TODO: Patches-- verify & confirm that changes are Stack-safe (don't cause stack overflows)

[TAbdiukov]

• [x] p-AlcatelContentManager_uncripple.py - NOPs out bad jump - safe on stack

• [x] p-AltServer_preWin10support.py - very basic string patch - stack-safe

• [x] p-CarmageddonTDR2000_killTimer.py - safe on CPU stack, but theoretically UNSAFE on FPU register stack. The game appears to use FPU in JIT manner, nonetheless: v2 patch is made.

  • View in WinHEX (v1):
    
  • View in Immunity Debugger (v1):
    
  • View in IDA Pro, before patch (v1):
    
  • View in IDA Pro, after patch (v1):
    

• [x] p-CarmageddonTDR2000_reverseTimer.py - FPU (x87): 0x64 [float sub] -> 0x44 [float add] for reverse function - Both CPU and FPU stack-safe

• [x] p-K10stat_anyCPUpatch.py - Replacing conditional jumps to UNconditional and NOPing some other jumps - Safe on stack

• [x] p-Swype.exe_unLim+noDX10.py MAIN - patches (NOPs) out CMP, JNZ, CMP JNZ cluster - safe on stack, and (following the next CMP instruction), safe on registry flags!

  • View in WinHex:
    
  • View in IDA (would be similar in Immunity Debugger/x64dbg):
    

• [x] [FLAG_UNSAFE] p-Swype.exe_unLim+noDX10.py DX10 v1 - Right in the function beginning, push ecx; push esi are replaced by ret 4. INSIDE function, patch is stack safe. HOWEVER, in function calls, there is push ebx, making the patch stack-UNSAFE (slow stack corruption)

  • View in WinHex:
    
  • View of patched (to ret 4 part) in IDA Pro:
    
  • View of XREF FROM functions in IDA Pro:
    

• [x] p-Swype.exe_unLim+noDX10.py DX10 v2 - conditional jump is made UNconditional - stack-safe

  • View in WinHex:
    
  • View in IDA Pro (before patching):
    
  • View in IDA Pro (after patching):
    

[TAbdiukov]

Following the analysis above, the following changes are needed:

• [x] p-CarmageddonTDR2000_killTimer.py - Check

• [x] p-CarmageddonTDR2000_killTimer.py -Deprecate

• [x] p-CarmageddonTDR2000_killTimer.py - patch v2 - 004A09C0 jump made unconditional, same jump as after flt dec routine, found in 004A09D2 - safe on CPU AND FPU stack

  • Before:
    
    
  • After:
    

• [x] Deprecate p-Swype.exe_unLim+noDX10.py DX10 v1 in code

• [x] Deprecate p-Swype.exe_unLim+noDX10.py DX10 v1 in releases

[TAbdiukov]

All required changes are made