[C++] Auto looting/selling

namepod · 11/08/2012, 13:02

First I would like to thank you for releasing this (I know you released a while go but I haven't seen it until now.).
Secondly I would like to ask for some help.
Since I don't have all your files I needed to change a few things, well two things actually:

Code:

DetourFunc((BYTE*)pf.Get("RecvFunc"), (BYTE*)&RecvHook, 7);
jBack = pf.Get("RecvFunc") + 7;

To:

Code:

VirtualProtect((void *)recvAddr, 5, PAGE_EXECUTE_READWRITE, &error);
*(BYTE *)(recvAddr) = 0xE9;
*(DWORD *)(recvAddr + 1) = (DWORD)&RecvHook - recvAddr -5;
jBack = recvAddr+7;

That works well, it redirects as it should and everything is fine.
But when it comes to:

Code:

typedef void (__cdecl* Proto)(unsigned char*, int);
Proto Func = (Proto)pf.Get("SendFunc");
Func(p, i);

I fail to change it into a working method.
Tried :

Code:

typedef void (__cdecl* Proto)(unsigned char*, int);
Proto Func = (Proto)sendAddr;
Func(p, i);

But without success. It's kinda obvious it would fail since my sendAddr and recvAddr is have the same type. And in your code you only typecast one of them.

So what I wonder is:
What does "pf.Get("SendFunc");" return?
If I know that I could try to figure out a solution which works.

I have no plans of releasing anything which involves this code, if I ever feel like releasing anything I will ask for your permission and I would make sure you get credited for it.
Thanks.

phize · 11/08/2012, 14:01

Quote:

Originally Posted by namepod

So what I wonder is:
What does "pf.Get("SendFunc");" return?
If I know that I could try to figure out a solution which works.

It returns the address of the send function (not of the winsocket module, but the wrapper function in the client). So you were right in just pointing it to "sendAddr".

What's failing exactly?

namepod · 11/08/2012, 14:07

Quote:

Originally Posted by phize

It returns the address of the send function (not of the winsocket module, but the wrapper function in the client). So you were right in just pointing it to "sendAddr".

What's failing exactly?

Well it don't pick up the items, so i figured it fails to send it?
The game don't crash or so. it just don't pick up the items.
I wonder if the packet codes are wrong, they shouldn't be.
Your code worked for Ep5 right?

phize · 11/08/2012, 14:12

Quote:

Originally Posted by namepod

Well it don't pick up the items, so i figured it fails to send it?
The game don't crash or so. it just don't pick up the items.
I wonder if the packet codes are wrong, they shouldn't be.
Your code worked for Ep5 right?

Yes, it works for EP5. Are you sure you have the correct address?

If you could upload the game client you're working with, I could verify the address for you.

namepod · 11/08/2012, 14:20

Quote:

Originally Posted by phize

Yes, it works for EP5. Are you sure you have the correct address?

If you could upload the game client you're working with, I could verify the address for you.

Here it is.
sendAddr = 005892A0 - 32 => 0058926E
recvAddr = 005867F4 - 4 => 005867F0

Thanks for doing this

Virus scan.

Spoiler

phize · 11/08/2012, 14:31

sendAddr should be 0x589280

namepod · 11/08/2012, 14:37

How stupid of me, I should have realized that..
I'm a bit ashamed actually.
All I can say to my defense is that:
1. I'm stupid for not realizing that.
2. You pattern scan for "8B 75 08 8B 5D 0C" then removes 32 from it. //note to self, don't follow something blindly.

Thanks a lot for your help

phize · 11/08/2012, 14:41

Quote:

Originally Posted by namepod

How stupid of me, I should have realized that..
I'm a bit ashamed actually.
All I can say to my defense is that:
1. I'm stupid for not realizing that.
2. You pattern scan for "8B 75 08 8B 5D 0C" then removes 32 from it. //note to self, don't follow something blindly.

Thanks a lot for your help

32 in decimal, 0x20 in hex

I did a search for that and subtracted manually, and that got me to that address

namepod · 11/08/2012, 14:50

Quote:

Originally Posted by phize

32 in decimal, 0x20 in hex

I did a search for that and subtracted manually, and that got me to that address

*Crawls down a deep dark hole and hopes no one sees me*
I just assumed it was 32 in hex, that's so embarrassing..

Lesson learned

It works now.
I can't thank you enough

Big_ · 11/11/2020, 06:16

anyone still have this