question about versions

[goldeneye5599]

I tested it on Telegram version 4.8.10 x64 but it doesn't work,
I guess it shouldn't anyway because the address will be different anyway.

I'm trying to update your code to latest version, but I'm not sure if in the latest version
it works differently in a way that the telegram data encrypted and the key derived from the passcode itself so it will be impossible in the same way like you did by just changing the condition of the check.
tried to look over telegram desktop source code and it looks like the data is encrypted and the key derived from it.
do you have idea about that?

[ardabada]

you should find the address where the jump to unlock function is performed. kind of:
if (passcode == expected) { unlock(); //find this address }
then you can find the address where the function is referenced and do the injection in that jump instruction. i found that address by pure debugging so it took some time. in another versio of telegram the address is different, as you have noticed. either you debug telegram app and find the address or you take a look on imports/exports segment of the executable and find the address of relevant function. at least that what comes to mind for now

[goldeneye5599]

@ardabada
But per the source code of Telegram desktop, in latest versions the unlock is actually decrypt to files using crypto key which derived from the passcode itself
So you can't just jump to the unlock because it will not unlock without the correct password
that's what I'm trying to check with you if you have idea about that

[ardabada]

@goldeneye5599 you need to change this instruction https://github.com/telegramdesktop/tdesktop/blob/dev/Telegram/SourceFiles/storage/storage_domain.cpp#L250 so instead of equals you make it not equals
the only thing is you have to find address of that method and then change the jump instruction

[goldeneye5599]

I think that it's decrypt the data of telegram using the passcode but I'm not sure.
I tried to find the address of this function with x64dbg but havn't found, does it help that I have the source code?
do you have idea how can I find it? tried to debug the screen of the passcode, but it looks like it's works with event loop or something like that, hard to find the logic