wc3edit.net https://forum.wc3edit.net/ |
|
[GUIDE] How to remove SProtect & SSProtect http://forum.wc3edit.net/tutorials-cheatpacks-f80/how-to-remove-sprotect-ssprotect-t34886.html |
Page 1 of 4 |
Author: | nuzamacuxe [ April 5th, 2018, 4:48 am ] |
Post subject: | [GUIDE] How to remove SProtect & SSProtect |
Hello. This is a rewritten guide from [Guide] Completely deprotect S/SSProtect because it was hard to understand also it wasn't well written. So, here we go. Before we get started, there are some stuffs you should know about: - What's a Hash Table?
- What's a Block Table?
- What's little-endian?
Last but not least the tools you'll need to unhex the maps: SProtection
Spoiler:
Now we need to find the HASH TABLE and BLOCK TABLE. (Use that image as a reference) HASH TABLE
1) START-OFFSET & LENGTH VALUES: NOTE: Don't forget to set your Windows calculator to DWORD.
HASH POS + HEADER POS (01 A7 E9 92 + 200) = 1 A7 EB 92
HASH SIZE * 10 (4 00[400] * 10) = 4000 2) HASH TABLE ITSELF:
2.2) Copy the selected code, press CTRL + N to create a new file, paste the code and save the HASH TABLE FILE. Spoiler:
3) Decrypting the HASH TABLE FILE with MQPHelper: HASH TABLE CODE = 7037AFC3 (Use that value to decrypt/encrypt)
3.2) Type: dec, input the HASH TABLE CODE (7037AFC3) and press enter. Spoiler:
4) Editing the DECRYPTED HASH TABLE in Hex Edit Macro:
2-) Set START VALUE with an F and set THE OVERWRITE VALUE to 00 and just then press Modify again; 3-) Save the modified file. Spoiler:
5) Editing the MODIFIED HASH TABLE in HxD:
5.2) Press CTRL + R and configure it like so: Datatype: Hex-values Search direction: All 5.3) Now do the following steps:
Search for: FF FF FF FF FF FF FF FF 00 00 00 00 FE FF FF 00 Replace with: FF FF FF FF FF FF FF FF FF FF FF FF FE FF FF FF Then click on Replace all. --------------------------------------------------------------------- ▬ Second step ▬: Search for: EE EE EE EE EE EE EE EE 00 00 00 00 EE EE EE 00 Replace with: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF Then click on Replace all. Spoiler:
6) Encrypting the MODIFIED HASH TABLE with MQPHelper:
6.2) Type: enc, input the HASH TABLE CODE (7037AFC3) and press enter. Spoiler:
BLOCK TABLE
NOTE: Don't forget to set your Windows calculator to DWORD.
BLOCK POS + HEADER POS (0 + 200) = 200
BLOCK SIZE * 10 (2 94[294] * 10) = 2940 2) BLOCK TABLE ITSELF:
2.2) Copy the selected code, press CTRL + N to create a new file, paste the code and save the BLOCK TABLE FILE Spoiler:
3) Decrypting the BLOCK TABLE FILE with MQPHelper: BLOCK TABLE CODE = A3B383EC (Use that value to decrypt/encrypt)
3.2) Type: dec, input the BLOCK TABLE CODE (A3B383EC) and press enter. Spoiler:
4) Editing the DECRYPTED BLOCK TABLE in Hex Edit Macro:
2-) Save the modified file. Spoiler:
5) Editing the MODIFIED BLOCK TABLE in HxD:
5.2) Change all the values of the first and second line to 00 5.3) Save the changes made. Spoiler:
6) Encrypting the MODIFIED BLOCK TABLE with MQPHelper:
6.2) Type: enc, input the BLOCK TABLE CODE (A3B383EC) and press enter. Spoiler:
Removing SProtection First open up the following files in HxD:
ENCRYPTED HASH TABLE ENCRYPTED BLOCK TABLE
1.3) Copy all the data from ENCRYPTED HASH TABLE FILE and paste into the map file. Spoiler:
2) Reinserting the ENCRYPTED BLOCK TABLE:
2.3) Copy all the data from ENCRYPTED BLOCK TABLE FILE and paste into the map file. Spoiler:
3) Actual hash table pos:
HASH TABLE'S OFFSET - HEADER POS (1 A8 2B 92 - 200) = 1 A8 29 92 3.2) Now transform the actual hash pos to LITTLE ENDIAN: 92 29 A8 01 4) Actual block table pos:
BLOCK TABLE'S OFFSET - HEADER POS (1 A8 6B 92 - 200) = 1 A8 69 92 4.2) Now transform the actual block pos to LITTLE ENDIAN: 92 69 A8 01 Now search for (CTRL + F) 4D 50 51 1A with Datatype set to: Hex-values again. 5) Changing the map header:
5.2) Change the HASH POS and BLOCK POS to the respective actual hash and actual block pos (both in LITTLE ENDIAN); 5.3) Save the map and test it in Ladik's MPQ Editor SProtect has been removed! Spoiler:
SSProtection
Spoiler:
Now we need to find the HASH TABLE and BLOCK TABLE. (Use that image as a reference) HASH TABLE NOTE: Where's 00 08 00 10 read as 00 08 00 00.
1) START-OFFSET & LENGTH VALUES: NOTE: Don't forget to set your Windows calculator to DWORD.
HASH POS + HEADER POS (FF E3 B4 14 + 1C4E00) = 214
HASH SIZE * 10 (8 00[800] * 10) = 8000 2) HASH TABLE ITSELF:
2.2) Copy the selected code, press CTRL + N to create a new file, paste the code and save the HASH TABLE FILE Spoiler:
3) Decrypting the HASH TABLE FILE with MQPHelper: HASH TABLE CODE = 7037AFC3 (Use that value to decrypt/encrypt)
3.2) Type: dec, input the HASH TABLE CODE (7037AFC3) and press enter. Spoiler:
4) Editing the DECRYPTED HASH TABLE in Hex Edit Macro:
2-) Set START VALUE with an F and set THE OVERWRITE VALUE to 00 and just then press Modify again; 3-) Save the modified file. Spoiler:
5) Editing the MODIFIED HASH TABLE in HxD:
5.2) Press CTRL + R and configure it like so: Datatype: Hex-values Search direction: All 5.3) Now do the following steps:
Search for: EE EE EE EE EE EE EE EE 00 00 00 00 FE FF FF 00 Replace with: FF FF FF FF FF FF FF FF FF FF FF FF FE FF FF FF Then click on Replace all. --------------------------------------------------------------------- ▬ Second step ▬: Search for: EE EE EE EE EE EE EE EE 00 00 00 00 EE EE EE 00 Replace with: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF Then click on Replace all. Spoiler:
6) Encrypting the MODIFIED HASH TABLE with MQPHelper:
6.2) Type: enc, input the HASH TABLE CODE (7037AFC3) and press enter. Spoiler:
BLOCK TABLE
NOTE: Don't forget to set your Windows calculator to DWORD.
BLOCK POS + HEADER POS (FF E4 FC 16 + 1C4E00) = 1 4A 16
BLOCK SIZE * 10 (4 06[406] * 10) = 4060 2) BLOCK TABLE ITSELF:
2.2) Copy the selected code, press CTRL + N to create a new file, paste the code and save the BLOCK TABLE FILE NOTE: SSProtect doesn't change anything in Block Table so isn't necessary to decrypt etc. Just let it as it is. Spoiler:
Removing SSProtection First open up the following files in HxD:
ENCRYPTED HASH TABLE BLOCK TABLE
1.2) Left click before 0B (check gif); 1.3) Press CTRL + E and set the start-offset to 200; 1.4) Remove all these selected datas. Spoiler:
2) Reinserting the ENCRYPTED HASH TABLE:
2.2) Copy all the data from ENCRYPTED HASH TABLE FILE and paste into the map file. Spoiler:
3) Reinserting the BLOCK TABLE:
3.2) Copy all the data from BLOCK TABLE FILE and paste into the map file. Spoiler:
4) Actual hash table pos:
HASH TABLE'S OFFSET - HEADER POS (1 FC 42 0F - 200) = 1 FC 40 0F 4.2) Now transform the actual hash pos to LITTLE ENDIAN: 0F 40 FC 01 5) Actual block table pos:
BLOCK TABLE'S OFFSET - HEADER POS (1 A8 6B 92 - 200) = 1 FC C0 0F 5.2) Now transform the actual block pos to LITTLE ENDIAN: 0F C0 FC 01 Now search for (CTRL + F) 4D 50 51 1A with Datatype set to: Hex-values again. 6) Changing the map header:
6.2) Change the HASH POS and BLOCK POS to the respective actual hash and actual block pos (both in LITTLE ENDIAN); 6.3) Save the map and test it in Ladik's MPQ Editor. SSProtect has been removed! Spoiler:
|
Author: | devoltz [ April 5th, 2018, 1:10 pm ] |
Post subject: | Re: [GUIDE] How to remove SProtect & SSProtect |
Nicely done. |
Author: | nuzamacuxe [ April 5th, 2018, 3:29 pm ] |
Post subject: | Re: [GUIDE] How to remove SProtect & SSProtect |
devoltz wrote: Nicely done. Thanks! If you have any suggestions please let me know. |
Author: | Vegas [ April 5th, 2018, 7:05 pm ] |
Post subject: | Re: [GUIDE] How to remove SProtect & SSProtect |
so many EEEs and FFFs |
Author: | nuzamacuxe [ April 5th, 2018, 10:06 pm ] |
Post subject: | Re: [GUIDE] How to remove SProtect & SSProtect |
Indeed... it's really annoying. |
Author: | Bartimaeus [ April 6th, 2018, 5:38 pm ] |
Post subject: | Re: [GUIDE] How to remove SProtect & SSProtect |
Vegas wrote: so many EEEs and FFFs The joys of working in base 16. |
Author: | amr_salah [ April 6th, 2018, 6:59 pm ] |
Post subject: | Re: [GUIDE] How to remove SProtect & SSProtect |
Thank you for this great Guide.I have just few questions,is the part of Hash Table Code =7037AFC3 works for all maps with sprotection?,also is there a guide for Spazzler protection? |
Author: | nuzamacuxe [ April 6th, 2018, 7:13 pm ] |
Post subject: | Re: [GUIDE] How to remove SProtect & SSProtect |
Yeah, it works for all maps. About Spazzler, it's not necessary to unhex. You just need to use the MPQ for KR, CN & Normal Read-Only in the attachments from this thread here: deprotection-cheating-f64/insert-a-cp-cc-enable-sp-deprotect-rc-t34777.html |
Author: | amr_salah [ April 7th, 2018, 12:02 pm ] |
Post subject: | Re: [GUIDE] How to remove SProtect & SSProtect |
Thank you very much.I tested the tool and it works.i never succeed to inject cheat pack in a map (I don't know why it always don't open in Warcraft 3) so i just modified some msg to see if it works. Your Guides are really too great i hope you make more in future. Thank you again |
Author: | nuzamacuxe [ April 7th, 2018, 1:04 pm ] |
Post subject: | Re: [GUIDE] How to remove SProtect & SSProtect |
I'm glad that I could help you out. Thank you and you're welcome. |
Page 1 of 4 | All times are UTC |
Powered by phpBB® Forum Software © phpBB Group http://www.phpbb.com/ |