Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

0xc0000005 #9

Merged
merged 1 commit into from
Dec 16, 2019
Merged

Conversation

jamesmoriarty
Copy link
Owner

@jamesmoriarty jamesmoriarty commented Dec 16, 2019

  • go routine hack routines
  • restart routine on crash
    • looks like access violation results in the os killing the process. (fair)
  • look at fixing 0xc0000005 0x1
    • is the dll address space reinitialized?
    • is there an exclusive memory lock?
    • is there a bug in the compiler (haha) oh

Try fix:

 .\gohack.exe   

    ___       ___       ___       ___       ___       ___
   /\  \     /\  \     /\__\     /\  \     /\  \     /\__\
  /::\  \   /::\  \   /:/__/_   /::\  \   /::\  \   /:/ _/_
 /:/\:\__\ /:/\:\__\ /::\/\__\ /::\:\__\ /:/\:\__\ /::-"\__\
 \:\:\/__/ \:\/:/  / \/\::/  / \/\::/  / \:\ \/__/ \;:;-",-"
  \::/  /   \::/  /    /:/  /    /:/  /   \:\__\    |:|  |
   \/__/     \/__/     \/__/     \/__/     \/__/     \|__|

version: 52e9ec3-20191216.222453

INFO[0000] GetLatestOffsets                              url="https://raw.githubusercontent.com/frk1/hazedumper/master/csgo.yaml"
INFO[0000] GetProcessID csgo.exe                         pid=7096
INFO[0000] GetModule client_panorama.dll                 address=0x22eb0000
INFO[0000] OpenProcess 7096                              processHandle=636
INFO[0000] - addressLocal                                value=0x22eb0000
INFO[0000] - addressLocalForceJump                       value=0x2808fe1c
INFO[0000] - addressLocalPlayer                          value=0x4e95e330
INFO[0000] - addressLocalPlayerFlags                     value=0x4e95e434
Exception 0xc0000005 0x1 0x498b18 0x7ffcb2ce0da9
PC=0x7ffcb2ce0da9

syscall.Syscall6(0x7ffcb5796c50, 0x4, 0x27c, 0x2808fe1c, 0xc0001c1ac0, 0x1, 0x0, 0x0, 0x0, 0x0, ...)
        c:/go/src/runtime/syscall_windows.go:201 +0xfa
syscall.(*Proc).Call(0xc000004920, 0xc0001db7e0, 0x4, 0x4, 0x1, 0x784100, 0x979360, 0x979360)
        c:/go/src/syscall/dll_windows.go:177 +0x375
github.com/jamesmoriarty/gohack/win32.WriteProcessMemory(...)
        C:/Users/James Moriarty/Documents/gohack/win32/kernal32.go:50
main.doBHOP(0x27c, 0x4e95e434, 0x2808fe1c)
        C:/Users/James Moriarty/Documents/gohack/main.go:42 +0x158
main.main.func1()

@jamesmoriarty jamesmoriarty force-pushed the bugfix/0xc0000005-0x1-access-violation branch 3 times, most recently from 476addf to 07d54d4 Compare December 16, 2019 11:59
@jamesmoriarty jamesmoriarty changed the title wip 0xc0000005 Dec 16, 2019
@jamesmoriarty jamesmoriarty force-pushed the bugfix/0xc0000005-0x1-access-violation branch from 07d54d4 to fc4c901 Compare December 16, 2019 12:15
@jamesmoriarty jamesmoriarty merged commit ba3fa54 into master Dec 16, 2019
@jamesmoriarty jamesmoriarty deleted the bugfix/0xc0000005-0x1-access-violation branch December 16, 2019 12:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant