Register for your free account! | Forgot your password?

You last visited: Today at 08:31

  • Please register to post and access all features, it's quick, easy and FREE!

Advertisement



[Tut] Full Recovery trigger

Discussion on [Tut] Full Recovery trigger within the 12Sky2 Hacks, Bots, Cheats & Exploits forum part of the 12Sky2 category.

Reply
 
Old   #1
 
elite*gold: 0
Join Date: Jul 2010
Posts: 623
Received Thanks: 175
[Tut] Full Recovery trigger

Code:
void FullRecover()
		{
			UINT_PTR adr = 0x004A5570; //Old address
			__asm
			{
				CALL adr    
			}
		}
This is the function that I used to trigger the Full Recovery option in the game with my bot.

The function I used to tell the bot when to use the function is pretty much the way you would make an Autopiller, but instead of calling a function to use pills you just call the FullRecovery function:

Code:
bool rec;
float HPPercent;
float MPPercent; 

void FullRecovery()
{
    
	float RestoreMP  = MyChar->MaxMP * MPPercent; 
	float RestoreHP  = MyChar->MaxHP * HPPercent;
    if(rec)
	{
		if(MyChar->Exists == 1)
		{
			if(MyChar->CurMP <= RestoreMP)
			{
				 FullRecover(); 
			}
			if(MyChar->CurHP <= RestoreHP)
			{
				 FullRecover();
			}
		}
	}
}
Now for updating the address of the full recovery function you would just need to search a sequence of bytes in Ollydebug:

Code:
004A2291   |.  50                      PUSH EAX                             ; /Arg2
004A2292   |.  8B4D 8C                 MOV ECX,DWORD PTR SS:[EBP-74]        ; |
004A2295   |.  51                      PUSH ECX                             ; |Arg1
004A2296   |.  B9 A0AA5900             MOV ECX,TwelveSk.0059AAA0            ; |
004A229B   |.  E8 00FBF7FF             CALL TwelveSk.00421DA0               ; \TwelveSk.00421DA0
004A22A0   |.  5F                      POP EDI                              ;  0012FD30
Just load the game into Olly, use "Search for sequence of bytes" and just search the first few lines of the function above:

Code:
PUSH EAX                             
MOV ECX,DWORD PTR SS:[EBP-74]        
PUSH ECX
You need to just keep searching until you find a function that looks exactly like the function I posted above(obviously the address will differ however, this is the whole point of the search to find the new address).

The address you will be interested in here will obviously be the call:


Code:
 CALL TwelveSk.00421DA0
If this were from the new game client, then 0x00421DA0 would be the new address. Just plug the new address into the __asm function I posted on the top of this thread and now you have a fully working FullRecovery option for your botting pleasure.


The way this function got started: I believe it was Seth_day that contacted me one day telling me of an option he had found that was located on a hidden menu in the game that had some "Full Recovery" option to reload HP/Chi. He asked me if I could find a way to use the function manually from anywhere within a bot. After about 10minutes of searching I came up with the function above.

Enjoy, hopefully some generous people will figure this out and release a public copy for everyone to enjoy. If not, I have found my old source so I may eventually release an update, but its just not my main concern right now.

Credits:

as always: Megabyte for a major support in getting me started with my bot ideas(the ollydebug config that allowed to actually use BP's was the headstart I needed"
Seth_day for tipping me off about the FullRecovery function existing in the game client.
Wazzapoo helped me on a good deal of C++ functions in my bot for a few things such as putting my AutoLooting/Loot Filter functions to work in the bot.

Sidenote: You can just plug this code into any .dll source and get it working. Just make a base .dll project with the .dll entry point. Begin a thread from the .dll main and call the code from within the thread. Use MSDN if you cannot figure out how to do that. There are also a couple of simple .dll projects posted by Megabyte and I believe I posted a small source as well. Use Microsoft visual studio to compile it and your good to go.

Also you obviously need to clean up my code a bit. Example: where I use MyChar->MaxHP, just replace this with whatever pointer you assign your characters maxhp address to or use ReadProcessMemory to read your chars maxhp from the games memory. My->MaxHP refers to the character struct I had in my bot to read characters information from the game client easily.
Attached Files
File Type: rar FullRecoveryDLL.rar (1.73 MB, 93 views)
iktov2 is offline  
Thanks
4 Users
Old 06/04/2011, 01:55   #2

 
Mega Byte's Avatar
 
elite*gold: 0
Join Date: Dec 2009
Posts: 1,776
Received Thanks: 1,003
Nicely done
and yes very many thanks to Seth_day for letting us know about Full Recovery, ide seen it but never clicked it haha
Mega Byte is offline  
Thanks
1 User
Old 06/04/2011, 02:00   #3
 
elite*gold: 0
Join Date: Jul 2010
Posts: 623
Received Thanks: 175
I did make one small mistake in my tut there. Not sure if anybody caught it or not. However you don't search for a "Sequence of bytes" but rather a "Sequence of commands". Sorry I mixed that up when typing out the "tut".

If anyone uses this please give proper credits.

Enjoy.
iktov2 is offline  
Old 06/04/2011, 10:37   #4
 
elite*gold: 0
Join Date: May 2011
Posts: 12
Received Thanks: 0
misteriös

____________

d4v1dru5se is offline  
Old 06/05/2011, 23:06   #5
 
elite*gold: 20
Join Date: Aug 2007
Posts: 1,357
Received Thanks: 1,263
Thanks for the contribution iktov (:

I still find it weird that they have this in their client. Confuses me so much. hahaha.

You guys ever find the autoloot function in the client? Not sure how your autolooting/filter functions work, but the client has a built in autoloot function as well. :/ Just thought it'd be a fun project for you guys to work on. Hahaha. Thanks again for this iktov. If I still played TS2, this would be the most fun tweak out there.
strikeraid is offline  
Old 06/06/2011, 00:32   #6

 
Mega Byte's Avatar
 
elite*gold: 0
Join Date: Dec 2009
Posts: 1,776
Received Thanks: 1,003
Built in auto loot? I know it has the tild key ~ and pressing an emote to pick up but an auto loot that lets you set rareness and stuff? Well either way just find the games PickupItem_FromGround function and pass it the item id and your player struct details like X Z Y i think. Providing your at the items X Z Y server side and you can pick it up it should work.

You can find that function from breakpointing send unbreaking everything not to do with items eg run around for a bit. Then pick up an item it will break remove breakpoint Press Ctrl+F9 then F7 to step out scroll up slightly observe whats around there if not go up again and so on. If you go up enough and your clicking on the item you can find the CheckItemPickup( MouseX,MouseY ) function.
Mega Byte is offline  
Old 06/07/2011, 22:27   #7
 
elite*gold: 0
Join Date: Jul 2010
Posts: 623
Received Thanks: 175
Curious is anybody has gotten it working yet? If I can tear myself away from Rift for a while I will post a working .dll for this soon.

Also I may be inclined to post my Auto-Loot function function here too if anyone is interested?
iktov2 is offline  
Old 06/07/2011, 23:35   #8
 
elite*gold: 20
Join Date: Aug 2007
Posts: 1,357
Received Thanks: 1,263
i gave up. LOL! i crash when i call the address.
strikeraid is offline  
Old 06/07/2011, 23:46   #9
 
elite*gold: 0
Join Date: Jul 2010
Posts: 623
Received Thanks: 175
Quote:
Originally Posted by strikeraid View Post
i gave up. LOL! i crash when i call the address.
PM me with what you have done so far and I'll see if I can help you out.
iktov2 is offline  
Old 07/17/2011, 03:44   #10
 
elite*gold: 0
Join Date: Jun 2009
Posts: 42
Received Thanks: 6
hi iktov2,

i'm try to do the full recovery function using your provided codes with this post. i kept it as original, the only thing i changed was i replaced in the new address for this function call. it's 0x04422CC0. i injected it fine, but as soon as i hit keypad number 1 the game crashed. do you have any idea?

thanks
andrew
andrewfam is offline  
Old 07/17/2011, 04:29   #11

 
Mega Byte's Avatar
 
elite*gold: 0
Join Date: Dec 2009
Posts: 1,776
Received Thanks: 1,003
use ollydbg and check your registers and stack when calling the function and after compare them to using it from the game. If they do not match yourve done something wrong similarly check your addresses
Mega Byte is offline  
Old 07/17/2011, 09:26   #12
 
elite*gold: 0
Join Date: Jun 2011
Posts: 47
Received Thanks: 1
The Karahan Turkish version of the game do not cheat, I cheat If you want to do the trick karahan
muro6807 is offline  
Old 07/18/2011, 01:37   #13

 
Mega Byte's Avatar
 
elite*gold: 0
Join Date: Dec 2009
Posts: 1,776
Received Thanks: 1,003
what is with this language barrier....
Mega Byte is offline  
Old 07/18/2011, 12:25   #14
 
elite*gold: 0
Join Date: Jun 2011
Posts: 47
Received Thanks: 1
turkish version: karahan online
I am from you
karahan online cheat I would like to
muro6807 is offline  
Old 07/18/2011, 19:14   #15
 
elite*gold: 0
Join Date: Jul 2010
Posts: 623
Received Thanks: 175
Quote:
Originally Posted by muro6807 View Post
turkish version: karahan online
I am from you
karahan online cheat I would like to
Trolling?
iktov2 is offline  
Thanks
1 User
Reply


Similar Threads Similar Threads
trigger bot 2.1
04/18/2011 - CrossFire Hacks, Bots, Cheats & Exploits - 11 Replies
yo i got this trigger bot works very good Just a little peek on maybe some future work: I'm not sure about releasing a weapon hack or any other type of hack for that matter. I'm really lazy too, and I do not like hacks patched. I've been packet sniffing, filtering, and editing instead of memory editing, so IDK about releasing any memory hack. However, through packet editing and filtering, I have been able to make an invulnerable hack, so I'm having fun with that on S&D So you may have...
Trigger bot
02/17/2011 - Counter-Strike - 2 Replies
Can some one give me trigger bot for cs 1.6?
On Kill Trigger?
09/08/2010 - CO2 Private Server - 3 Replies
How would i go about adding a on kill trigger? I've figured out on death, but on kill I can't seem to find out how. I was going for something like this, if (Loc.Map == 700) // Event Map { if (MyClient.MyChar.EventKills == 1) MyClient.AddSend(Packets.ChatMessage(2005, "", "All", MyClient.MyChar.Name + " has defeated a player in the map / +50 cps]", 2005, 0));
Trigger Bot
03/31/2010 - WarRock - 7 Replies
Hallo allerseits :) hätte da mal eine Frage: Was nützt Trigger Bot? mfg
TRiggEr für spells ?
03/11/2005 - World of Warcraft - 15 Replies
moin, ich spiele einen mage und habe mal in einem mage vid gesehen, wie eine art tool oder mod oder was auch immer spell für ihn getriggert hat. also man drückt einmal die taste für einen bestimmten spell und das "tool" drückt dann ganz schnell diese taste bis der cooldown weg ist und der spell gecastet werden kann. hat jemand einen plan, welches addon/tool/ui-mod das kann? habe bei curse-geming mal geguckt, aber nichts in der art gefunden..



All times are GMT +2. The time now is 08:31.


Powered by vBulletin®
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Support | Contact Us | FAQ | Advertising | Privacy Policy | Terms of Service | Abuse
Copyright ©2024 elitepvpers All Rights Reserved.