// hackmw4Dlg.cpp : implementation file // #include "stdafx.h" #include "hackmw4.h" #include "hackmw4Dlg.h" #ifdef _DEBUG #define new DEBUG_NEW #undef THIS_FILE static char THIS_FILE[] = __FILE__; #endif #define ELEMENTS(Array) (sizeof(Array)/sizeof(*Array)) ///////////////////////////////////////////////////////////////////////////// // CAboutDlg dialog used for App About class CAboutDlg : public CDialog { public: CAboutDlg(); // Dialog Data //{{AFX_DATA(CAboutDlg) enum { IDD = IDD_ABOUTBOX }; //}}AFX_DATA // ClassWizard generated virtual function overrides //{{AFX_VIRTUAL(CAboutDlg) protected: virtual void DoDataExchange(CDataExchange* pDX); // DDX/DDV support //}}AFX_VIRTUAL // Implementation protected: //{{AFX_MSG(CAboutDlg) //}}AFX_MSG DECLARE_MESSAGE_MAP() }; CAboutDlg::CAboutDlg() : CDialog(CAboutDlg::IDD) { //{{AFX_DATA_INIT(CAboutDlg) //}}AFX_DATA_INIT } void CAboutDlg::DoDataExchange(CDataExchange* pDX) { CDialog::DoDataExchange(pDX); //{{AFX_DATA_MAP(CAboutDlg) //}}AFX_DATA_MAP } BEGIN_MESSAGE_MAP(CAboutDlg, CDialog) //{{AFX_MSG_MAP(CAboutDlg) // No message handlers //}}AFX_MSG_MAP END_MESSAGE_MAP() ///////////////////////////////////////////////////////////////////////////// // CHackmw4Dlg dialog CHackmw4Dlg::CHackmw4Dlg(CWnd* pParent /*=NULL*/) : CDialog(CHackmw4Dlg::IDD, pParent) { //{{AFX_DATA_INIT(CHackmw4Dlg) // NOTE: the ClassWizard will add member initialization here //}}AFX_DATA_INIT // Note that LoadIcon does not require a subsequent DestroyIcon in Win32 m_hIcon = AfxGetApp()->LoadIcon(IDR_MAINFRAME); } void CHackmw4Dlg::DoDataExchange(CDataExchange* pDX) { CDialog::DoDataExchange(pDX); //{{AFX_DATA_MAP(CHackmw4Dlg) // NOTE: the ClassWizard will add DDX and DDV calls here //}}AFX_DATA_MAP } BEGIN_MESSAGE_MAP(CHackmw4Dlg, CDialog) //{{AFX_MSG_MAP(CHackmw4Dlg) ON_WM_SYSCOMMAND() ON_WM_PAINT() ON_WM_QUERYDRAGICON() //}}AFX_MSG_MAP END_MESSAGE_MAP() ///////////////////////////////////////////////////////////////////////////// // CHackmw4Dlg message handlers BOOL CHackmw4Dlg::OnInitDialog() { CDialog::OnInitDialog(); // Add "About..." menu item to system menu. // IDM_ABOUTBOX must be in the system command range. ASSERT((IDM_ABOUTBOX & 0xFFF0) == IDM_ABOUTBOX); ASSERT(IDM_ABOUTBOX < 0xF000); CMenu* pSysMenu = GetSystemMenu(FALSE); if (pSysMenu != NULL) { CString strAboutMenu; strAboutMenu.LoadString(IDS_ABOUTBOX); if (!strAboutMenu.IsEmpty()) { pSysMenu->AppendMenu(MF_SEPARATOR); pSysMenu->AppendMenu(MF_STRING, IDM_ABOUTBOX, strAboutMenu); } } // Set the icon for this dialog. The framework does this automatically // when the application's main window is not a dialog SetIcon(m_hIcon, TRUE); // Set big icon SetIcon(m_hIcon, FALSE); // Set small icon // TODO: Add extra initialization here return TRUE; // return TRUE unless you set the focus to a control } void CHackmw4Dlg::OnSysCommand(UINT nID, LPARAM lParam) { if ((nID & 0xFFF0) == IDM_ABOUTBOX) { CAboutDlg dlgAbout; dlgAbout.DoModal(); } else { CDialog::OnSysCommand(nID, lParam); } } // If you add a minimize button to your dialog, you will need the code below // to draw the icon. For MFC applications using the document/view model, // this is automatically done for you by the framework. void CHackmw4Dlg::OnPaint() { if (IsIconic()) { CPaintDC dc(this); // device context for painting SendMessage(WM_ICONERASEBKGND, (WPARAM) dc.GetSafeHdc(), 0); // Center icon in client rectangle int cxIcon = GetSystemMetrics(SM_CXICON); int cyIcon = GetSystemMetrics(SM_CYICON); CRect rect; GetClientRect(&rect); int x = (rect.Width() - cxIcon + 1) / 2; int y = (rect.Height() - cyIcon + 1) / 2; // Draw the icon dc.DrawIcon(x, y, m_hIcon); } else { CDialog::OnPaint(); } } // The system calls this to obtain the cursor to display while the user drags // the minimized window. HCURSOR CHackmw4Dlg::OnQueryDragIcon() { return (HCURSOR) m_hIcon; } #define BASE_ADDRESS 0x401000 DWORD security_array[] = { 0x000407a0, 0x00148020, 0x0012bdc0, 0x002578b0, 0x001f7020, 0x0019e6c0, 0x00231c00, 0x001cdcf0, 0x0022c630, 0x001ec390, 0x001e72d0, 0x0022eda0, 0x002d20d0, 0x0026e220, 0x00263e90 }; DWORD security_length[] = { 0x000412d0 - 0x000407a0, 0x00149f80 - 0x00148020, 0x0012bf20 - 0x0012bdc0, 0x0025aab0 - 0x002578b0, 0x001f7a60 - 0x001f7020, 0x001af0c0 - 0x0019e6c0, 0x002358e0 - 0x00231c00, 0x001dc610 - 0x001cdcf0, 0x0022e080 - 0x0022c630, 0x001ed2d0 - 0x001ec390, 0x001e7a50 - 0x001e72d0, 0x0022f170 - 0x0022eda0, 0x002d34e0 - 0x002d20d0, 0x0026fc40 - 0x0026e220, 0x00264570 - 0x00263e90 }; char *name_array[] = { "MD5_DUMP.DAT", "AdeptDamage_DUMP.DAT", "AdeptGlobalPointer_DUMP.DAT", "Bucket_DUMP.DAT", "MW4Damage_DUMP.DAT", "VehicleInterface_DUMP.DAT", "Vehicle_DUMP.DAT", "Mech_DUMP.DAT", "WeaponMover_DUMP.DAT", "Heat_DUMP.DAT", "JumpJet_DUMP.DAT", "Weapon_DUMP.DAT", "NetMovement_DUMP.DAT", "NetWeapon_DUMP.DAT", "NetGenericMessages_DUMP.DAT" }; void CHackmw4Dlg::OnOK() { //0x00005384 0x008280b0 //0x000c20b0 0x0076b384 HWND window = ::FindWindow(NULL,"MechWarrior Vengeance"); HANDLE mech_handle = NULL; if (window) { DWORD pid; GetWindowThreadProcessId(window, &pid); mech_handle = ::OpenProcess(PROCESS_ALL_ACCESS, false, pid); } if (mech_handle) { DWORD biggest_buffer = 0; for (int i = 0; i < ELEMENTS(security_array); ++i) { if (biggest_buffer < security_length[i]) biggest_buffer = security_length[i]; } BYTE *memory = new BYTE[biggest_buffer]; for (i = 0; i < ELEMENTS(security_array); ++i) { SIZE_T total_size; DWORD p_Address = security_array[i] + BASE_ADDRESS; //0x004417a0 memset(memory,0,biggest_buffer); ReadProcessMemory(mech_handle, (void *)p_Address, (void *)memory, security_length[i], &total_size ); if (total_size < security_length[i]) { _asm nop } HANDLE s_file = CreateFile( name_array[i], GENERIC_WRITE, FILE_SHARE_READ,NULL, CREATE_ALWAYS, FILE_ATTRIBUTE_NORMAL|FILE_FLAG_SEQUENTIAL_SCAN, NULL ); if( s_file!=INVALID_HANDLE_VALUE ) { DWORD numberWritten; WriteFile(s_file, memory, security_length[i], &numberWritten, NULL); CloseHandle( s_file ); } } delete memory; } // CDialog::OnOK(); }