|
You last visited: Today at 22:52
Advertisement
Is it risky to record the cursor and repeat that pattern?
Discussion on Is it risky to record the cursor and repeat that pattern? within the Nostale forum part of the MMORPGs category.
03/12/2019, 17:26
|
#16
|
elite*gold: 0 
Join Date: Sep 2015
Posts: 482
Received Thanks: 532
|
Quote:
Originally Posted by Nortank
"Can you try it again while you have a minigame open? I got curious because I tested it 1y ago and it was increasing."
Just tested, no, sitll increasing by 60 every minutes.
"It is more than that."
Tell me more then.
|
It has been changed.
But look at the 2nd parameter of pulse = 1.
-- EDIT --
Code:
int __usercall sub_531250@<eax>(int a1@<eax>, int a2@<ebx>, int a3@<edi>, int a4@<esi>)
{
int v4; // eax@2
unsigned int v5; // ecx@7
unsigned int v6; // ecx@8
int v7; // eax@8
int v8; // eax@8
int v9; // ecx@8
int v10; // ecx@8
int v11; // eax@8
int v12; // ecx@8
int v13; // eax@10
int v14; // eax@12
int v15; // eax@12
int *v16; // ecx@13
unsigned int v18; // [sp-24h] [bp-34h]@8
void *v19; // [sp-20h] [bp-30h]@8
const char *v20; // [sp-1Ch] [bp-2Ch]@8
unsigned int v21; // [sp-18h] [bp-28h]@1
void *v22; // [sp-14h] [bp-24h]@1
int *v23; // [sp-10h] [bp-20h]@1
int v24; // [sp-Ch] [bp-1Ch]@1
int v25; // [sp-8h] [bp-18h]@1
int v26; // [sp-4h] [bp-14h]@1
int v27; // [sp+0h] [bp-10h]@1
int v28; // [sp+4h] [bp-Ch]@1
int v29; // [sp+8h] [bp-8h]@1
int v30; // [sp+Ch] [bp-4h]@1
int savedregs; // [sp+10h] [bp+0h]@1
v29 = 0;
v28 = 0;
v27 = 0;
v26 = a2;
v25 = a4;
v24 = a3;
v30 = a1;
v23 = &savedregs;
v22 = &loc_531499;
v21 = __readfsdword(0);
__writefsdword(0, (unsigned int)&v21);
if ( *off_6CE244 != (unsigned __int8)*off_6CD310 )
{
v4 = *(_DWORD *)(v30 + 4);
sub_6BD864(0, *off_6CE244);
}
sub_46247C();
if ( *off_6CE3F4 == 1 || *off_6CDF6C == 1 )
sub_681DD0(v21, v22, v23, v24, v25, v26);
if ( *(_BYTE *)(v30 + 16) )
{
v5 = sub_462554() - *(_DWORD *)(v30 + 12);
if ( v5 > 0xEA5F )
{
v6 = v5 / 0xEA60;
*(_DWORD *)(v30 + 12) += 60000 * v6;
*(_DWORD *)(v30 + 8) += 60 * v6;
v7 = *(_DWORD *)off_6CE67C;
sub_4E6B4C(v21, v22, v23);
v20 = "pulse ";
sub_40C398(*(_DWORD *)(v30 + 8), 0);
v8 = off_6CC658[sub_403A5C(&dword_5314C0, v28, "pulse ")];
sub_40C2AC(v9, &v27);
sub_405494(v10, 4, v27, v18, v19, v20);
v11 = *(_DWORD *)off_6CE67C;
sub_4E5B0C(v12, v29);
**off_6CE5B0 = 0;
}
}
if ( sub_462554() - dword_6CAF24 > (unsigned int)(unsigned __int16)word_6CAF20 )
{
v20 = (const char *)&savedregs;
v19 = &loc_5313AE;
v18 = __readfsdword(0);
__writefsdword(0, (unsigned int)&v18);
v13 = *(_DWORD *)off_6CE67C;
sub_4E6B4C(v18, &loc_5313AE, &savedregs);
dword_6CAF24 = sub_462554();
__writefsdword(0, v18);
}
*off_6CF788 = 20070529;
__writefsdword(0, (unsigned int)&v18);
sub_4B0BF4(__readfsdword(0), &loc_5313E0, &savedregs);
__writefsdword(0, v18);
if ( (unsigned __int8)sub_4777C0() )
{
v20 = (const char *)&savedregs;
v19 = &loc_53141B;
v18 = __readfsdword(0);
__writefsdword(0, (unsigned int)&v18);
v14 = *off_6CC97C;
sub_50DD14(v18, &loc_53141B, &savedregs);
__writefsdword(0, v18);
v20 = (const char *)&savedregs;
__writefsdword(0, (unsigned int)&v18);
sub_47AD84(__readfsdword(0), (const char *)&loc_531442, &savedregs, v21, v22, v23, v24, v25, v26, v27);
__writefsdword(0, v18);
v20 = (const char *)&savedregs;
v19 = &loc_53146F;
v18 = __readfsdword(0);
__writefsdword(0, (unsigned int)&v18);
v15 = *(_DWORD *)(v30 + 4);
sub_6BDAC0(v18, &loc_53146F, &savedregs);
__writefsdword(0, v18);
sub_4777D4();
}
v16 = v23;
__writefsdword(0, v21);
v23 = (int *)&loc_5314A0;
return sub_405128(v16, 3);
}
@  It is not always +60.
It does depend by v6 which a time was increased by input.
I have no reason to lie.
Code:
*(_DWORD *)(v30 + 12) += 60000 * v6;
*(_DWORD *)(v30 + 8) += 60 * v6;
|
|
|
|
03/12/2019, 17:29
|
#17
|
elite*gold: 0
Join Date: Oct 2018
Posts: 257
Received Thanks: 207
|
Tested again, only got 0 as second parameter. How did you get the 1 ?
|
|
|
|
|
03/12/2019, 17:30
|
#18
|
elite*gold: 0
Join Date: Sep 2015
Posts: 482
Received Thanks: 532
|
Quote:
Originally Posted by Apourtartt
Tested again, only got 0 as second parameter. How did you get the 1 ?
|
It is what I am trying to figure out.
I was playing Woodcutter. 
|
|
|
|
|
03/12/2019, 18:19
|
#19
|
elite*gold: 0
Join Date: Oct 2018
Posts: 257
Received Thanks: 207
|
Got no "1" as second paramet in 4020 seconds
|
|
|
|
|
03/12/2019, 19:46
|
#20
|
elite*gold: 0
Join Date: Sep 2015
Posts: 482
Received Thanks: 532
|
Quote:
Originally Posted by Apourtartt
Got no "1" as second paramet in 4020 seconds
|
Then you are doing it wrong.
|
|
|
|
|
03/12/2019, 19:58
|
#21
|
elite*gold: 0
Join Date: Mar 2015
Posts: 871
Received Thanks: 1,229
|
Code:
32554 pulse 540 0
32663 pulse 600 0
32834 pulse 660 0
32998 pulse 720 0
33164 pulse 780 0
33269 pulse 840 0
33439 pulse 900 0
33613 pulse 960 0
33788 pulse 1020 0
33951 pulse 1080 1
34117 pulse 1140 0
34291 pulse 1200 0
34452 pulse 1260 0
34633 pulse 1320 0
34800 pulse 1380 0
34979 pulse 1440 0
35148 pulse 1500 0
35325 pulse 1560 0
35493 pulse 1620 0
35661 pulse 1680 0
35837 pulse 1740 1
36016 pulse 1800 0
36186 pulse 1860 1
36351 pulse 1920 0
36521 pulse 1980 0
36690 pulse 2040 0
36859 pulse 2100 0
37025 pulse 2160 0
37187 pulse 2220 0
37363 pulse 2280 0
37534 pulse 2340 0
37699 pulse 2400 0
37866 pulse 2460 0
38036 pulse 2520 0
38204 pulse 2580 0
38377 pulse 2640 0
38549 pulse 2700 0
38710 pulse 2760 0
38882 pulse 2820 1
39054 pulse 2880 0
39227 pulse 2940 0
39378 pulse 3000 0
39548 pulse 3060 0
39717 pulse 3120 0
39891 pulse 3180 0
40054 pulse 3240 0
40223 pulse 3300 0
40393 pulse 3360 0
40558 pulse 3420 0
40728 pulse 3480 0
40895 pulse 3540 0
41065 pulse 3600 0
41229 pulse 3660 0
41403 pulse 3720 0
Few pulse packets while botting, I didn't even touch my PC, full AFK, the bot also didn't send keystrokes nor mouse movement
|
|
|
|
|
03/12/2019, 20:15
|
#22
|
elite*gold: 0
Join Date: Dec 2018
Posts: 70
Received Thanks: 28
|
Code:
[18:32:52] [Send] pulse 720 0
[18:33:52] [Send] pulse 780 0
[18:34:52] [Send] pulse 840 0
[18:35:52] [Send] pulse 900 0
[18:36:52] [Send] pulse 960 0
[18:37:52] [Send] pulse 1020 0
[18:38:52] [Send] pulse 1080 0
[18:39:52] [Send] pulse 1140 0
[18:40:52] [Send] pulse 1200 0
[18:41:52] [Send] pulse 1260 0
[18:42:52] [Send] pulse 1320 0
[18:43:52] [Send] pulse 1380 0
[18:44:52] [Send] pulse 1440 0
[18:45:52] [Send] pulse 1500 0
[18:46:52] [Send] pulse 1560 0
[18:47:52] [Send] pulse 1620 0
[18:48:52] [Send] pulse 1680 0
[18:49:52] [Send] pulse 1740 0
[18:50:52] [Send] pulse 1800 0
[18:51:52] [Send] pulse 1860 0
[18:52:52] [Send] pulse 1920 0
[18:53:52] [Send] pulse 1980 0
[18:54:52] [Send] pulse 2040 0
[18:55:52] [Send] pulse 2100 0
[18:56:52] [Send] pulse 2160 0
[18:57:52] [Send] pulse 2220 0
[18:58:52] [Send] pulse 2280 0
[18:59:52] [Send] pulse 2340 0
[19:00:52] [Send] pulse 2400 0
[19:01:52] [Send] pulse 2460 0
[19:02:52] [Send] pulse 2520 0
[19:03:52] [Send] pulse 2580 0
[19:04:52] [Send] pulse 2640 0
[19:05:52] [Send] pulse 2700 0
[19:06:52] [Send] pulse 2760 0
[19:07:52] [Send] pulse 2820 0
[19:08:52] [Send] pulse 2880 0
[19:09:52] [Send] pulse 2940 0
[19:10:52] [Send] pulse 3000 0
[19:11:52] [Send] pulse 3060 0
[19:12:52] [Send] pulse 3120 0
[19:13:52] [Send] pulse 3180 0
[19:14:52] [Send] pulse 3240 0
[19:15:52] [Send] pulse 3300 0
[19:16:52] [Send] pulse 3360 0
[19:17:52] [Send] pulse 3420 0
[19:18:52] [Send] pulse 3480 0
[19:19:52] [Send] pulse 3540 0
[19:20:52] [Send] pulse 3600 0
[19:21:52] [Send] pulse 3660 0
[19:22:52] [Send] pulse 3720 0
[19:23:52] [Send] pulse 3780 0
[19:24:52] [Send] pulse 3840 0
[19:25:52] [Send] pulse 3900 0
[19:26:52] [Send] pulse 3960 0
[19:27:52] [Send] pulse 4020 0
[19:28:52] [Send] pulse 4080 0
[19:29:52] [Send] pulse 4140 0
[19:30:52] [Send] pulse 4200 0
[19:31:52] [Send] pulse 4260 0
[19:32:52] [Send] pulse 4320 0
[19:33:52] [Send] pulse 4380 0
[19:34:52] [Send] pulse 4440 0
[19:35:52] [Send] pulse 4500 0
[19:36:52] [Send] pulse 4560 0
[19:37:52] [Send] pulse 4620 0
[19:38:52] [Send] pulse 4680 0
[19:39:52] [Send] pulse 4740 0
[19:40:52] [Send] pulse 4800 0
[19:41:52] [Send] pulse 4860 0
[19:42:52] [Send] pulse 4920 0
[19:43:52] [Send] pulse 4980 0
[19:44:52] [Send] pulse 5040 0
[19:45:52] [Send] pulse 5100 0
[19:46:52] [Send] pulse 5160 0
[19:47:52] [Send] pulse 5220 0
[19:48:52] [Send] pulse 5280 0
[19:49:52] [Send] pulse 5340 0
[19:50:52] [Send] pulse 5400 0
[19:51:52] [Send] pulse 5460 0
[19:52:52] [Send] pulse 5520 0
[19:53:52] [Send] pulse 5580 0
[19:54:52] [Send] pulse 5640 0
[19:55:52] [Send] pulse 5700 0
[19:56:52] [Send] pulse 5760 0
[19:57:52] [Send] pulse 5820 0
[19:58:52] [Send] pulse 5880 0
[19:59:52] [Send] pulse 5940 0
[20:00:52] [Send] pulse 6000 0
[20:01:52] [Send] pulse 6060 0
[20:02:52] [Send] pulse 6120 0
[20:03:52] [Send] pulse 6180 0
[20:04:52] [Send] pulse 6240 0
[20:05:52] [Send] pulse 6300 0
[20:06:52] [Send] pulse 6360 0
[20:07:52] [Send] pulse 6420 0
[20:08:52] [Send] pulse 6480 0
[20:09:52] [Send] pulse 6540 0
[20:10:52] [Send] pulse 6600 0
[20:11:52] [Send] pulse 6660 0
[20:12:52] [Send] pulse 6720 0
I have been walking sometimes.
|
|
|
|
|
03/12/2019, 21:07
|
#23
|
elite*gold: 0
Join Date: Sep 2015
Posts: 482
Received Thanks: 532
|
Quote:
Originally Posted by Nortank
Code:
[18:32:52] [Send] pulse 720 0
[18:33:52] [Send] pulse 780 0
[18:34:52] [Send] pulse 840 0
[18:35:52] [Send] pulse 900 0
[18:36:52] [Send] pulse 960 0
[18:37:52] [Send] pulse 1020 0
[18:38:52] [Send] pulse 1080 0
[18:39:52] [Send] pulse 1140 0
[18:40:52] [Send] pulse 1200 0
[18:41:52] [Send] pulse 1260 0
[18:42:52] [Send] pulse 1320 0
[18:43:52] [Send] pulse 1380 0
[18:44:52] [Send] pulse 1440 0
[18:45:52] [Send] pulse 1500 0
[18:46:52] [Send] pulse 1560 0
[18:47:52] [Send] pulse 1620 0
[18:48:52] [Send] pulse 1680 0
[18:49:52] [Send] pulse 1740 0
[18:50:52] [Send] pulse 1800 0
[18:51:52] [Send] pulse 1860 0
[18:52:52] [Send] pulse 1920 0
[18:53:52] [Send] pulse 1980 0
[18:54:52] [Send] pulse 2040 0
[18:55:52] [Send] pulse 2100 0
[18:56:52] [Send] pulse 2160 0
[18:57:52] [Send] pulse 2220 0
[18:58:52] [Send] pulse 2280 0
[18:59:52] [Send] pulse 2340 0
[19:00:52] [Send] pulse 2400 0
[19:01:52] [Send] pulse 2460 0
[19:02:52] [Send] pulse 2520 0
[19:03:52] [Send] pulse 2580 0
[19:04:52] [Send] pulse 2640 0
[19:05:52] [Send] pulse 2700 0
[19:06:52] [Send] pulse 2760 0
[19:07:52] [Send] pulse 2820 0
[19:08:52] [Send] pulse 2880 0
[19:09:52] [Send] pulse 2940 0
[19:10:52] [Send] pulse 3000 0
[19:11:52] [Send] pulse 3060 0
[19:12:52] [Send] pulse 3120 0
[19:13:52] [Send] pulse 3180 0
[19:14:52] [Send] pulse 3240 0
[19:15:52] [Send] pulse 3300 0
[19:16:52] [Send] pulse 3360 0
[19:17:52] [Send] pulse 3420 0
[19:18:52] [Send] pulse 3480 0
[19:19:52] [Send] pulse 3540 0
[19:20:52] [Send] pulse 3600 0
[19:21:52] [Send] pulse 3660 0
[19:22:52] [Send] pulse 3720 0
[19:23:52] [Send] pulse 3780 0
[19:24:52] [Send] pulse 3840 0
[19:25:52] [Send] pulse 3900 0
[19:26:52] [Send] pulse 3960 0
[19:27:52] [Send] pulse 4020 0
[19:28:52] [Send] pulse 4080 0
[19:29:52] [Send] pulse 4140 0
[19:30:52] [Send] pulse 4200 0
[19:31:52] [Send] pulse 4260 0
[19:32:52] [Send] pulse 4320 0
[19:33:52] [Send] pulse 4380 0
[19:34:52] [Send] pulse 4440 0
[19:35:52] [Send] pulse 4500 0
[19:36:52] [Send] pulse 4560 0
[19:37:52] [Send] pulse 4620 0
[19:38:52] [Send] pulse 4680 0
[19:39:52] [Send] pulse 4740 0
[19:40:52] [Send] pulse 4800 0
[19:41:52] [Send] pulse 4860 0
[19:42:52] [Send] pulse 4920 0
[19:43:52] [Send] pulse 4980 0
[19:44:52] [Send] pulse 5040 0
[19:45:52] [Send] pulse 5100 0
[19:46:52] [Send] pulse 5160 0
[19:47:52] [Send] pulse 5220 0
[19:48:52] [Send] pulse 5280 0
[19:49:52] [Send] pulse 5340 0
[19:50:52] [Send] pulse 5400 0
[19:51:52] [Send] pulse 5460 0
[19:52:52] [Send] pulse 5520 0
[19:53:52] [Send] pulse 5580 0
[19:54:52] [Send] pulse 5640 0
[19:55:52] [Send] pulse 5700 0
[19:56:52] [Send] pulse 5760 0
[19:57:52] [Send] pulse 5820 0
[19:58:52] [Send] pulse 5880 0
[19:59:52] [Send] pulse 5940 0
[20:00:52] [Send] pulse 6000 0
[20:01:52] [Send] pulse 6060 0
[20:02:52] [Send] pulse 6120 0
[20:03:52] [Send] pulse 6180 0
[20:04:52] [Send] pulse 6240 0
[20:05:52] [Send] pulse 6300 0
[20:06:52] [Send] pulse 6360 0
[20:07:52] [Send] pulse 6420 0
[20:08:52] [Send] pulse 6480 0
[20:09:52] [Send] pulse 6540 0
[20:10:52] [Send] pulse 6600 0
[20:11:52] [Send] pulse 6660 0
[20:12:52] [Send] pulse 6720 0
I have been walking sometimes. |
I believe you.
It is weird and does not happen often.
It has been changed xD
But I still think it is more than Keep Alive.
Or at least it was not.
|
|
|
|
|
03/12/2019, 21:13
|
#24
|
elite*gold: 0
Join Date: Oct 2018
Posts: 257
Received Thanks: 207
|
I have got a pulse 180 1 at 20:55:01. Could the reason be purely mathematically ? (Operation with hours, minutes, seconds ?)
|
|
|
|
|
03/13/2019, 00:46
|
#25
|
elite*gold: 0
Join Date: Sep 2015
Posts: 482
Received Thanks: 532
|
Quote:
Originally Posted by Apourtartt
I have got a pulse 180 1 at 20:55:01. Could the reason be purely mathematically ? (Operation with hours, minutes, seconds ?)
|
It is still a mystery but if they have modified the packet there must be a reason. Or maybe it happened by chance during recent changes. It would be interesting to know more. In any case, it is no longer a cause for concern. But I was right and the pseudo code generated by IDA is the proof. It is not always increased by 60 but 60 * v6.
|
|
|
|
|
03/14/2019, 18:28
|
#26
|
elite*gold: 0
Join Date: Nov 2014
Posts: 12
Received Thanks: 6
|
Quote:
Originally Posted by Cryless~
They can still log the packet and show it in the AdminCP to ban you.
What the f*** are you talking about? server code? It has nothing to do with the logs so please do not talk about stuffs you do not know.
In other words: There is a way to detect you .
Use it at your own risk.
|
I don't know **** about? I actually have friends in GM team. And used to be GM myself for some time on other games. I know how this report stuff works so please. Don't try to look smarter than you are.
|
|
|
|
|
03/14/2019, 19:03
|
#27
|
elite*gold: 0
Join Date: Dec 2018
Posts: 70
Received Thanks: 28
|
"I don't know **** about? I actually have friends in GM team. And used to be GM myself for some time on other games. I know how this report stuff works so please. Don't try to look smarter than you are."
I think he wanted to point that you used wrong words to explain what you tried to talk about :
"Yeah, that might be true, but GM or SGM are not allowed to look to the server code and stuff like that without any particular reason, so they instead just ask you if you are there. Therefor it doesn't mean anything."
=> not allowed to look to the database* ?
|
|
|
|
|
03/20/2019, 15:13
|
#28
|
elite*gold: 0
Join Date: Mar 2015
Posts: 871
Received Thanks: 1,229
|
Ok, I have done my own research (with the "pulse" packet) and I can tell that claims about magic propeties of the packet are nonsense.
1. It is true that the packet can be increased for more than "60", however only(correct me if you have proofs that it's bullshit) in situations when you pause the game (using Cheat Engine or other programs) for more than 120s
2. Another proof that this is hoax is easy to reproduce. Just sent inappropriate pulse value. For example, after "pulse 60" send "pulse 180" omitting the 120. You will be kicked instantly.
3. The only security aspect of the packet (in my opionion) is just preventing speeding/slowing the game, so they can simply kick users that are sending packets too slow (like every 120s instead of 60s) or too fast, and this may be usefull for banning minigame players, or very silly speedhackers, but not for exp bots
Ok, that's all for the first parameter, now move to the more interesting thing
1. I can say that the second parameter is random, and there is no way to trace it back if user send any keystroke or no.
So how the game decide which value send?
There are only two possible values (0/1)
There is an array of size 30, where all values are equal to "0" except one, at random index which is equal to "1"
The function that decides about which index from array read looks like this:
Code:
push ebx
xor ebx,ebx
imul edx,dword ptr ds:[ebx+6C0008],8088405
inc edx
mov dword ptr ds:[ebx+6C0008],edx
mul edx
mov eax,edx
pop ebx
ret
The function is called very, very often from various places in the game, and the value at 0x6C0008 is firstly filled with results from:
-QueryPerformanceCounter
-GetTickCount
So it's like typical pseudorandom number generator.
So to sum up, in theory you will get the "1" in pulse packet with probability of 1/30 and you are perfectly safe with mouse/keyboard macro.
If you have another opinion on the topic, with significant proofs - post it here
|
|
|
|
 |
|
Similar Threads
|
No record found! No record found! No record found!
06/28/2013 - Cabal Online - 1 Replies
Hi all, i'm having problems using Fuji trainer. I followed Youtube istructions, i have read all the post in the Fuji Trainer Compliation thread but i haven't find a solution yet. I tried to register another account too but nothing is working.. please can someone explain me where do i make the mistake? I don't know what's wrong but i'd really like to use this trainer again. =(
Thanks in advance to all epvp members :(
|
Cursor Disappears | Cursor verschwindet
06/23/2012 - League of Legends - 2 Replies
Ja, wie in dem Titel schon gesagt: In League of Legends verschwindet manchmal plötzlich mein Cursor.
ich sehe dann 1. nicht mehr wohin ich klicke (außer ich drücke "X", "V" oder "G" weil da dann entweder grüne oder rote striche sind wo der cursor ist )
und 2. muss ich meinen rechner neustarten, weil danach, wenn ich LoL beende mein Mauszeiger fehlt.
Weis irgendjemand was es damit aufsich hat? Es ist auch nicht jedes Spiel, aber wenn es dazu kommt Nervt es <.<
Danke im Vorraus :)
MFG
|
Record You Pvp Easily For One Continously Hour With That Record Tool .
08/26/2010 - Silkroad Online - 2 Replies
hello Guys ..
Today We Have A ProGram To Record an Open Video To Your Desktop Up To 1 Countinously Hour
Uses : Record Any Pvp & Uniques HuntinG & Alchemy ..
The ProGram Is So Easy And Not Have Heavy Process ,, Its Simple And Easy ..
Pictures :
|
All times are GMT +1. The time now is 22:52.
|
|
