307 lines
6.9 KiB
C
307 lines
6.9 KiB
C
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <windows.h>
|
|
#include <psapi.h>
|
|
#include <wchar.h>
|
|
#include <string.h>
|
|
#include <TlHelp32.h>
|
|
|
|
int* pointer_path;
|
|
int num_ptr;
|
|
|
|
uintptr_t GetProcessBaseAddress(HANDLE process) // from stackoverflow
|
|
{
|
|
DWORD_PTR baseAddress = 0;
|
|
HANDLE processHandle = OpenProcess(PROCESS_ALL_ACCESS,TRUE,process);
|
|
HMODULE* moduleArray;
|
|
LPBYTE moduleArrayBytes;
|
|
DWORD bytesRequired;
|
|
|
|
if (processHandle)
|
|
{
|
|
if (EnumProcessModules(processHandle, NULL, 0, &bytesRequired))
|
|
{
|
|
if (bytesRequired)
|
|
{
|
|
moduleArrayBytes = (LPBYTE)LocalAlloc(LPTR, bytesRequired);
|
|
|
|
if (moduleArrayBytes)
|
|
{
|
|
int moduleCount;
|
|
|
|
moduleCount = bytesRequired / sizeof(HMODULE);
|
|
moduleArray = (uintptr_t*)moduleArrayBytes;
|
|
|
|
|
|
if (EnumProcessModules(processHandle, moduleArray, bytesRequired, &bytesRequired))
|
|
{
|
|
baseAddress = moduleArray[0];
|
|
}
|
|
|
|
LocalFree(moduleArrayBytes);
|
|
}
|
|
}
|
|
}
|
|
|
|
CloseHandle(processHandle);
|
|
}
|
|
|
|
return baseAddress;
|
|
}
|
|
|
|
DWORD GetProcId(WCHAR* name)
|
|
{
|
|
PROCESSENTRY32 entry;
|
|
entry.dwSize = sizeof(PROCESSENTRY32);
|
|
|
|
HANDLE snapshot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, NULL);
|
|
|
|
if (Process32First(snapshot, &entry) == TRUE)
|
|
{
|
|
while (Process32Next(snapshot, &entry) == TRUE)
|
|
{
|
|
if (wcscmp(entry.szExeFile, name) == 0)
|
|
{
|
|
return entry.th32ProcessID;
|
|
}
|
|
}
|
|
}
|
|
|
|
CloseHandle(snapshot);
|
|
return NULL;
|
|
}
|
|
|
|
int main(int argc, char* argv[])
|
|
{
|
|
FILE* ptr_file;
|
|
char MEE_POINTER_FILE[0x2048];
|
|
int LOGIN_STEP_VALUE = -1;
|
|
|
|
char* tmp;
|
|
|
|
#ifdef _WIN64
|
|
printf_s("!!! x64 Version can ONLY be used for the 64 Bit Versions of the game!\n");
|
|
#else
|
|
printf_s("!!! x86 Version can ONLY be used for the 32 Bit Versions of the game!\n");
|
|
#endif
|
|
|
|
strncpy_s(MEE_POINTER_FILE, 0x2048, "mee.ptr", 0x2048);
|
|
if(argc > 1)
|
|
{
|
|
for (int i = 0; i < argc; i++)
|
|
{
|
|
|
|
if (strcmp(argv[i], "--help") == 0)
|
|
{
|
|
printf_s("--ptr <mee.ptr file>\n");
|
|
printf_s("--lstep <custom login step value>\n");
|
|
return;
|
|
}
|
|
|
|
if(strcmp(argv[i],"--ptr") == 0)
|
|
strncpy_s(MEE_POINTER_FILE, 0x2048, argv[i+1], 0x2048);
|
|
|
|
if (strcmp(argv[i], "--lstep") == 0)
|
|
LOGIN_STEP_VALUE = strtol(argv[i + 1], &tmp, 10);
|
|
|
|
}
|
|
|
|
printf_s("MEE.PTR FILE : %s\nLOGIN STEP VALUE: %i\n", MEE_POINTER_FILE, LOGIN_STEP_VALUE);
|
|
}
|
|
|
|
// Read text file
|
|
printf_s("Loading %s\n", MEE_POINTER_FILE);
|
|
if ((access(MEE_POINTER_FILE, 0)) != -1)
|
|
{
|
|
fopen_s(&ptr_file, MEE_POINTER_FILE, "r");
|
|
fseek(ptr_file, 0, SEEK_END);
|
|
int sz = ftell(ptr_file)+1;
|
|
fseek(ptr_file, 0, SEEK_SET);
|
|
|
|
char* file_contents = (char*)malloc(sz);
|
|
memset(file_contents, 0x00, sz);
|
|
fread(file_contents, sz, 1, ptr_file);
|
|
|
|
char* work_buf = (char*)malloc(sz);
|
|
memcpy_s(work_buf, sz, file_contents, sz);
|
|
|
|
num_ptr = 0;
|
|
char* next_token1 = NULL;
|
|
char* token = strtok_s(work_buf, " > ", &next_token1);
|
|
|
|
// Count number of ptrs
|
|
while (token != NULL) {
|
|
token = strtok_s(NULL, " > ",&next_token1);
|
|
num_ptr += 1;
|
|
}
|
|
|
|
pointer_path = (int*)malloc(num_ptr * sizeof(int));
|
|
|
|
work_buf = (char*)malloc(sz);
|
|
memcpy_s(work_buf, sz, file_contents, sz);
|
|
|
|
char* next_token2 = NULL;
|
|
|
|
char* ptrs = strtok_s(work_buf, " > ",&next_token2);
|
|
pointer_path[0] = (int)strtol(ptrs, &tmp, 16);
|
|
|
|
// Use ptr
|
|
|
|
for(int i = 1; i < num_ptr; i++){
|
|
ptrs = strtok_s(NULL, " > ", &next_token2);
|
|
pointer_path[i] = (int)strtol(ptrs, &tmp, 16);
|
|
}
|
|
|
|
fclose(ptr_file);
|
|
|
|
printf_s("Loaded %s!\n", MEE_POINTER_FILE);
|
|
}
|
|
else
|
|
{
|
|
printf_s("Failed, using default pointer path (MCEE 1.14.70 UWP x64)\n");
|
|
num_ptr = 4;
|
|
pointer_path = (int*)malloc(num_ptr * sizeof(int));
|
|
|
|
pointer_path[0] = 0x2D98F08;
|
|
pointer_path[1] = 0x0;
|
|
pointer_path[2] = 0x560;
|
|
pointer_path[3] = 0x0;
|
|
}
|
|
|
|
printf_s("\nPointer Path: ");
|
|
for (int i = 0; i < num_ptr; i++)
|
|
{
|
|
printf_s("%x", pointer_path[i]);
|
|
if (i != num_ptr - 1)
|
|
{
|
|
printf_s(" > ");
|
|
}
|
|
}
|
|
printf_s("\n");
|
|
|
|
// Hack the universe.
|
|
DWORD proc_id = NULL;
|
|
|
|
printf_s("\nPlease open Minecraft Education Edition\n");
|
|
while (proc_id == NULL)
|
|
{
|
|
proc_id = GetProcId(L"Minecraft.Windows.exe");
|
|
if (proc_id == NULL)
|
|
proc_id = GetProcId(L"Minecraft.Win10.DX11.exe");
|
|
}
|
|
|
|
printf_s("MCEE Process ID: %x\n", proc_id);
|
|
HANDLE hProcess = OpenProcess(PROCESS_ALL_ACCESS, TRUE, proc_id);
|
|
printf_s("MCEE Process Handle: %x\n", hProcess);
|
|
|
|
if (!hProcess)
|
|
{
|
|
MessageBox(NULL, L"Cannot open process!\r\nTry \"Run as administrator\"", L"Error!", MB_OK + MB_ICONERROR);
|
|
}
|
|
else
|
|
{
|
|
|
|
uintptr_t baseAddress = NULL;
|
|
while(baseAddress == NULL)
|
|
baseAddress = (uintptr_t)GetProcessBaseAddress(proc_id);
|
|
#ifdef _WIN64
|
|
printf_s("MCEE Base Addr: %llx\n", baseAddress);
|
|
#else
|
|
printf_s("MCEE Base Addr: %x\n", baseAddress);
|
|
#endif
|
|
|
|
|
|
printf_s("Waiting for game to initalize....\n");
|
|
|
|
read_ptr_path:
|
|
|
|
baseAddress = (uintptr_t)GetProcessBaseAddress(proc_id); // recalculate base address idk why but this seems to be required.
|
|
|
|
|
|
// Read first ptr
|
|
uintptr_t first_ptr = pointer_path[0];
|
|
uintptr_t cur_ptr = baseAddress + first_ptr;
|
|
uintptr_t ptr = 0;
|
|
uintptr_t new_ptr = 0;
|
|
|
|
|
|
|
|
ReadProcessMemory(hProcess, cur_ptr, &ptr, sizeof(uintptr_t), 0);
|
|
if (ptr == 0)
|
|
goto read_ptr_path;
|
|
|
|
|
|
for (int i = 1; i < num_ptr-1; i++) // Follow path...
|
|
{
|
|
|
|
cur_ptr = ptr + pointer_path[i];
|
|
ReadProcessMemory(hProcess, cur_ptr, &new_ptr, sizeof(uintptr_t), 0);
|
|
if (new_ptr == 0) {
|
|
i -= 1;
|
|
goto read_ptr_path;
|
|
}
|
|
else
|
|
{
|
|
ptr = new_ptr;
|
|
|
|
}
|
|
|
|
|
|
}
|
|
|
|
ptr += pointer_path[num_ptr-1]; // final addition
|
|
|
|
// Wait for 0x1
|
|
int login_step_value = 0;
|
|
ReadProcessMemory(hProcess, (void*)ptr, &login_step_value, sizeof(int), 0);
|
|
|
|
if (login_step_value != 0x0)
|
|
{
|
|
#ifdef _WIN64
|
|
printf_s("Final Ptr: 0x%llx\n", ptr);
|
|
#else
|
|
printf_s("Final Ptr: 0x%x\n", ptr);
|
|
#endif
|
|
|
|
printf_s("Current Login Step: %i\n", ptr, login_step_value);
|
|
if (LOGIN_STEP_VALUE != -1)
|
|
{
|
|
printf_s("Trying login stage %i", LOGIN_STEP_VALUE);
|
|
WriteProcessMemory(hProcess, (void*)ptr, &LOGIN_STEP_VALUE, sizeof(int), 0);
|
|
goto finish;
|
|
}
|
|
|
|
printf_s("Trying login stage 5...\n"); // Backwards Comp (0.xx)
|
|
int login_step_value = 5;
|
|
WriteProcessMemory(hProcess, (void*)ptr, &login_step_value, sizeof(int), 0);
|
|
|
|
Sleep(1 * 200);
|
|
|
|
printf_s("Trying login stage 6...\n"); // Backwards Comp (1.9 and lower)
|
|
login_step_value = 6;
|
|
WriteProcessMemory(hProcess, (void*)ptr, &login_step_value, sizeof(int), 0);
|
|
|
|
Sleep(1 * 200);
|
|
|
|
printf_s("Trying login stage 8...\n");
|
|
login_step_value = 8;
|
|
WriteProcessMemory(hProcess, (void*)ptr, &login_step_value, sizeof(int), 0);
|
|
|
|
}
|
|
else
|
|
{
|
|
goto read_ptr_path;
|
|
}
|
|
|
|
finish:
|
|
|
|
|
|
CloseHandle(hProcess);
|
|
|
|
printf_s("\nBlessed Be!\n");
|
|
return 0;
|
|
}
|
|
}
|
|
|