[Release] Base Reader

01/21/2013 07:42 WarmongerR23#1
Here is one I wrote in 5 minutes. To use just place in the LastChaos clients "Bin" folder alongside Engine.dll, and run.

[Only registered and activated users can see links. Click Here To Register...]

Download: [Only registered and activated users can see links. Click Here To Register...]

Have fun!

Edit: Fixed, also note EP2 clients don't have _pUIMgr! that's why you get : 0
Note: This only works on clients pre-2013 or older!
01/21/2013 12:57 BongMaster#2
Nice but the _pUIMgr appears wrong!
in your program, he shows at _pUIMgr 10532E30
But the right _pUIMgr would 10735AA0

tested on TakeOver Lc
01/21/2013 13:57 WarmongerR23#3
Quote:
Originally Posted by BongMaster View Post
Nice but the _pUIMgr appears wrong!
in your program, he shows at _pUIMgr 10532E30
But the right _pUIMgr would 10735AA0

tested on TakeOver Lc
My bad, I was using EP2 engine when I wrote it (EP2 doesn't have_pUIMgr). Anyways, I updated original post with right one. :)
02/14/2013 00:56 jhoselube#4
Hi WarmongerR23, do you know how to take new bases from last update in last chaos bilagames? it is similar to aeria games. Thanks for you help.

Note: With this Base Reader just show 0 in all bases.
02/14/2013 01:45 blade5000#5
bei usa geht es nicht kommt nur 0

Quote:
Base Reader By Warmonger

Engine.dll Loaded
Examined 7125 Functions

_pnetwork: 0
_pUIMgr: 0
g_slZone: 0
_CurrentTickTimer: 0
CTimer::TickQuantum: 0
_pTimer: 0
_pUIBuff: 0
schade

mfg
02/14/2013 01:58 WarmongerR23#6
Quote:
Originally Posted by jhoselube View Post
Hi WarmongerR23, do you know how to take new bases from last update in last chaos bilagames? it is similar to aeria games. Thanks for you help.

Note: With this Base Reader just show 0 in all bases.
Quote:
Originally Posted by blade5000 View Post
bei usa geht es nicht kommt nur 0

schade

mfg
Yes, this is because of the patch Barunson released that strips all function names from the engine. I am working on one that uses signatures instead, tho I am unsure if I will release it in the future (it could hurt/effect my bot sales).
02/14/2013 07:41 wurstbrot123#7
Quote:
Originally Posted by WarmongerR23 View Post
I am working on one that uses signatures instead, tho I am unsure if I will release it in the future (it could hurt/effect my bot sales).
Not enough succes with your privatserver stuff ? :/ :D
02/15/2013 01:10 WarmongerR23#8
Quote:
Originally Posted by wurstbrot123 View Post
Not enough succes with your privatserver stuff ? :/ :D
I quit developing publicly a while back, I do private work for servers but nothing more then that. Really good hacks tho can bring in much more money then custom files and fixes. Fabi's hack is only GDI and does nothing more out of the normal other then the public damage hack. And he's made over 1800 euro off his alone, so I imagine all the work im putting into mine it should almost double that. Server owners aren't vague on spending money to improve their servers. They rather run them insecure, and full of bugs (look at Odiseum, its a hackers playground). At that point I decided to market the two things in my signature, and custom requests. You can never have too much money. :bandit:
02/15/2013 12:11 wurstbrot123#9
You probly wont get that much money.
Especially because you do USA stuff, it doesnt have
a Anticheat like xTrap, Hackshield etc. So there is a lot
free stuff around for it. You also have a kinda bad reputation.
02/15/2013 15:10 blade5000#10
wollen alle nur geld haben so ein scheiss ..........
frag mich nur warum die leute noch zahlen dafür

mfg
02/15/2013 23:23 WarmongerR23#11
Quote:
Originally Posted by wurstbrot123 View Post
You probly wont get that much money.
Especially because you do USA stuff, it doesnt have
a Anticheat like xTrap, Hackshield etc. So there is a lot
free stuff around for it. You also have a kinda bad reputation.
If I get time I will be adding Gamigo support to it, Xtrap doesn't detect my hack at all when injecting it. Tho I tend to refuse to support a German game (I don't speak German). That's why I am mostly aimed at Aeria, as they have no protection. So attaching assemblers, debuggers, and my own hooks doesn't phase the client. If it works on Aeria it will work the same on Gamigo (point blank). Also keep in mind my hack isn't the same nooby trainers you see around here. I plan on moving it away from memory, and onto packets later on once the algorithm can be easily replicated. Lastly, im comfortable saying I do have a bad reputation. It doesn't mean im bad at what I do, I just tend to do bad things to good people.
02/17/2013 01:48 bonsaj#12
Quote:
Originally Posted by WarmongerR23 View Post
...I just tend to do bad things to good people.
dont worry, u wont hurt alot good ppl in this com anyway^^
02/23/2013 20:45 kingscraft#13
Und nun? Hat jemand eine Idee wie wir in Zukunft die Basen finden können? Mit CE _pNetwork suchen geht nicht mehr und offsets scannen geht auch nicht mehr. Nachdem "find out what writes to this address" aufgerufen wird gibt es (zumindest beim USA server) ein DC

Wer hat einen Rat für mich?
02/24/2013 15:04 Sentence'#14
Quote:
Originally Posted by kingscraft View Post
Und nun? Hat jemand eine Idee wie wir in Zukunft die Basen finden können? Mit CE _pNetwork suchen geht nicht mehr und offsets scannen geht auch nicht mehr. Nachdem "find out what writes to this address" aufgerufen wird gibt es (zumindest beim USA server) ein DC

Wer hat einen Rat für mich?
Pattern Scanner
02/24/2013 15:26 -STORM-#15
Falls US nicht neuerdings so etwas wie xTrap verwendet, ist der Absturz bei "Find out what accesses/writes" nichts weiter als eine Debugger-Detection (in diesem Fall wohl ein Memory Breakpoint on access).
Um das zu umgehen, gibt es viele Wege.
Meistens verwendet die Detection IsDebuggerPresent. Man kann diese Funktion hooken bzw. irgendwie so ändern, dass sie auch False zurückgibt, wenn tatsächlich ein Debugger verwendet wird.
Alternativ gibt es viele nicht so weit verbreitete Debugger, die nicht detected werden.
Für Olly gibt es diverse Plugins um Detections zu umgehen.
Den CE Debugger wird man wohl nicht ohne weiteres verwenden können.
Falls man die Base Addresse bereits kennt, kann man für Level1-Pointer das fehlende Offset aber recht einfach berechnen ([Only registered and activated users can see links. Click Here To Register...]).