I checked the opcodes SoF_patch.conf, and confirmed that it was correct. The packet size/struct did not change. I checked that too. That was the issue, everything was where it should be to work correct. I checked with IDA on the executable to find the memory offset. I confirmed this with pattern recognition searches in the executable, and with the offsets found in MQ2 when the version was live too. Everything matched up. I went in and looked at the memory the pointers were going to, and the data was not there. I got SEQ running with, and looked at the packet info, it was going over to the client correctly from the server.
Is anything being done to with the obfusicator opcode? I know when this version of the exe was live, they were doing obfusication with the opcodes. Does this client need possibly a default value, or null value so to speak? Has anything been looked at concerning this before? I am just looking for possibilities, not sure where to look.
Razzle
|