Updated fortnite decryption for version 18.10-CL-17661844 (guttir14#42)

LappenBerg · Oct 9, 2021 · 366e0bf · 366e0bf
1 parent 885c817
commit 366e0bf
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/Dumper/engine.cpp b/Dumper/engine.cpp
@@ -290,12 +290,12 @@ struct {
           mov [rsp +8], rbx
           push rdi
           sub rsp, 0x20
-          mov edi, edx
-          mov rbx, rcx
+          mov ebx, edx
+          mov rdi, rcx
           mov rax, 0xDEADBEEFDEADBEEF
           jmp rax
           */
-          uint8 trampoline[] = { 0x48, 0x89, 0x5C, 0x24, 0x08, 0x57, 0x48, 0x83, 0xEC, 0x20, 0x89, 0xD7, 0x48, 0x89, 0xCB, 0x48, 0xB8, 0xEF, 0xBE, 0xAD, 0xDE, 0xEF, 0xBE, 0xAD, 0xDE, 0xFF, 0xE0 };
+          uint8 trampoline[] = { 0x48, 0x89, 0x5C, 0x24, 0x08, 0x57, 0x48, 0x83, 0xEC, 0x20, 0x89, 0xD3, 0x48, 0x89, 0xCF, 0x48, 0xB8, 0xEF, 0xBE, 0xAD, 0xDE, 0xEF, 0xBE, 0xAD, 0xDE, 0xFF, 0xE0 };
           *(uint64*)(trampoline + 17) = (uint64)((uint8*)decryptAnsi + 0x2A); // https://i.imgur.com/zWtMDar.png
           Decrypt_ANSI = (ansi_fn)VirtualAlloc(0, sizeof(trampoline), MEM_COMMIT, PAGE_EXECUTE_READWRITE);
           if (Decrypt_ANSI) {