🙁 Is this GMS V2013-02-28 CRC patch method wrong ????
Hi ,everybody here!
I have a question about the gms ,I inject my dll (which can hook the MS_CRC and HS_CRC ) ,the game exit then.
This is the last update version ,the update time is 2013-02-28 .
I find the HS_CRC below:
I find the MS_CRC below:
so I write the HOOK CRC CODE ,but when I inject the DLL ,the maplestory exit ,can somebody help me !
Thank very mush!
You can see my code in Attachments .!
https://www.virustotal.com/en/file/b...is/1362096986/ⓘ
http://r.virscan.org/report/1d9a4aa1...ef8a1e17f.htmlⓘ
I have a question about the gms ,I inject my dll (which can hook the MS_CRC and HS_CRC ) ,the game exit then.
This is the last update version ,the update time is 2013-02-28 .
I find the HS_CRC below:
Code:
/////// //1. 2013-02-27 08441000 53 PUSH EBX 0846C58D F3:A5 REP MOVS DWORD PTR ES:[EDI],DWORD PTR DS:[ESI] ; /////+2B58D 0846C58F EB 0B JMP SHORT EHSvc.0846C59C 0846C591 B8 01000000 MOV EAX,0x1 0846C596 C3 RETN 0846C597 8B65 E8 MOV ESP,DWORD PTR SS:[EBP-0x18] 0846C59A 33C0 XOR EAX,EAX 0846C59C C745 FC FFFFFFFF MOV DWORD PTR SS:[EBP-0x4],-0x1 ; /////+2B59C /////// //2. 2013-02-27 08441000 53 PUSH EBX 08757C93 0201 ADD AL,BYTE PTR DS:[ECX] /////+316C93 08757C95 59 POP ECX 08757C96 66:52 PUSH DX 08757C98 B2 C0 MOV DL,0xC0 /////+316C98 08757C9A 00D0 ADD AL,DL 08757C9C 66:8B1424 MOV DX,WORD PTR SS:[ESP] 08757CA0 83C4 02 ADD ESP,0x2 /////// //3. 2013-02-27 08441000 53 PUSH EBX 084B78D4 33C2 XOR EAX,EDX 084B78D6 8B4D 10 MOV ECX,DWORD PTR SS:[EBP+0x10] 084B78D9 8B55 F8 MOV EDX,DWORD PTR SS:[EBP-0x8] /////+768D9 084B78DC 331481 XOR EDX,DWORD PTR DS:[ECX+EAX*4] 084B78DF 8955 F8 MOV DWORD PTR SS:[EBP-0x8],EDX /////// //4. 0860A713 81C5 0A589D5A ADD EBP,0x5A9D580A 0860A719 8B0C24 MOV ECX,DWORD PTR SS:[ESP] 0860A71C E9 AC620000 JMP EHSvc.086109CD 0860A721 FF32 PUSH DWORD PTR DS:[EDX] /////ehsvc_CRC3 (+219721) 0860A723 ^ E9 3E8FFFFF JMP EHSvc.08603666 0860A728 01F3 ADD EBX,ESI 0860A72A ^ E9 7EB1FFFF JMP EHSvc.086058AD 0860A72F 31C8 XOR EAX,ECX
Code:
/////// //1. 00E79B57 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+0x8] 00E79B5A 034D C8 ADD ECX,DWORD PTR SS:[EBP-0x38] 00E79B5D 33D2 XOR EDX,EDX 00E79B5F 8B5D 08 MOV EBX,DWORD PTR SS:[EBP+0x8] 00E79B62 8A11 MOV DL,BYTE PTR DS:[ECX] /////maplestory_crc1 00E79B64 80C2 01 ADD DL,0x1 00E79B67 8B4D 18 MOV ECX,DWORD PTR SS:[EBP+0x18] /////maplestory_crc1_jmp 00E79B6A 8B09 MOV ECX,DWORD PTR DS:[ECX] 00E79B6C 80EA 01 SUB DL,0x1
Thank very mush!
You can see my code in Attachments .!
https://www.virustotal.com/en/file/b...is/1362096986/ⓘ
http://r.virscan.org/report/1d9a4aa1...ef8a1e17f.htmlⓘ
