eax,1 ; successful return
.005C9697: 5B                             pop         ebx
.005C9698: C3                             retn ; -^-^-^-^-^-^-^-^-^-^-^
.005C9699: 8B0D7C8F470F                   mov         ecx,[00F478F7C]
.005C969F: 33C0                           xor         eax,eax
.005C96A1: 85C9                           test        ecx,ecx
.005C96A3: 7E35                           jle        .0005C96DA
.005C96A5: 8A54240E                       mov         dl,[esp][00E]
.005C96A9: 8DA42400000000                 lea         esp,[esp][0]
.005C96B0: 8A5C240C                       mov         bl,[esp][00C]
.005C96B4: 3A1C85808F470F                 cmp         bl,[eax]*4[00F478F80]
.005C96BB: 7516                           jnz        .0005C96D3
.005C96BD: 8A5C240D                       mov         bl,[esp][00D]
.005C96C1: 3A1C85818F470F                 cmp         bl,[eax]*4[00F478F81]
.005C96C8: 7509                           jnz        .0005C96D3
.005C96CA: 3A1485828F470F                 cmp         dl,[eax]*4[00F478F82]
.005C96D1: 74BF                           jz         .0005C9692
.005C96D3: 83C001                         add         eax,1
.005C96D6: 3BC1                           cmp         eax,ecx
.005C96D8: 7CD6                           jl         .0005C96B0
.005C96DA: 33C0                           xor         eax,eax ; unsuccessful result
.005C96DC: 5B                             pop         ebx
.005C96DD: C3                             retn ; -^-^-^-^-^-^-^-^-^-^-^-^-^
.005C96DE: CC                             int         3 ; << padding between procs for alignment
.005C96DF: CC                             int         3

so, .005C96DA should be the line we want to patch, the best method is probably to patch in a jmp to .005C9692...

we have from .005C96DC -> .005C96E0 to play which which is 6 bytes.. luckily we only need 5

which would be

Code:

.005C96DA: E9B3FFFFFF                    jmp        .0005C9692

and that fits nicely, due to the int 3 padding provided by the compiler

and, now that you've smacked the proc and NOT the conditionals acting on the return value from the proc, if the proc is called in a sneaky way it will always pass...

try it please, see if it works...

FrozenKiller · #14 09-02-2009, 04:51

Yes it works so i learnd someting new THX

next time i try it @ your way

mfg frozen

energyboost · #15 09-02-2009, 16:51

with the 1.1 patch the client never needed a modded .exe only the server,

Call of Duty: World at War v1.2 PRIVATE SERVER PATCH - From what i see makes now difference to the server than the org

And the client/server 1 - Gives "bad address" to all cracked players

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
BF2 1.4 Crack Online Issue	glenbo	PC Games	58	31-07-2008 20:43
Call of Duty Error! Help pls!	markishmark	General Gaming	3	28-03-2006 01:26
where to obtain to Call of Duty v1.2 LINUX SERVER FIX?	_moucho_PK	PC Games	0	08-02-2004 17:02
Call of Duty Patch 1.2	Andre2779	PC Games	1	30-01-2004 08:40