I just ran it but the client went mad and swore in alien language lol , here is what it said :
with the loader running, will it enable all the hacks to multiple clients I run from the same location of elementclient.exe, even after I rename the wintitles ?
a loader is called loader cuz its loading other files.
if u're not using the loader as a loader it won't load other files. that means it can't work as a loader..
asking if you have to load a file with the loader is kinda stupid.
it will only work for clients loaded with the loader.
well to ur problem. i can't test it or analyze the game client, since i haven't got the game installed.
btw you have to set the path to 'elementclient.exe'. the loader uses the path to create the process name.
its not running the client, but creates a virtual client to run.
ohh i see, I get it now, I'll just run the game with this loader, rename the wintitle, and run another using the loader.
and btw it's working now, I compiled it to exe and moved the loader to elementclient.exe's directory. Running as many clients using the loader after renaming it also works.
this was just an example of what you can do if u're able to handle regexp functions and odbg =)
the loader will allways work with all versions of pw, without being needed to get updated. and its able to do that with extremely effizient functions.
the cracking time takes like 900ms!
thats only possible if you know how to handle the regexp funcstions! can't stop repeating that but those functions are the most efficent functions autoit have got =)
I just knew autoit is quite powerful, I thought it was all about macro
do you notice as of the latest patch, flying is kinda buggy or is it something they did to prevent flyhack, sometimes it's like being teleported back a bit and seems laggy. It's annoying because when PK'ing using an archer or other ranged char while flying, if being attacked by a melee char and get stunned, releasing fly to quickly drop to avoid their next attack makes our char hanging and static, have to reuse fly button once or twice to make it normal, most of the time this causes my char end up dead. If only this annoying bug can be NOP'ed, this will make ranged chars almost untouchable when PK'ing in the air.
here is the full code I ran, I just want to simply try the selectmob function to select a given char ID, hoping that my char will then properly target that specified npc id. It's basically only contains your SelectMob and MemOpen function, and run selectmob to make my char target another char with this ID -> 0x18AE50. I also have adjusted the value for $base, $select_call and $pick_call to the correct values for my client version.
Code:
Func SelectMob($id)
Local $pRemoteThread, $vBuffer, $loop, $result, $OPcode
; --- save the position of the allocated memory ---
$pRemoteMem = DllCall($kernel32, 'int', 'VirtualAllocEx', 'int', $mid, 'ptr', 0, 'int', 0x46, 'int', 0x1000, 'int', 0x40)
; --- build up the asm code ---
; 0046061D A1 6C3E9F00 MOV EAX,DWORD PTR DS:[9F3E6C]
; 00460622 57 PUSH EDI <---- EDI Contains Mob-ID
; 00460623 8B48 20 MOV ECX,DWORD PTR DS:[EAX+20]
; 00460626 81C1 EC000000 ADD ECX,0EC
; 0046062C E8 8F961800 CALL elementc.005E9CC0
$OPcode &= '60' ; pushad
$OPcode &= 'A1'&_hex($base) ; mov eax, [base]
$OPcode &= '68'&_hex($id) ; push mob-id
$OPcode &= '8B4820' ; mov ecx, [eax+0x20]
$OPcode &= '81C1'&_hex(0xEC) ; add ecx, 0xEC
$OPcode &= 'E8'&_hex($select_call-$pRemoteMem[0]-5-StringLen($OPcode)/2) ; call select_call
$OPcode &= '61' ; popad
$OPcode &= 'C3' ; retn
; --- enter the asm code to to a dllstruct, which can be used with WriteProcessMemory ---
$vBuffer = DllStructCreate('byte[' & StringLen($OPcode) / 2 & ']')
For $loop = 1 To DllStructGetSize($vBuffer)
DllStructSetData($vBuffer, 1, Dec(StringMid($OPcode, ($loop - 1) * 2 + 1, 2)), $loop)
Next
; --- now letz write the code from our dllstruct ---
DllCall($kernel32, 'int', 'WriteProcessMemory', 'int', $mid, 'int', $pRemoteMem[0], 'int', DllStructGetPtr($vBuffer), 'int', DllStructGetSize($vBuffer), 'int', 0)
; --- now we run the asm code we've just written ---
$hRemoteThread = DllCall($kernel32, 'int', 'CreateRemoteThread', 'int', $mid, 'int', 0, 'int', 0, 'int', $pRemoteMem[0], 'ptr', 0, 'int', 0, 'int', 0)
; --- wait till the thread did his job ---
Do
$result = DllCall('kernel32.dll', 'int', 'WaitForSingleObject', 'int', $hRemoteThread[0], 'int', 50)
Until $result[0] <> 258
; --- close everything we've opened ---
DllCall($kernel32, 'int', 'CloseHandle', 'int', $hRemoteThread[0])
DllCall($kernel32, 'ptr', 'VirtualFreeEx', 'hwnd', $mid, 'int', $pRemoteMem[0], 'int', 0, 'int', 0x8000)
Return True
EndFunc
Func memopen($pid)
Local $mid = DllCall($kernel32, 'int', 'OpenProcess', 'int', 0x1F0FFF, 'int', 1, 'int', $pid)
Return $mid[0]
EndFunc
#include <array.au3>
Global $kernel32 = DllOpen('kernel32.dll')
Global Const $base = 0x98ADDC, $select_call = 0x5B7B70, $pick_call = 0x5B7B00
Global $pid = ProcessExists('elementclient.exe')
Global $mid = memopen($pid)
$id= 0x18AE50
SelectMob($id)
oh ok lol, I'll get it later once I finished fixing my bot ^^)
tks a lot for all the helps
-edit-
I just tested your selectmob function and tried to cast heal skill but it didn't allow me to cast skill. It's still look like the old targetting method by just passing NPC ID to target offset, it doesn't allow skill casting and always says 'invalid target', it can show correct hp bar though unlike just passing NPC ID to target offset.
.
I tested it with PW INT and PW MS And the Mob Sel. function works fine.
(But Where do you find the offset for the moblist - Mobname and Special infos? I cant get it works in pw ms )
yea the mob select function works fine until you try to cast a skill, then it'll still say 'invalid target'.
Have you tried casting a skill to your target after selecting using lolkop's selectmob function ? How is it in PW INT/MS ?
finding names is kinda easy. select a mob and build a script which loops from 0 to 0x1000 and does memread(memread(x), 'wchar[30]'). if is the mobname, thats the offset =)
finding the special info is kinda tricky. i did it this way: i've build up a function which saves the memory range from 0x4096 around the mob_base in a seperate file.
i did that for lots of different mobs and copared the newly created files.that way i've found all the differences beween the mobs in the mob_base range =)
edit:
selecting and attacking mobs wroks just fine in pwi. why would i publicate functions if they were useless?
Neue Smileys | new smileys | i know you want them! 07/29/2011 - Off Topic - 32 Replies Hey Leute ums knapp auf den Punkt zu bringen:
Ich würde mir diese Smileys in epvp wünschen. Ihr auch?
Jeder kennt sie ;D
English:
Hey guy´s. I want to see this smiley´s on epvp. You too?
Everybody knows them ;D
http://img37.imageshack.us/img37/3822/awesomem.pn g
[ICQ] Smileys löschen. 08/16/2010 - Technical Support - 5 Replies Hallo Com,
da ich nicht genau weiß in welche Topic es gepostet werden sollte, dachte ich mir, dass ich es mal hier poste.
Folgendes Problem:
Habe mir vor einiger Zeit mal einen Smiley von einem Freund hinzugefügt. Jetzt wollte ich ihn löschen, doch er kommt nach einem "icq-neustart" wieder.
Könnt Ihr mir nun sagen wie ich diesen Smiley entgültig löschen kann?
Danke schonmal im Vorraus
Mauritz
SMILEYS! :D 06/02/2010 - Off Topic - 4 Replies Heyho,
wollte ma fragen welcher euer Lieblingssmiley ist? :O
Mein absoluter Lieblingssmiley ist O.o
Omg! Smileys! 02/18/2009 - Conquer Online 2 - 2 Replies Is there anyway to get the smileys from Co =, so they can be added to MSN? o.o
conquer smileys 02/15/2007 - Conquer Online 2 - 3 Replies hellow,
does anyone know how to get the smileys that r in the game
looked everywhere in the co folder but havent found them
i would like to use them in msn and such
greeetinx
or write your own function.
)
