CastleCops® Q - Z12 RE: RWIN Patch and ProxoPatcher

Need help? Click here to register for free! Absolutely zero advertisements on this site!

	Donation/Premium

	Donations. Become Premium Today!

	Security Central

	· Home · PIRT/Fried Phish · MIRT · SIRT · Deutsch · Wiki · Newsletter · O16/ActiveX · CLSID List · Contest2007 · Downloads · Feedback (send) · Forums · HijackThis · Hijacktrend · LSPs · My Downloads · O18 · O20 · O21 · O22 · O23 · O9 · Premium · Private Messages · Proxomitron · Reviews · Search · StartupList · Stories Archive · Submit News · WsIRT · Your Account · Acceptable Use Policy

Forum FAQ

Usergroups

Profile

Select FavForums

Q - Z12 RE: RWIN Patch and ProxoPatcher
Goto page 1, 2 Next

All -> FavForums -> Proxomitron

[del.icio.us!] [digg it!] [reddit!]

View previous topic :: View next topic

Author

Message

Proteus

Trooper
Trooper

Joined: Apr 25, 2004
Posts: 32
Location: Wet Coast, Canada

Posted: Sun Jul 02, 2006 3:57 pm Post subject: Q - Z12 RE: RWIN Patch and ProxoPatcher

Hi Z12, thanks for the patch first. I prefer to run Proxo with ProxoPatcher as I prefer the look, unfortunately your patch won't work. I also looked for the string with a Hex editor but it doesn't seem to be there in my patched version. SD ProxoPatcher Link http://www.xs4all.nl/~vsetten/prox/

z12

Captain
Captain

Joined: Jul 17, 2002
Posts: 385
Location: USA

Posted: Mon Jul 03, 2006 2:54 pm Post subject:

Hi Proteus

Proteus wrote:

Hi Z12, thanks for the patch first.

The credit for that patch goes to JJoe, not me.

Proteus wrote:

unfortunately your patch won't work. I also looked for the string with a Hex editor but it doesn't seem to be there in my patched version.

The problem may be that both "patchers" are looking for an original version of proxo...

Proteus wrote:

Download & Install
....
Step 2
Extract the contents of the zip file and put them in a temporary folder. Also put a copy of Proxomitron.exe in a temporary folder (in the same one with the patcher, or somewhere else). You must use an unpatched, original copy of your Proxomitron.exe file.

At this point in time, I haven't tried running either your patch or the rwin patch with a previously patched version of proxo.

I have looked at an original & rwin patched june 4.5 version with hex editors and both show the expected values at hex offset D581.

Mike

JJoe

Captain
Captain

Joined: Dec 18, 2005
Posts: 619
Location: USA

Posted: Mon Jul 03, 2006 5:55 pm Post subject:

z12 wrote:

Proteus wrote:

Hi Z12, thanks for the patch first.

The credit for that patch goes to JJoe, not me.

Credit (or blame) belongs to more than one person.

Proteus wrote:

unfortunately your patch won't work. I also looked for the string with a Hex editor but it doesn't seem to be there in my patched version.

Both "patchers" are looking for an original version of the Proxomitron.

Perhaps a picture will help?
ProxoPatcher4 exe in frhed

HTH

ProxoPatcher4hex.png

Description:

Filesize:

8.24 KB

Viewed:

2672 Time(s)

Proteus

Trooper
Trooper

Joined: Apr 25, 2004
Posts: 32
Location: Wet Coast, Canada

Posted: Tue Jul 04, 2006 3:25 pm Post subject:

I admit it, I don't get hex. I'll use the picture as a ref and see if it helps.

SD

JJoe wrote:

z12 wrote:

Proteus wrote:

Hi Z12, thanks for the patch first.

The credit for that patch goes to JJoe, not me.

Credit (or blame) belongs to more than one person.

Proteus wrote:

unfortunately your patch won't work. I also looked for the string with a Hex editor but it doesn't seem to be there in my patched version.

Both "patchers" are looking for an original version of the Proxomitron.

Perhaps a picture will help?
ProxoPatcher4 exe in frhed

HTH

Proteus

Trooper
Trooper

Joined: Apr 25, 2004
Posts: 32
Location: Wet Coast, Canada

Posted: Tue Jul 04, 2006 3:48 pm Post subject:

I don't see it, I've attached my exe. could you have a look please?

SD

Proteus wrote:

I admit it, I don't get hex. I'll use the picture as a ref and see if it helps.

SD

Last edited by Proteus on Tue Jul 04, 2006 5:07 pm, edited 1 time in total

JJoe

Captain
Captain

Joined: Dec 18, 2005
Posts: 619
Location: USA

Posted: Tue Jul 04, 2006 4:48 pm Post subject:

I see it. Which editor are you using?

JJoe

Captain
Captain

Joined: Dec 18, 2005
Posts: 619
Location: USA

Posted: Tue Jul 04, 2006 4:53 pm Post subject:

And please delete the file.

Proteus

Trooper
Trooper

Joined: Apr 25, 2004
Posts: 32
Location: Wet Coast, Canada

Posted: Tue Jul 04, 2006 5:10 pm Post subject:

frhed-v1.1

SD

JJoe wrote:

I see it.
Which editor are you using?

Proteus

Trooper
Trooper

Joined: Apr 25, 2004
Posts: 32
Location: Wet Coast, Canada

Posted: Tue Jul 04, 2006 5:13 pm Post subject:

OOPS.. No delete option..

frhed-v1.1

SD

JJoe wrote:

I see it.
Which editor are you using?

JJoe

Captain
Captain

Joined: Dec 18, 2005
Posts: 619
Location: USA

Posted: Tue Jul 04, 2006 5:55 pm Post subject:

Should be easy then. Close Proxomitron and save a copy of the exe, just in case. 1. Open the exe in fhred 2. Hold down the "Ctrl" and "G" keys. 3. Enter "xd581" in the "Go to Offset" field 4. Click OK and you should see it 5. Click on the "4" and type "0" 6. Save and exit fhred. 7. Test the exe

Proteus

Trooper
Trooper

Joined: Apr 25, 2004
Posts: 32
Location: Wet Coast, Canada

Posted: Thu Jul 06, 2006 4:37 am Post subject:

Thanks for the help, I was using the search function not the CTRL-G go to hex option..

SD

Worked like a charm, just tested the RWIN and is as it should be Smile

JJoe wrote:

Should be easy then.

Close Proxomitron and
save a copy of the exe, just in case.

1. Open the exe in fhred
2. Hold down the "Ctrl" and "G" keys.
3. Enter "xd581" in the "Go to Offset" field
4. Click OK and you should see it
5. Click on the "4" and type "0"
6. Save and exit fhred.
7. Test the exe

JJoe

Captain
Captain

Joined: Dec 18, 2005
Posts: 619
Location: USA

Posted: Fri Jul 07, 2006 3:47 am Post subject:

You'd use something like <bh:00><bh:80><bh:00><bh:00><bh:6a><bh:04> to search for 00 80 00 00 6a 04 with frhed. Not difficult, just not familiar. It's amazing how much can be done with a little knowledge, and trial and error. So had somebody put up a patch to do this for you, would you have been worse off for missing the experience? You are welcome.

Proteus

Trooper
Trooper

Joined: Apr 25, 2004
Posts: 32
Location: Wet Coast, Canada

Posted: Fri Jul 07, 2006 4:43 am Post subject:

Life's a experience, I find it's always a bit more satisfying to do it yourself sorta LOL..

SID

JJoe wrote:

You'd use something like
<bh:00><bh:80><bh:00><bh:00><bh:6a><bh:04>
to search for
00 80 00 00 6a 04
with frhed.

Not difficult, just not familiar. Smile

It's amazing how much can be done with a little knowledge, and trial and error. Wink

So had somebody put up a patch to do this for you, would you have been worse off for missing the experience?

You are welcome.

Scoop

Sergeant

Joined: Jun 03, 2003
Posts: 148

Posted: Tue Nov 06, 2007 6:03 pm Post subject:

Brilliant stuff, saved my life, works a treat again. Even in vista Thank you JJoe _________________ Kind Regards Scoop

schoolsuxsux

Sergeant

Joined: Jun 26, 2006
Posts: 77
Location: Australia

Posted: Thu Jul 31, 2008 9:43 am Post subject:

How do change my RWIN to 1045440 ? Since I have even faster connection now.

	All -> FavForums -> Proxomitron	All times are GMT Goto page 1, 2 Next
Page 1 of 2

You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


	2002-2008 � Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 178ppm 0.310s (0.047s) Making cybercriminals unhappy since 2002*