User(s) browsing this thread: 2 Guest(s)
Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
CRC checks
07-04-2009, 08:06 PM
Post: #1
CRC checks
If i modify matrix.exe/launcher.exe i get "Please run virus check and full system scan", if i modify client.dll i get "Incompatible client version" etc, work on how to disable this, makes life much easier (i can modify to output additional debug info etc)
Quote this message in a reply
07-05-2009, 09:00 AM
Post: #2
RE: CRC checks
as expressed before:

dont touch matrix.exe, dont touch client.dll, touch all other dll's if ya want.

Expect a crc check on server for the exe+dll for client to prevent hacking

Otherwise, calculate CRC of a clean matrix.exe and find where it's sent to server xD.
Tip: getfileversion? something like that? xD

[Image: morphsig1.png]
[Image: ubd8457.png]
http://twitter.com/johnkussack [twitter]
Find all posts by this user
Quote this message in a reply
07-05-2009, 06:44 PM
Post: #3
RE: CRC checks
hook createfile and when it asks to open matrix.exe or client.dll, open matrix.exe_backup instead and give it file handle to that
Quote this message in a reply
07-05-2009, 07:24 PM
Post: #4
RE: CRC checks
the good news too it ..this only happens on life server, when you have own margin server and resend the packet from a clean matrix.exe , matrix starts up Wink
Find all posts by this user
Quote this message in a reply
07-05-2009, 07:32 PM
Post: #5
RE: CRC checks
obviously, now why dont you do something instead of just posting witty remarks
Quote this message in a reply
07-05-2009, 09:17 PM
Post: #6
RE: CRC checks
Developped a little packet analyzer program to ... emm analyze packets txt logs.

Currently Matrix.exe data is:

crc: "DF 07 2F A6"
md5: "AE 09 E1 8D 50 E5 BD 6C 0A AE 50 2E 0E 96 28 6B"

Passed them to program in normal and reverse format on a full login log and "surprisingly".. nothing found there for crc nor md5.

So if sent, they may be encrypted/joined with more data

[Image: morphsig1.png]
[Image: ubd8457.png]
http://twitter.com/johnkussack [twitter]
Find all posts by this user
Quote this message in a reply
07-05-2009, 09:44 PM
Post: #7
RE: CRC checks
sry no much time atm (at the weekend i only have a few minutes sometimes).

I will check up something more tomorrow.
Find all posts by this user
Quote this message in a reply
07-05-2009, 10:21 PM
Post: #8
RE: CRC checks
they are sent in margin packets...
which are encrypted after the first packet
Quote this message in a reply
Post Reply 


Forum Jump: