create a bot with autoit

Ruben10_ · 06/06/2015, 15:52

Hi, I 'm trying to create a bot with AutoIt , is that the works everywhere except in the Aura Kingdom.

For example , I want automatic press 1 , and in the browser ( for example) works , but not in the Aura Kingdom.

It's my problem, AutoIt now can not do that or Aura Kingdom has an anti cheat system? Thank you and sorry for my english

Eagle300 · 06/06/2015, 18:42

It works. Try to put #RequireAdmin at the very top of the document.

Ruben10_ · 06/06/2015, 18:55

Quote:

Originally Posted by Eagle300

It works. Try to put #RequireAdmin at the very top of the document.

perfect! It was exactly what was wrong , thanks!

and may make my bot work even this in the background? (with AK minimized) thanks!

Eagle300 · 06/06/2015, 19:45

I dont think it can work with Ak minimized since AutoIt is just using what the monitor is showing. But im not sure because im a noob with AutoIt^^ Just had the same problem as you when i wrote a small script.

Daifoku · 06/06/2015, 20:23

minimized ? Yes, it's possible.
Can you code it ? I doubt it ;-)

I'm not that familiar with autoit but this should do the trick:

Call the internal function of AK which handles the return of the keyboard input from

Ruben10_ · 06/06/2015, 23:19

Quote:

Originally Posted by Daifoku

minimized ? Yes, it's possible.
Can you code it ? I doubt it ;-)

I'm not that familiar with autoit but this should do the trick:

Call the internal function of AK which handles the return of the keyboard input from

which would AK .dll, game.bin ? I know it's not a .dll, but I can not think of anything more. thanks!

Daifoku · 06/07/2015, 00:01

Reverse anything related to the user's input.
You probably want to analyse something like user32.TranslateMessage, do some conditional Breakpoints to filter out the Keyboard input, and take a look at the stack.
Once you found the right function, you could try to call it with DllCall (but i doubt that the function is named...) or DllCallAddress

PS: if I remember correctly, AK uses user32.TranslateMessageEx

SirHits · 06/07/2015, 04:12

I don't Know about programming, but with autoit can make a fish bot or lock the fish bar with the window minimized? Can you give me tips i want try make one
Edit: For GAIA(Spanish) Server

Ruben10_ · 06/07/2015, 09:10

Quote:

Originally Posted by SirHits

I don't Know about programming, but with autoit can make a fish bot or lock the fish bar with the window minimized? Can you give me tips i want try make one
Edit: For GAIA(Spanish) Server

I'm working the bot for GAIA (Spanish) server. also had thought about doing a bot fishing and autokill , any help is good for the only public Spanish bot server, thanks

Daifoku · 06/07/2015, 12:22

If you don't like my TranslateMessage approach (which is probably the easiest solution), you could take a look at the following:

Source:

Send() in AutoIt uses DllCall to move the mouse or send a key to a process.
DllCall is setting a virtual key flag => AK is rejecting the Send() command.
As you can see in the image, you have to write your own driver to send keys.
There is also the possibility to use a keyboard wrapper which intercepts keycodes at hardware Level and forwards them.

All in all there is no easy method to make such a bot minimized.

Ruben10_ · 06/08/2015, 00:01

Quote:

Originally Posted by Daifoku

If you don't like my TranslateMessage approach (which is probably the easiest solution), you could take a look at the following:

Source:

Send() in AutoIt uses DllCall to move the mouse or send a key to a process.
DllCall is setting a virtual key flag => AK is rejecting the Send() command.
As you can see in the image, you have to write your own driver to send keys.
There is also the possibility to use a keyboard wrapper which intercepts keycodes at hardware Level and forwards them.

All in all there is no easy method to make such a bot minimized.

ohh thanks! I will look when I have time! I've been testing fishing in cheat engine, Anyone know how to send values of cheat engine to AutoIt? if possible.. thank you!

SEVENS · 06/09/2015, 02:21

Hi all...

In according to this post:

Quote:

Originally Posted by Daifoku

minimized ? Yes, it's possible.
Can you code it ? I doubt it ;-)

I'm not that familiar with autoit but this should do the trick:

Call the internal function of AK which handles the return of the keyboard input from

I did a little tool for debugging functions, from the stack:

TranslateMessageEx
TranslateMessage
DispatchMessageW
PostMessageA

Returns listed below:

# hook debugger for TranslateMessageEx function #

HOOK_PARAMETER[1] 1996781609 / HEX[8] 77047829
HOOK_PARAMETER[2] 1638056 / HEX[8] 0018FEA8
HOOK_PARAMETER[3] 0 / HEX[8] 00000000
HOOK_PARAMETER[4] 1996817850 / HEX[8] 770505BA
HOOK_PARAMETER[5] 1638128 / HEX[8] 0018FEF0

CLIENT_HANDLE 0x013203CE

# hook debugger for TranslateMessage function #

HOOK_PARAMETER[1] 5285164 / HEX[8] 0050A52C
HOOK_PARAMETER[2] 1638056 / HEX[8] 0018FEA8
HOOK_PARAMETER[3] 7601 / HEX[8] 00001DB1
HOOK_PARAMETER[4] 2 / HEX[8] 00000002
HOOK_PARAMETER[5] 1 / HEX[8] 00000001

CLIENT_HANDLE 0x013203CE

# hook debugger for DispatchMessageW function #

HOOK_PARAMETER[1] 5285174 / HEX[8] 0050A536
HOOK_PARAMETER[2] 1638056 / HEX[8] 0018FEA8
HOOK_PARAMETER[3] 7601 / HEX[8] 00001DB1
HOOK_PARAMETER[4] 2 / HEX[8] 00000002
HOOK_PARAMETER[5] 1 / HEX[8] 00000001

CLIENT_HANDLE 0x013203CE

# hook debugger for PostMessageA function #

HOOK_PARAMETER[1] 1986258182 / HEX[8] 7663E506
HOOK_PARAMETER[2] 6228576 / HEX[8] 005F0A60
HOOK_PARAMETER[3] 40000 / HEX[8] 00009C40
HOOK_PARAMETER[4] 1316 / HEX[8] 00000524
HOOK_PARAMETER[5] 1 / HEX[8] 00000001

CLIENT_HANDLE 0x013203CE

Which of the returnees parameters should I use to call remotely?!? ...
A simple mouse click or keystrokes..

Quote:

Originally Posted by Daifoku

Call the internal function of AK which handles the return of the keyboard input from

Ty for help!

Daifoku · 06/09/2015, 10:49

Quote:

Which of the returnees parameters should I use to call remotely?!? ...
A simple mouse click or keystrokes..

I don't know which of them, you have to filter out the funtions that send the keyboard input to TranslateMessageEx. Multiple functions are sending data to TranslateMessageEx and only one of them handles the keyboard input.

You should analyze the function in olly because your tool is not displaying constant names and you only take a snapshot of the current stack but TranslateMessageW gets called more than 10 times per second with different parameters from different functions

SEVENS · 06/09/2015, 12:29

Quote:

Originally Posted by Daifoku

I don't know which of them, you have to filter out the funtions that send the keyboard input to TranslateMessageEx. Multiple functions are sending data to TranslateMessageEx and only one of them handles the keyboard input.

You should analyze the function in olly because your tool is not displaying constant names and you only take a snapshot of the current stack but TranslateMessageW gets called more than 10 times per second with different parameters from different functions

Ok , I'll try to debug more specifically "TranslateMessageEx".
Thank you for the explanation!

SEVENS · 08/28/2015, 00:35

Heyyy Daifoku,

Im back to the Aura and my little fish bot, this time I used Olly to debugg (TranslateMessageW).

Procedure in Olly:

01 - Follow TranslateMessageW
02 - Set conditional Log BP at TranslateMessageW pointer [Alt+F4]
03 - Set in conditional Log BP Expression = [esp+4]
04 - Set in conditional Log BP Decode Value as = Pointer to MSG Estructure Unicode.

Olly Return this LOG.

Spoiler

I need to do this so that my bot be more faster:

COND: 0018FEA8 WM_LBUTTONDOWN hw = E036A ("Aura Kingdom Online ...") Keys = MK_LBUTTON X = 330. Y = 396.

I try ::

Code:

$MK_LBUTTON = 0x0001
$WM_LBUTTONDOWN = 0x0201
$WM_LBUTTONUP = 0x0202
$AK_HWND = 'Aura Window Client HWND'

DllCall("user32.dll", "int", "PostMessage", "HWND", $AK_HWND, "UINT", $WM_LBUTTONDOWN, "WPARAM", $MK_LBUTTON  , "LPARAM", BitOR( 396 * 0x10000, BitAND(330, 0xFFFF)))

DllCall("user32.dll", "int", "PostMessage", "HWND", $AK_HWND, "UINT", $WM_LBUTTONUP, "WPARAM", 0, "LPARAM", BitOR( 396 * 0x10000, BitAND(330, 0xFFFF)))

And sucess Olly return from log:

75A47839 COND: 0018FEA8 WM_LBUTTONDOWN hw = E036A ("Aura Kingdom Online ...") Keys = MK_LBUTTON X = 330. Y = 396.

75A47839 COND: 0018FEA8 WM_LBUTTONUP hw = E036A ("Aura Kingdom Online ...") Keys = 0 X = 330. Y = 396.

but the click not send...

You can help me pointing a mistake or wrongdoing ? or show the correct function with parameters??

Your help is greatly appreciated.

Cya!!