From 885c8178a916463bd5c0b5a2bc8403b46aede945 Mon Sep 17 00:00:00 2001 From: Axel <58704636+Suwup@users.noreply.github.com> Date: Sat, 18 Sep 2021 13:06:15 +0200 Subject: [PATCH] Updated fortnite decryption for version 18.00-CL-17468642 (#41) * Updated fortnite decryption for version 18.00-CL-17468642 * Updated fortnite decryption for version 18.00-CL-17519952 --- Dumper/engine.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dumper/engine.cpp b/Dumper/engine.cpp index 1931f02..65a8db5 100644 --- a/Dumper/engine.cpp +++ b/Dumper/engine.cpp @@ -296,7 +296,7 @@ struct { jmp rax */ uint8 trampoline[] = { 0x48, 0x89, 0x5C, 0x24, 0x08, 0x57, 0x48, 0x83, 0xEC, 0x20, 0x89, 0xD7, 0x48, 0x89, 0xCB, 0x48, 0xB8, 0xEF, 0xBE, 0xAD, 0xDE, 0xEF, 0xBE, 0xAD, 0xDE, 0xFF, 0xE0 }; - *(uint64*)(trampoline + 17) = (uint64)((uint8*)decryptAnsi + 0x4A); // https://i.imgur.com/zWtMDar.png + *(uint64*)(trampoline + 17) = (uint64)((uint8*)decryptAnsi + 0x2A); // https://i.imgur.com/zWtMDar.png Decrypt_ANSI = (ansi_fn)VirtualAlloc(0, sizeof(trampoline), MEM_COMMIT, PAGE_EXECUTE_READWRITE); if (Decrypt_ANSI) { memcpy(Decrypt_ANSI, trampoline, sizeof(trampoline));