Florensia & AutoIT Bot Script v1.0

10/10/2009 04:31 r3dbull88#1
Hi guys,
just finished to wrote down what you will see below.

It is a simple AutoIT script which works like this:
- Finds a target
- Hit target until it dies [Normal attack only]
- Loot target
- Check Character HP, If low it rests, otherwise it will loop back from start.

The only part missing in this work is a valid method to bypass HShield.
I have tried the method being used for S4 League:
[Only registered and activated users can see links. Click Here To Register...]
Injecting FlorensiaEN.bin instead of S4 Client... but I got detected after 5-10 mins....

SO THIS ISN'T A FULLY WORKING RELEASE, DON'T ASK FOR ONE

*IMPORTANT*

1) I would really appreciate suggests on how to bypass HShield.
2) I would really appreciate suggests on how to optimize the "Get Monster HP/Get Character HP" part, cause I really think that GetPixelColor as I am doing isn't the best one...

Note: This is my first time trying on something like this ;)
[Actually optimized for my computer for Pixel retrieving part]
[The game should be set in FullScreen Mode - Resolution: 1024x768x32]
[Automatic LOOT Option should be flagged in-game]


Source of V1.1 - Replaced numbers of skill bars with in-game built actions.
Code:
Sleep(5000)
Call ("FindTarget")
Func FindTarget()
   Sleep ( 500 )
   Send( "{TAB}" )
   Sleep ( 500 )
   Call ("Attack")
EndFunc

Func Attack()
   Send("{SPACE}")
   $MobHP = PixelGetColor(411,37)
   If $MobHP = 0x050103 Then
	   Sleep(1000)
	   Call("Attack")
   Else
	   Send("{SPACE}")
   EndIf

   Call ("Loot")
   $CharHP = PixelGetColor(143,36)
   If $CharHP = 0x611731 Then
   Call ("Rest")
   Else
	   Call ("FindTarget")
	   EndIf
   EndFunc
   
   Func Rest()
   Send ("{Z}")
   sleep (10000)
   Send ("{W}")
   Call ("FindTarget")
   EndFunc
   
   Func Loot()
	   Sleep(1000)
	   Send("{X}")
	   Sleep(3000)
	   Call ("FindTarget")
   EndFunc
I'm attaching the source and the compiled exe.
The password for the Archive is: [Only registered and activated users can see links. Click Here To Register...]
10/10/2009 04:35 r3dbull88#2
Checked on VirusTotal, no virus founds.
10/10/2009 10:05 muse-#3
nice first try dude.
but anyway the bypass is needed i lookin for one ,too
how u managed the hp,i only see pixelgetcolor,how it should work ô.o
and it would nice for some who not know autoit to explain which skill is which key.
10/10/2009 13:04 LemoniscooL#4
okay nice try but...

  1. use timers instead of sleep
  2. use commandsend instead of send
  3. dont use pixelgetcolor ... it sucks xD
  4. florensia already has shortcuts to attack, next mob, loot etc they are as follows
    Code:
    Next Mob: [Tab]
    Attack: [Space]
    Loot: [X]
    SitDown: German: [Y] | English: [Z]
  5. you forgot to tell the ppl to set the Game Option for Automatic Loot
  6. you forgot to tell the ppl what solution they should set your game to and weather it is FullScreen or windowed mode, if windowed mode where to place the window etc... cuz you use pixelgetcolor and it only gets the color of a certain place on your screen

for a HShield bypass get a disassembler and look arount in the FlorensiaEN.bin its really not hard but actually there seems to be a server side check you would have to emulate with c++

if this would work it could be an alternate bot until our new bot is released xD

greetz
10/10/2009 17:20 r3dbull88#5
Quote:
Originally Posted by pwna=) View Post
nice first try dude.
but anyway the bypass is needed i lookin for one ,too
how u managed the hp,i only see pixelgetcolor,how it should work ô.o
and it would nice for some who not know autoit to explain which skill is which key.
Thank you =)
I managed to involve the HP Check in a very very simple way:

- I first got coordinates and the pixel color of the very initial part of the monster HP Bar.

[Only registered and activated users can see links. Click Here To Register...]

I got the coordinates and the pixel color by this external Func:

HotKeySet("{F4}", "GetPixelColor")
While 1
Sleep (1000)
WEnd

Func GetPixelColor()
$pos = MouseGetPos()
$var = PixelGetColor( $pos[0] , $pos[1] )
MsgBox(0,"The hex color is", Hex($var, 6))
MsgBox(0, "Mouse x,y:", $pos[0] & "," & $pos[1]);
EndFunc


Quote:
Originally Posted by eMale View Post
okay nice try but...

  1. use timers instead of sleep
  2. use commandsend instead of send
Ehm...
I should study on timers and commandsend to check weither them are better or just trickier to implement XP

Quote:
Originally Posted by eMale View Post
  1. dont use pixelgetcolor ... it sucks xD
Alternative to it?
Quote:
Originally Posted by eMale View Post
  1. florensia already has shortcuts to attack, next mob, loot etc they are as follows
    Code:
    Next Mob: [Tab]
    Attack: [Space]
    Loot: [X]
    SitDown: German: [Y] | English: [Z]
Didn't know this, I'm going to change it now, so there is no problem to Skill Bar settings of every different user.

Quote:
Originally Posted by eMale View Post
  1. you forgot to tell the ppl to set the Game Option for Automatic Loot
  2. you forgot to tell the ppl what solution they should set your game to and weather it is FullScreen or windowed mode, if windowed mode where to place the window etc... cuz you use pixelgetcolor and it only gets the color of a certain place on your screen
Yeah... the Automatic Loot, forgot that :P
About Resolution and Window/Full Screen.... I didn't mention that since it wasn't meant to be a working release and I mentioned that the program was optimized for my PC. =P
By the way I'll update my first post wih those infos :)

Quote:
Originally Posted by eMale View Post
for a HShield bypass get a disassembler and look arount in the FlorensiaEN.bin its really not hard but actually there seems to be a server side check you would have to emulate with c++

if this would work it could be an alternate bot until our new bot is released xD

greetz
I really don't get this part lul...
I can get inside FlorensiaEN.bin.... but...
"there seems to be a server side check you would have to emulate with c++"
How can you "translate" this into code XP?

Thanks for every suggestion :D


EDIT:// Updated to version 1.1
10/10/2009 18:17 LemoniscooL#6
timers and commandsend are both .. better and trickier ^^
you cant translate my last sentence simply into code .. thats higher knowledge of programming/gamehacking
an alternative to pixelgetcolor is to read the memory values
10/10/2009 18:32 r3dbull88#7
Quote:
Originally Posted by eMale View Post
timers and commandsend are both .. better and trickier ^^
you cant translate my last sentence simply into code .. thats higher knowledge of programming/gamehacking
an alternative to pixelgetcolor is to read the memory values
I think I will go deeper on this.
Next function to implement:
Get Mob's HP / Char HP by memory read.

Will I get it?

Let's try... =P *excited*

*Any hints on finding address / pointers?
10/10/2009 18:36 muse-#8
it should be simple to read them out,
but anyway it all kinda nice if u finished the bot...
then u have the prob with the hs bypass so.. >.<
10/10/2009 18:39 LemoniscooL#9
find the adresses with cheat engine but for that you need hs to be bypassed or an undetected one ;)
and you need to find the static adesses and the offsets to form pointers in autoit ^^
10/10/2009 19:30 r3dbull88#10
Quote:
Originally Posted by eMale View Post
find the adresses with cheat engine but for that you need hs to be bypassed or an undetected one ;)
and you need to find the static adesses and the offsets to form pointers in autoit ^^
I can't attach FlorensiaEN.bin to CE... how to do that?

I get the error:
Error while opening this process

I'm trying to attach CE to this process after Florensia Client is being launched, cause otherwise I get HackShield-Catched =P
10/10/2009 19:59 LemoniscooL#11
without bypassing hackshield you wont get the normal ce to work ^^
10/10/2009 21:04 r3dbull88#12
Quote:
Originally Posted by eMale View Post
without bypassing hackshield you wont get the normal ce to work ^^
You're right.... so... My learning session stops here?
10/10/2009 21:42 LemoniscooL#13
hm well you could continue lerning how to bypass hs ^^
10/11/2009 03:11 r3dbull88#14
Quote:
Originally Posted by eMale View Post
hm well you could continue lerning how to bypass hs ^^
Can you suggest me a good disassembler for .bin files? [Currently using XEdit, but the DEMO version :/]

I really need some hints on how to find the offsets regarding HS... This is making me crazyeeeh

Thanks in advance =P
10/11/2009 09:11 Neyoel#15
OllyDbg is a very nice one and its free .. google it ^^