mob scan

servus leute,

nun ja, wie der titel schon sagt, suche ich eine möglichkeit, um mobs, die um den charakter schwirren, zu finden.
da hier etliches games schon zerlegt worden sind, hoffe ich mal ne knorke antwort zu finden.
in welchem game ich das versuche ist ja erstmal irrelevant.
ich kann schon die ids und hp von den mobs per klick abfragen. toll ^^
nur wie wird generell sone umgebung gespeichert. ich mein, die mobs müssen ja inne art linked list
stehen und das abhängig von dem sichtradius.
gibt es irgendwas generelles, brauchbares, wie ich sowas finden kann, oder wie son asm code aussehen könnte?
wenn nicht, muss ich meine unsaubere variante mit paar patches nehmen >.<., will net :D
also lasst knacken :bandit:

1. Um welches Game es sich hat ist verdammt nochmal essentiell
2. Zeig doch mal was du da schon hast, damit man auch weiß wo man ansetzen könnte
oder ob es einfach nur bullshit is...

sry aber solche pappnasen gibt es auch hier...

Greetz

vertical : Keep cool dude....

well biophyte, you could analyze the programs memory, to see which monsters are in viewing range around your character. theres an autoit bot for wow for example using the method i just mentioned, but i don't know what the name of this autoit script was

the other thing is packet analyzing. well you inject a dll into the game and hook the recv()-function, the hard thing is to analyze the packets plus if theres an encryption theres more than just an analysis needed. you'd have to reverse the client and check how the game does the packet encryption

Quote:

Originally Posted by al_j vertical : Keep cool dude.... well biophyte, you could analyze the programs memory, to see which monsters are in viewing range around your character. theres an autoit bot for wow for example using the method i just mentioned, but i don't know what the name of this autoit script was the other thing is packet analyzing. well you inject a dll into the game and hook the recv()-function, the hard thing is to analyze the packets plus if theres an encryption theres more than just an analysis needed. you'd have to reverse the client and check how the game does the packet encryption

It depends which game he means, but why take the easy way if theres a hard way huh? :P

Most games store the distance to a mob (Also the Coordinates of the Mobs), due Skill usage etc. You can look for that value/function by using your favourite Memory Search tool or a proper debugger. The idea to hook the winsock control also only applicates if you want to make a Clientless/Packetbot, I think its too much of a effort if you just have a simple macro.

What game is it and what does your Bot consist of already?

Yeah you're right, if he wants to write a macro ... a dll is too much for him...
But injecting a dll doesnt mean you have to write a clientless-/packetbot,
although it would be kinda strange injecting a dll and hooking winsock functions
to write a macro/hotkey bot XD

Quote:

Originally Posted by al_j Yeah you're right, if he wants to write a macro ... a dll is too much for him... But injecting a dll doesnt mean you have to write a clientless-/packetbot, although it would be kinda strange injecting a dll and hooking winsock functions to write a macro/hotkey bot XD

Yea that was exactly my thought lol, although I would believe that you could make a D3D hook that outputs the Coordinates and calculate the distance, depending on the game. Takes like 2 minutes and you don't have to constantly update the offsets etc. Hooray Ghetto Methods.

yes vert, it isnt nice that the forum get abused by kids who r just begging. but im not that kind. :)

thanks for response all.
yes, im working on a bot, but not clientless even not directly throught packets.
im reusing functions of the game dlls.

d3d hacking is awesome but im too less experienced yet. im working on it :D.

yes, i found out that any mob receives a new id when its in viewing range.
i scanned alot with ce, finding any pointers, structures or storage possibility. but im lost.
i found some kind of function that scans for any entity, even mobs. but there r a lot of entities..
and till now i got no point how to reverse this.

thats why i asked for possibilities.
if i name the game, would u guys help me out?

i dont want to make source public or sth. else. this kids who beg 4 anything, can goto hell.
im even interested in detouring recv/send and crpyt functions but as nor u said.
why going the hard way, if theres a simple way :D
well sure, clientless ist definitly more efficient. so? :D

Quote:

Originally Posted by biophyte yes vert, it isnt nice that the forum get abused by kids who r just begging. but im not that kind. :) thanks for response all. yes, im working on a bot, but not clientless even not directly throught packets. im reusing functions of the game dlls. d3d hacking is awesome but im too less experienced yet. im working on it :D. yes, i found out that any mob receives a new id when its in viewing range. i scanned alot with ce, finding any pointers, structures or storage possibility. but im lost. i found some kind of function that scans for any entity, even mobs. but there r a lot of entities.. and till now i got no point how to reverse this. thats why i asked for possibilities. if i name the game, would u guys help me out? i dont want to make source public or sth. else. this kids who beg 4 anything, can goto hell. im even interested in detouring recv/send and crpyt functions but as nor u said. why going the hard way, if theres a simple way :D well sure, clientless ist definitly more efficient. so? :D

Naming the game would help.

its lastchaos, i think u heard about

Quote:

Originally Posted by biophyte its lastchaos, i think u heard about

Finally understood what you meant, I thought you were trying to get the Mobs that are targetting you :)
But Last Chaos doesn't have a visible function to target the nearest mob.

However I was never able to accomplish making a dll in C++ that lets me call functions of another process. Despite everything being correct, so please don't be harsh to me. There has to be a function that only draws monsters every 10x10 or so, because I know that Last chaos has a limited viewing range that depends on the server. So the idea of al_j wasn't that bad seeing as you already hooked the game. The only opinion of it I have right now would be my idea of before. I know that it records all entities, but you can also get the entitity name. Monsters, NPCs, Quest Monsters, Bosses all have a prefix to indentify and put them into a class.
Can't remember it well enough to give you the special symbols (All I still know is that it displayed the Monster Entity with 3 spaces infront. eg " Young Fox"), but should be easy to lookup in CheatEngine if you have a Mob Targetted. Like that you could see which Entity of the function is a Monster and what not. But again, my knowledge is that of a newbie.

no i wont be harsh to u or some1 else, why xD
u mean ur idea with d3d hooks? would be great if u can show me.
cuz..

my build of a bot is already working fine, but it has lots of patches to collect entities, identify it as a
mob and release when its dead.
thats why im searching for different ways. something different would be great.

and lastchaos guys patching alot >.<

calling functions of other processes is quite easy, if u know params and u injected ur dll correctly. thats it.
or am i missunderstanding sth?

lets raise our lvl :D

ich schieb das mal in den Gamehacking/Coding bereich, passt da glaub ich noch etwas besser hin

Quote:

Originally Posted by biophyte no i wont be harsh to u or some1 else, why xD u mean ur idea with d3d hooks? would be great if u can show me. cuz.. my build of a bot is already working fine, but it has lots of patches to collect entities, identify it as a mob and release when its dead. thats why im searching for different ways. something different would be great. and lastchaos guys patching alot >.< calling functions of other processes is quite easy, if u know params and u injected ur dll correctly. thats it. or am i missunderstanding sth? lets raise our lvl :D

Actually it was just some suggestion to your function of getting all the entities around you, so I thought it was the problem to identify them correctly and fast since the struct you have probably contains the name along with the ID etc. That was my assumption. I don't know D3D myself, I only do it for some games where the fooliage or some other things annoy me, but its kinda useless because my first thought was that you had problems location mobs who are the nearest to your character, until I heard Last Chaos which has no ingame targetting for mobs, so I understood it finally.

I think im correctly injecting my dll because I can write to the own memory and get my debug messages. I don't even get an error message or whatsoever, its really weird. Basically what I tried first was to get a Console Message ingame in the Quake Engine, a tutorial used the same setup (same version, nothing is wrong, same function in the game etc). But It just won't output anything. I gave up on this at some point I guess, would be awesome if you can share some tutorials that are game specific. Might be my C++ .NET bitchin. In Last Chaos you do have all the functions names in plaintext for use though.

biophyte sry for my first post :(
It's nice to see you guys sparkling of ideas and getting closer to the aim.
I'm sorry, i'm not familiar with LostChaos, but i'll try to get clue and will
keep an eye upon this thread :)

Greetz

no worries vert ;)
well, i cant locate nearest mob, but all mobs around me, with all entities/lvl/hp/name. just a stupid jmp and reading registers. xD any function ingame uses this entity to interact.
i try now to encode packets and so on. im on the way to make a full hackit.
any help is welcome. :D

i think my tuts wouldnt share huge knowledge. if ur functions doesnt work, maybe then u forget something to reverse at all. hex-rays decompiler for ida pro helped me alot understanding some code.