bRO's client asking for PIN Code on log in

[ROX_Leopardo]

I found the possible procedure that called the method that Kurama posted... with this we can try to know what is the values that the method posted by Kurama used on algorithm...
pastebin.com/HrT2cALv
Search for sub_4AAB70 on asm code...

[ever_boy_]

FredBr already commited a fix.
Thank you all who helped us, I learned a lot here.


edit:
well, it seems that his fix is logging in by brute force, spamming a given code, until it is successful (and eventually it will be), but I believe this is not the ideal solution.
So, we should still look for that code.

[kLabMouse]

FredBr already commited a fix.
Thank you all who helped us, I learned a lot here.


edit:
well, it seems that his fix is logging in by brute force, spamming a given code, until it is successful (and eventually it will be), but I believe this is not the ideal solution.
So, we should still look for that code.

I already posted the code's needed for that. Just a bit of "brain enable" and all go good.
You can try to get the ASM codes from original, and build a C/C++ code that is equivalent. Thus you can check the data on fly with the Ripped and own function if they match.

[ever_boy_]

I'm sorry, I meant "a perl's version of that code". We're working on that, but I'm not very used to c++ and asm...

[kLabMouse]

I'm sorry, I meant "a perl's version of that code". We're working on that, but I'm not very used to c++ and asm...

Like same as C/C++ one, If you have a working C/C++ code you can just change it to Perl one. The only difference is work on strings/arrays of bytes.

[ever_boy_]

yeah, but first gotta work on your c++ code, at which I suck :/

btw, we're having some trouble here. a friend of mine says he needs to limit a given var to DWORD type, so that the function could work, but he can't do that in perl. do you know anything about that?

[ROX_Leopardo]

ever_boy
Give me some examples of the bytes that the client receive and the sequence that we give with this...

[Kurama]

[kLabMouse]

yeah, but first gotta work on your c++ code, at which I suck :/

btw, we're having some trouble here. a friend of mine says he needs to limit a given var to DWORD type, so that the function could work, but he can't do that in perl. do you know anything about that?

simple: a = a & 0xFFFFFFFF;

[Kurama]

thank you, its working now =D