[Question] House Permit Bot (AutoIt3)

Page 3 of 4 12 3 4
04/25/2009 17:59 KraHen#31
Hmmm... I guess I should learn some AutoIt as well :D
04/26/2009 00:17 swords#32
Might I say, this is some impressive stuff... I've used AutoIt forever, just kinda makin some bots here and there... Never did I think you could get THIS MUCH into it. I may have to look into this stuff after all 0.0.


Good luck with your project, though a house-miner THIS good, will DRASTICALLY reduce House Permit prices... At least you can get a house on all your chars :rolleyes:.


I do not have the knowledge, but I'm sure some people here do, and possibly even you, but you need to try finding the UniqueID for monsters, etc. If that could be done, you could re-make SV with EASE. SV just has a few high points that no other bot can compete with (like ELSE): UniqueID's for monsters/items/etc, background clicking, and aimbot.
04/26/2009 01:13 _fobos_#33
Looking good! but one thing... I know you like auto it.. but as I see it... only the injection is done with auto-it mostly correct?
So why not create a loader with detours in C++ let Conquer load the dll when it starts (sort of like injection)
this will make autoit useless because lets be honest here, autoit aint doin much at all :p

I see you read the post about my sit function :p
Why is sit needed in a mine bot? :p

Anyway keep up the nice work :p

Edit: Skip what i said about auto-it for now, because i just looked at it and right now you're doing more then i thought with auto-it.
But i'm sure that will change when you found some more functions ;)
besides that also consider that every patch TQ makes you will have to update and find the new function addresses so try to code it in a way that you can easily update it all.
maybe make the addresses changeable at runtime thru idk like textbox's so that when you get tired of updating this bot can still be fixed easily by others that can find the functions ;)

I'd help you out more with updating addresses but well I dont have the time these days.. work.. work... work... fact is I just got home from work :p
04/26/2009 03:40 clintonselke#34
Quote:
Originally Posted by _fobos_ View Post
Looking good! but one thing... I know you like auto it.. but as I see it... only the injection is done with auto-it mostly correct?
So why not create a loader with detours in C++ let Conquer load the dll when it starts (sort of like injection)
this will make autoit useless because lets be honest here, autoit aint doin much at all :p

I see you read the post about my sit function :p
Why is sit needed in a mine bot? :p

Anyway keep up the nice work :p

Edit: Skip what i said about auto-it for now, because i just looked at it and right now you're doing more then i thought with auto-it.
But i'm sure that will change when you found some more functions ;)
besides that also consider that every patch TQ makes you will have to update and find the new function addresses so try to code it in a way that you can easily update it all.
maybe make the addresses changeable at runtime thru idk like textbox's so that when you get tired of updating this bot can still be fixed easily by others that can find the functions ;)

I'd help you out more with updating addresses but well I dont have the time these days.. work.. work... work... fact is I just got home from work :p
I know you like auto it.. but as I see it... only the injection is done with auto-it mostly correct?
hehehe... yea thats true. Well not even the injection is working with autoit atm xD ... i'm using winject.exe lol

this will make autoit useless because lets be honest here, autoit aint doin much at all :p

AutoIt is clicking the NPCs, answering them (mine questions too), clicking for full inventory (while mining). If i (or we) can make them memory based, then no need for autoit at all :p.

But i would still like to communicate to the DLL using sockets, that way it feels likes a proxy box. If it then uses the old encrypt/decrypt (for packets) in the old packet style (in the old correct packet structs), then i/we can make a PROXY-PROXY to get all the old bots working again (or partly working). The old proxy bot will think its recieving packets from the old co, but really its just a memory bot working behind the since translation the new co into the old one :D (as far as an old proxy bot would be consider)... Seems like another big project :p

(for PROXY-PROXY, i think the DLL would then be both client & server of the old proxy bots)

I see you read the post about my sit function :p
Why is sit needed in a mine bot? :p

hehehe... it doesn't need sit at all :D ... im making other bots too behind the scenes for my friends. One of them has a problem with Windows Vista. The mouse clickers are wont work for him in Vista, but it works fine in XP, so im looking for the function for things like scatter.

I've unlocked the useItem() function in conquer too

PHP Code:
static unsigned int ConquerUse_id;

void ConquerUse(unsigned int id)
{
    cout << "ConquerUse(" << id << ")" << endl;
    ConquerUse_id = id;

    /*
00491030  |. 50             PUSH EAX
00491031  |. 8BCF           MOV ECX,EDI
00491033  |. E8 4A270400    CALL Conquer.004D3782
    */

    asm("pushl _ConquerUse_id;\n"
        "movl $0x005DABB8, %ecx;\n"
        "movl $0x004D3782, %eax;\n"
        "call *%eax;\n");
} 
That could be useful for using a scroll that is in the inventory to go back to tc. And it also could be useful for ZERO-config autopotters, no assigning pots to F-keys or anything, and can work while minimised.

I just need to understand this ID-value, i can get it from OllyDBg and run time and cause the player to use pots and things from my bot, but i dont understand this ID-value yet, or how to find it.

Edit: Skip what i said about auto-it for now, because i just looked at it and right now you're doing more then i thought with auto-it.

ops, got exciting to get a reply from the great _fobos_ :D ... forgot to read all b4 replying. :p

But i'm sure that will change when you found some more functions ;)
besides that also consider that every patch TQ makes you will have to update and find the new function addresses so try to code it in a way that you can easily update it all.
maybe make the addresses changeable at runtime thru idk like textbox's so that when you get tired of updating this bot can still be fixed easily by others that can find the functions ;)


Thats a brilliant idea, then i can post the updated function addresses and everyone less experienced can just change the addresses in textboxes.

Really nice idea, thanks :D
04/26/2009 22:19 null#35
hows about coding a proxy to do all this offscreen? ^_^ (just a suggestion)
04/27/2009 00:27 _fobos_#36
Quote:
Originally Posted by null View Post
hows about coding a proxy to do all this offscreen? ^_^ (just a suggestion)
hows about cracking the encryption i know the way to do it was posted but got removed again unfortunately before i had time to play with it :(

If anyone saved the info about it and would like to share it thru here or a PM would be appreciated :p
04/27/2009 15:06 raptordin#37
Quote:
Originally Posted by _fobos_ View Post
hows about cracking the encryption i know the way to do it was posted but got removed again unfortunately before i had time to play with it :(

If anyone saved the info about it and would like to share it thru here or a PM would be appreciated :p

Check with DAN, yes he did go commercial and It is his right but if he trusts you enough he might share.
04/27/2009 15:14 _fobos_#38
Quote:
Originally Posted by raptordin View Post
Check with DAN, yes he did go commercial and It is his right but if he trusts you enough he might share.
But i thought he got it from unknownone to begin with, he posted it so ye.
But i got the info now anyway so its ok xD
04/27/2009 15:16 clintonselke#39
This can all be done with co-functions (and also be offscreen), we just need to find the functions for talking to NPCs, anwering NPCs, opening WH, and moving items In and Out of WH. If we can find all those functions, then we're done.

Edit: With my limited knowledge of finding co-functions, I am only able to find them if they cause a "[System]" error message, like "Please rest before using spell", "Target is out of range", "Use must use Ctrl to attack guard" and things like that. If anyone knows a [System] error message u can cause from talking to an NPC or from moving items in and out of wh, let me know and i'll try my best to find these functions :D... Thanks
04/27/2009 15:22 _fobos_#40
Quote:
Originally Posted by clintonselke View Post
This can all be done with co-functions (and also be offscreen), we just need to find the functions for talking to NPCs, anwering NPCs, opening WH, and moving items In and Out of WH. If we can find all those functions, then we're done.
Would be a lot easier just hooking send() and recv() can do it all thru that just send the packets and your done :p
04/27/2009 15:27 raptordin#41
Quote:
Originally Posted by _fobos_ View Post
But i thought he got it from unknownone to begin with, he posted it so ye.
But i got the info now anyway so its ok xD
True, I forgot that, still they are in league together.

and good news that you got it, wish you the best of luck.

Quote:
Originally Posted by clintonselke View Post
This can all be done with co-functions (and also be offscreen), we just need to find the functions for talking to NPCs, anwering NPCs, opening WH, and moving items In and Out of WH. If we can find all those functions, then we're done.

Edit: With my limited knowledge of finding co-functions, I am only able to find them if they cause a "[System]" error message, like "Please rest before using spell", "Target is out of range", "Use must use Ctrl to attack guard" and things like that. If anyone knows a [System] error message u can cause from talking to an NPC or from moving items in and out of wh, let me know and i'll try my best to find these functions :D... Thanks

Good luck to you indeed, I see a very interesting bot coming from a very interesting programmer coming soon to the light.
04/27/2009 15:30 clintonselke#42
Thats true, bcuz packets would be sent on the action. Meaning we can control when the packets occur and catch it at the right moment. I still rather memory based, because my experience with encryption is very limited xD . And im worried TQ will change their encryption again, much easier to update a function address, bcuz the functions have a pattern to them.

Edit: Time to buy lucky arrows and over-fill the wh for the error message lol.

Edit: Right, Item in WH no problem

Code:
004871DE   FF75 0C          PUSH DWORD PTR SS:[EBP+C]
004871E1   8BCE             MOV ECX,ESI
004871E3   E8 68920000      CALL Conquer.00490450
It takes one parameter, the item (by its ID) to move into the wh.
04/27/2009 16:01 _fobos_#43
Quote:
Originally Posted by clintonselke View Post
Thats true, bcuz packets would be sent on the action. Meaning we can control when the packets occur and catch it at the right moment. I still rather memory based, because my experience with encryption is very limited xD . And im worried TQ will change their encryption again, much easier to update a function address, bcuz the functions have a pattern to them.

Edit: Time to buy lucky arrows and over-fill the wh for the error message lol.

Edit: Right, Item in WH no problem

Code:
004871DE   FF75 0C          PUSH DWORD PTR SS:[EBP+C]
004871E1   8BCE             MOV ECX,ESI
004871E3   E8 68920000      CALL Conquer.00490450
It takes one parameter, the item (by its ID) to move into the wh.
That wouldnt make sense tho, I mean think about it what if you have more then 1 of the same item which is it going to store?
Dont you mean the UID?
04/27/2009 16:08 clintonselke#44
Quote:
Originally Posted by _fobos_ View Post
That wouldnt make sense tho, I mean think about it what if you have more then 1 of the same item which is it going to store?
Dont you mean the UID?
Yeap, the UID :D ... sorry im new :p

Edit: Those UIDs on the items are gonna be a pain to work out. I remember from ur thread how the PlayerNames are close to the Player's UIDs, maybe the items ID will sit closely to the items UID (or item name if im extremely lucky).
04/27/2009 16:17 _fobos_#45
Quote:
Originally Posted by clintonselke View Post
Yeap, the UID :D ... sorry im new :p
I just went to check thats not the right function :p
This is the right function, it doesnt take item ID as parameter but inventory slot ID starting at 0 as first slot;)

Code:
00490768              FFB6 40F30A00        PUSH DWORD PTR DS:[ESI+AF340]
0049076E              8BCF                 MOV ECX,EDI                                         ; Conquer.005DABB8
00490770              E8 D6270400          CALL Conquer.004D2F4B
Page 3 of 4 12 3 4