[TUTORIAL] Creating a simple DLL Cheat/Hack

[BorSti]

its fixed for int kal online so dont worry if u gonna fail

[Thiesius]

It's not fixed, it just needs a little creativity :P
Depending on how much time I will have I might put together a fix (I think it should be a quickie)

[DerKleineDarky]

meak hat schon recht, es is echt angenehm mit so wenig anderen bottern aufm int, ich bin dafür das das so bleibt

[BorSti]

Originally Posted by Thiesius

It's not fixed, it just needs a little creativity :P
Depending on how much time I will have I might put together a fix (I think it should be a quickie)

**** you got me :-) "this tutorial is Fixed"

It is a quickie if you use google without maybe a min

[KameLeon94]

Thanks, i think this will greatly help me for a start. Big THX

[Spanyy]

I've got this files im my project. How i can compile it into dll?

[RunzelEier]

use your IDE?

[kujoliki]

Hello there!

This is a very nice tutorial indeed. With this tutorial and the Packethack sticky thread and some other threads (packet descriptions, server files etc.) you can do whatever you want! The only limit is your imagination!

I managed to do sooo much things...like walking private shop in a square or any other routine, "animated" shop text, "realtime" (you dont have to relog) imperial and bead of fire, pvp event with time limit etc.

And i'm not a computer scientist nor a hobby programmer. LOL i'm an engineer for horticulture, far away from programming, only hard math. (Though math is similar to programming)

Now to all wannabe haxx0rz out there:

You won't succeed because you're a gamer! Gamers doesn't have patience to analyse all the stuff, sources, informations, though it's easy. BUT you have to THINK!!

Here is the point where every "gamer" fails! You want to have quick success!
I mean such epic posts like:

Originally Posted by Agzar

is it possible to make auto pick up?

Originally Posted by yazhimo

Yup already did it but now i get something like this.

PHP Code:

1>------ Build started: Project: d3dx9_29, Configuration: Debug Win32 ------
1>Build started 21.01.2011 15:42:09.
1>InitializeBuildStatus:
1>  Touching "Debug\d3dx9_29.unsuccessfulbuild".
1>ManifestResourceCompile:
1>  All outputs are up-to-date.
1>Exports_Def.def : error LNK2001: unresolved external symbol __E__0__
1>Exports_Def.def : error LNK2001: unresolved external symbol __E__1__
1>Exports_Def.def : error LNK2001: unresolved external symbol __E__2__
1>Exports_Def.def : error LNK2001: unresolved external symbol __E__3__
....
1>Exports_Def.def : error LNK2001: unresolved external symbol __E__330__
1>Exports_Def.def : error LNK2001: unresolved external symbol __E__331__
1>c:\users\magnus\documents\visual studio 2010\Projects\d3dx9_29\Debug\d3dx9_29.lib : fatal error LNK1120: 332 unresolved externals
1>
1>Build FAILED.
1>
1>Time Elapsed 00:00:01.43
========== Build: 0 succeeded, 1 failed, 0 up-to-date, 0 skipped ========== 


EDIT
No 1 knows ?? its been up here few days now
EDIT
Maybe today ? hehe.
I tryed yesterday too and i got same error with dbghelp.dll proxy scale. and the one that was uploaded here. Still same error. :/

Originally Posted by Spanyy

I've got this files im my project. How i can compile it into dll?

If you stuck at this point.....i have no words, stop try to hacking.

Anyways if you manage to write some good working uberhack, you'll lose the fun not only in kal, but in every game cause now you have a different point of view to games.


Some basic c++ would be nice and some math for your logic. No professionality required! Just get a clue how it works.

[DerKleineDarky]

Originally Posted by kujoliki

Hello there!

This is a very nice tutorial indeed. With this tutorial and the Packethack sticky thread and some other threads (packet descriptions, server files etc.) you can do whatever you want! The only limit is your imagination!

I managed to do sooo much things...like walking private shop in a square or any other routine, "animated" shop text, "realtime" (you dont have to relog) imperial and bead of fire, pvp event with time limit etc.

And i'm not a computer scientist nor a hobby programmer. LOL i'm an engineer for horticulture, far away from programming, only hard math. (Though math is similar to programming)

Now to all wannabe haxx0rz out there:

You won't succeed because you're a gamer! Gamers doesn't have patience to analyse all the stuff, sources, informations, though it's easy. BUT you have to THINK!!

Here is the point where every "gamer" fails! You want to have quick success!
I mean such epic posts like:







If you stuck at this point.....i have no words, stop try to hacking.

Anyways if you manage to write some good working uberhack, you'll lose the fun not only in kal, but in every game cause now you have a different point of view to games.


Some basic c++ would be nice and some math for your logic. No professionality required! Just get a clue how it works.

where is your uberhack?
write it and use it :P

i dont like it when people tells that everything is possible but dont do anything. i want to see your hack, i want to see what you did.

[mohm195]

ehm, thanks for this nice tut.
but if I'm going to do a auto login, just for id/pw and then try to crack 2nd password, what shall i do ?:d
forget my own 2nd pw and trying to get it back lol xD.

[hawkagent]

So I tried this to make a proxy dll for dbghelp.dll for kalsage. With dumpbin/wrappit i made an 'empty' proxy dll which only passes the exports on to kal. However seems like my empty proxy dll makes the engine.exe crash.
Then I tried to make an empty proxy dll for dsound.dll, this time an error pops up "The engine.exe file is linked to missing export dsound.dll:0x000b.".

I tried to check if my proxy dll loads the original library of dsound.dll, so I put messagebox popups at places before and after loading the functions, and it seemed it succeeded.

Could this be the problem of AHS? Anyone can give me a push in the right way?

[RunzelEier]

Dont use a message box to debug your dll.
Check if the dll handle is != null
otherwise attach a debugger and check the modules.

[hawkagent]

Thanks for replying!

I did what you said, I removed the messagebox, even with only the code from wrappit the error still happens. So I guess this method of proxy-ing won't work, I atleast have to add some detours?
I have almost no experience in debugging, but do you mean add debugger like olly? I will look into tutorials for it, still have much to learn, but im eager

[RunzelEier]

im pretty sure, you missed this part

Now create new empty dll project in the Visual Studio and add existing item into source, d3dx9_29.cpp . You can name that project with whatever name, but if you are not experienced, then I recommend naming it d3dx9_29. Now right-click on project and select Properties. First of all, although it’s not really necessary, change the character set to multi-byte, as I don’t want to read cry posts about “My compiler gives me error about strings”. Switch to Linker/Input and Module definition file will be Exports_Def.def. Save the properties and return to the project.

[hawkagent]

I wish i did, unfortunately the def declarations look fine. Just to make sure, I tested the same proxy dll I compiled on another server, no problem at all, the dll is exported correctly, even message boxes work
So it must be kalsage's protection that is messing my proxy dll up.

UPDATE: You were right, there WAS something wrong with the exports of my dll. The export txt file of dumpbin says my DLL exports these functions

6 0 00001290 DirectSoundCaptureCreate = ___E__0__@0
12 1 000012A0 DirectSoundCaptureCreate8 = ___E__1__@0
7 2 000012B0 DirectSoundCaptureEnumerateA = ___E__2__@0
8 3 000012C0 DirectSoundCaptureEnumerateW = ___E__3__@0
1 4 000012D0 DirectSoundCreate = ___E__4__@0
11 5 000012E0 DirectSoundCreate8 = ___E__5__@0
2 6 000012F0 DirectSoundEnumerateA = ___E__6__@0
3 7 00001300 DirectSoundEnumerateW = ___E__7__@0
10 8 00001310 DirectSoundFullDuplexCreate = ___E__8__@0
4 9 00001320 DllCanUnloadNow = ___E__9__@0
5 A 00001330 DllGetClassObject = ___E__10__@0
9 B 00001340 GetDeviceID = ___E__11__@0

the "=__E__..." shouldn't be there obviously. I will look more into this. Suggestions welcome