[TUTORIAL] Creating a simple DLL Cheat/Hack

[bloodx]

Well, u posted SRC from Proxy so i give ppl a send + recv method. hehe.


SendFunction

PHP Code:

DWORD PBACK  =  0x000000;// <- U need to get the Back Adress with IDA etc. Or do it with SearchPattern.
#define SendASM __asm{ push ebp };__asm{ mov ebp, esp };__asm{ sub esp, 18h};__asm{ JMP PBACK};
__declspec(naked) int __cdecl SendPacket (BYTE Header , LPCSTR Format , ... ){SendASM;} 


RecvFunction

PHP Code:

int DetouredRecv(SOCKET Socket, char *Buffer, int Length, int Flags);
int (__stdcall *PacketRecv)(SOCKET Socket, char *Buffer, int Length, int Flags);

void Recv()
{
    PacketRecv = (int (__stdcall *)(SOCKET, char *, int, int))DetourFunction((PBYTE)recv, (PBYTE)DetouredRecv);
} 


PHP Code:

int DetouredRecv(SOCKET Socket, char *Buffer, int Length, int Flags)
{
    switch(Buffer[2])
    {
    case 0x36: //item drop
        break;
    
    }
    return PacketRecv(Socket, Buffer, Length, Flags);
} 


[meak1]

and where is the bot in src ?

[ILikeItEasy]

Originally Posted by bloodx

Well, u posted SRC from Proxy so i give ppl a send + recv method. hehe.


SendFunction

PHP Code:

DWORD PBACK  =  0x000000;// <- U need to get the Back Adress with IDA etc. Or do it with SearchPattern.
#define SendASM __asm{ push ebp };__asm{ mov ebp, esp };__asm{ sub esp, 18h};__asm{ JMP PBACK};
__declspec(naked) int __cdecl SendPacket (BYTE Header , LPCSTR Format , ... ){SendASM;} 


RecvFunction

PHP Code:

int DetouredRecv(SOCKET Socket, char *Buffer, int Length, int Flags);
int (__stdcall *PacketRecv)(SOCKET Socket, char *Buffer, int Length, int Flags);

void Recv()
{
    PacketRecv = (int (__stdcall *)(SOCKET, char *, int, int))DetourFunction((PBYTE)recv, (PBYTE)DetouredRecv);
} 


PHP Code:

int DetouredRecv(SOCKET Socket, char *Buffer, int Length, int Flags)
{
    switch(Buffer[2])
    {
    case 0x36: //item drop
        break;
    
    }
    return PacketRecv(Socket, Buffer, Length, Flags);
} 


If you do it like this, you will get many packets multiple times AND you get a lot of crap.

For example, do it like this and then try to keep track of a monster's hp by the dmg he's getting.

[bloodx]

Originally Posted by ILikeItEasy

If you do it like this, you will get many packets multiple times AND you get a lot of ****.

For example, do it like this and then try to keep track of a monster's hp by the dmg he's getting.

hmm maybe maybe but maybe not :]

[ILikeItEasy]

I've seen some sources dismissing each 'repeated' packet, but then you're screwed when you should get 2 of the same packets

[meak1]

and now then u filtering it out ? lol

[ILikeItEasy]

well.. here's my donation to your project

int ASyncPos=0;
int FinalSize=0;

int WINAPI __stdcall MyMagicRecv(SOCKET s, const unsigned char* buf, int len, int flags)
{

	if (ASyncPos==FinalSize && FinalSize>0)
	{
		HandlePacket(buf, ASyncPos);
		ASyncPos = 0;
	}
	int ret = OrigRecv(s,buf,len,flags);
	if (ret<0)
	{
		return ret;
	}
	if (ASyncPos==0)
		FinalSize = *((short int*) buf);
	ASyncPos+=ret;
	return ret;
}

[katze123]

MyMagicRecv... lol
m0hamed just gives every person a thanks who posts some source snippet...
thanks for release, although i have got that
never made much with pointers... maybe i should take a look at that too xD

[ILikeItEasy]

Well, it is a workaround for filtering out 'double' recv packets by the public available sources. It is not the best method, but if you do some analysing yourself, you should be able to find out how it really works. This should at least give you a clue and if not, you can use it still to filter out double packets

[meak1]

we not dumb but u dont understand what we want, we want not release the full stuff the people only need to push their brain on

[nidecker]

any working UCE for int server which working now?
i need find speed adress....etc..can any1 post?

[Alnop2008]

warum leechen alle hier ? kann ja net mal wer thx drücken hier :>

[Agzar]

is it possible to make auto pick up?

[bloodx]

Sure, u can add Auto Pick.

[Agzar]

any help :d?