[RELEASE][.NET] Hooking library, take two

[IAmHawtness]

Originally Posted by metallica556

when i enable auto hunt he doesn't do enything
and i updated it to the last conquer patch

You probably need to update the position and name offsets in the "PlayerPacket".

[shitboi]

Originally Posted by Belth

5609 Addresses:
SendPacketFunction = 0x6C8F56
ReceiveLoop = 0x6C9833

This is how I find the addresses:

Recv Loop
1. Search all referenced text strings for "catch error in process msg" without quotes.
2. Trace back until I find "TEST EAX, EAX" followed by "JNZ SHORT <ADDRESS>".

Send Packet Function
1. Search for the binary string "55 8D AC 24 FC DF FF FF B8 04 20 00 00".

Removing the "You can't jump that far." message
1. Search for the constant 186C0.
2. Trace back to the first "JLE <ADDRESS>" command.
3. Replace JLE (7E) with JMP (EB).
*Note: doing this also means that you can attempt to jump further than the server allows (which will disconnect you) so you should validate all jump packets from the client.

Lock client at 60 FPs
1. Search all intermodular calls for Kernel32.Sleep.
2. Trace back and find ADD ECX, 19.
3. Trace back and find LEA EDX, DWORD PTR DS:[ECX+19].
4. Change 19 to another value. The lower the value the higher the FPS and the reverse is true. I use a value of 10 for 60 FPS.


Yes it's very rudimentary as I am as much a noob at this as anyone.

for i<-0 to infinite
Thanks
end for

I can move on with my project now. //though programmatically you will never see this line.

[metallica556]

Originally Posted by IAmHawtness

You probably need to update the position and name offsets in the "PlayerPacket".

oh..and how i'm supposed to do that?

[InfamousNoone]

On behalf of Martin:
Ah, let me just get my spoon and bib, just a moment...

[© Haydz]

Originally Posted by InfamousNoone

On behalf of Martin:
Ah, let me just get my spoon and bib, just a moment...

"Here comes the aeroplane. . . ."

[shitboi]

just tested this project, it's brilliant

[kakamankoko]

Originally Posted by IAmHawtness

Uhm, it's a whole different library, the old one was in VB, this one is completely different.

can i have the vb library pls ?

[shitboi]

@hawtness
I was trying to add some functionality to the TestBot, then i realized that the magic type interact packet has had its targetID and Position encrypted

current packet structure appears to be
[length][packet type] [time stamp] [char id] [target id] [position] [interact type] [some unknown data field that only exists in magic type interact packets]

can you disclose the details of the current interact packet?

[IAmHawtness]

Originally Posted by shitboi

@hawtness
I was trying to add some functionality to the TestBot, then i realized that the magic type interact packet has had its targetID and Position encrypted

current packet structure appears to be
[length][packet type] [time stamp] [char id] [target id] [position] [interact type] [some unknown data field that only exists in magic type interact packets]

can you disclose the details of the current interact packet?

[shitboi]

Thanks hawtness, I'll try it out later tonight.

[kakamankoko]

what about me ?

[phize]

Originally Posted by kakamankoko

what about me ?

Try his other thread, maybe?

[kakamankoko]

Originally Posted by Synsia

Try his other thread, maybe?

can ou gmme link pls

[diedwarrior]

Originally Posted by kakamankoko

can ou gmme link pls

[KraHen]

Lol I just took this out once again and I`m amazed that I`m actually understanding the ASM part now. I wanna thank you again for this.