| View previous topic :: View next topic |
| Author |
Message |
0_00_0 Cheater
Reputation: 0
Joined: 17 Feb 2007 Posts: 30
|
Posted: Mon Jun 04, 2007 11:15 am Post subject: Defeating WoW's DMA Help! (Labyrnth? :D) |
|
|
I'm trying to figure out what i'm doing wrong here... i've attached a screenshot of just what i'm doing. I'm trying to Defeat the DMA of World of Warcraft to find client-side values to be tested in C++.
I'm trying to find an address, because i plan to plug it into a C++ program using ReadProcessMemory();
thanks! i'd appreciate any help i can get!
| Description: |
|
| Filesize: |
322.94 KB |
| Viewed: |
10133 Time(s) |

|
_________________
C++
autoIT
Java PrOgRaMmEr |
|
| Back to top |
|
 |
Labyrnth Moderator
Reputation: 10
Joined: 28 Nov 2006 Posts: 6300
|
Posted: Mon Jun 04, 2007 5:11 pm Post subject: |
|
|
5e5f5c
^ That address should not change, if so then you beat the DMA.
EBP is the base pointer.
ESP is the stack pointer.
So are you trying to defeat DMA or look for the pointer. Becasue your sating you want o beat the DMA, and that is beaten once you get this address. 5e5f5c
But the images suggest your looking for a pointer.
|
|
| Back to top |
|
 |
0_00_0 Cheater
Reputation: 0
Joined: 17 Feb 2007 Posts: 30
|
|
| Back to top |
|
 |
Labyrnth Moderator
Reputation: 10
Joined: 28 Nov 2006 Posts: 6300
|
Posted: Mon Jun 04, 2007 5:27 pm Post subject: |
|
|
Look, when you find an address by choosing Find what reads,write or access's any address you found in your scan list. And this found address does not change. This is beating DMA.
The address in your scan list changes every restart or what ever, That address is the one with DMA.
So in your case:
DMA address is: D21A4C0
Static "beating the DMA is: 5E5F51
Now if 5E5F51 changes, then you are getting code shifting.
Understand DMA now?
|
|
| Back to top |
|
 |
0_00_0 Cheater
Reputation: 0
Joined: 17 Feb 2007 Posts: 30
|
|
| Back to top |
|
 |
Labyrnth Moderator
Reputation: 10
Joined: 28 Nov 2006 Posts: 6300
|
Posted: Mon Jun 04, 2007 5:54 pm Post subject: |
|
|
Well i dont know about using read with C++ so thats out.
maybe read byte would work?
Static "beating the DMA is: 5E5F51
^ That is the static address if it is the same one that your scans lead you too each time.
But a pointer would have the value. and thats what you need to read from i would think.
Im guess here cause i never used read memory but in autoit. and those address's are static ones.
|
|
| Back to top |
|
 |
0_00_0 Cheater
Reputation: 0
Joined: 17 Feb 2007 Posts: 30
|
Posted: Mon Jun 04, 2007 6:03 pm Post subject: |
|
|
i'm a pretty proficient autoIT programmer as well, about 3 years? (probably more) anyways.. C++ is no different. here's the syntax:
| Code: | BOOL ReadProcessMemory(
HANDLE hProcess, //handle to the process
LPCVOID lpBaseAddress, //base address to be read
LPVOID lpBuffer, //buffer to recieve the information
DWORD nSize, // how many bytes to read
LPDWORD lpNumberOfBytesRead //buffer to recieve # of bytes written.
); |
you plug the same address that you would plug into au3 as you would into C++.
anyways.. heres what i'm doing currently, i'm getting a level one pointer that is not static.
find my value
find what writes to it
perform hex search on the EAX value, get 2 values
add a new pointer with one of the addresses as base, plus the offset 58
i get a level one pointer that points to the same value as my origional value.
great, now lets see what writes to the pointer... wait.. the game crashes.
I'm using vista, i'm not sure if this is a huge block.
I may be doing the complete wrong thing here, so i could use some guidance
Thanks for the help so far man!
_________________
C++
autoIT
Java PrOgRaMmEr |
|
| Back to top |
|
 |
Labyrnth Moderator
Reputation: 10
Joined: 28 Nov 2006 Posts: 6300
|
Posted: Mon Jun 04, 2007 7:00 pm Post subject: |
|
|
| Vista has most likely just owned you....
|
|
| Back to top |
|
 |
0_00_0 Cheater
Reputation: 0
Joined: 17 Feb 2007 Posts: 30
|
Posted: Mon Jun 04, 2007 7:32 pm Post subject: |
|
|
and i am about to break something...
VISTA = GAY.
downloading XP now.. i'm sick of this.
_________________
C++
autoIT
Java PrOgRaMmEr |
|
| Back to top |
|
 |
kjmarket Grandmaster Cheater
Reputation: 0
Joined: 11 Oct 2006 Posts: 600
|
Posted: Mon Jun 04, 2007 9:05 pm Post subject: |
|
|
Theres been a LOT of people complaining about Vista, whether on this forum or anywhere else. Most people seem to think it sucks all around. Good thing I decided not to upgrade yet. I may not at all.
_________________
I can hear the voices of opcodes. "Come and NOP me!" Come and NOP me!" |
|
| Back to top |
|
 |
0_00_0 Cheater
Reputation: 0
Joined: 17 Feb 2007 Posts: 30
|
Posted: Tue Jun 05, 2007 2:06 pm Post subject: |
|
|
| kjmarket wrote: | | Theres been a LOT of people complaining about Vista, whether on this forum or anywhere else. Most people seem to think it sucks all around. Good thing I decided not to upgrade yet. I may not at all. |
don't. not worth it. there is not 1 positive side to vista.
_________________
C++
autoIT
Java PrOgRaMmEr |
|
| Back to top |
|
 |
Labyrnth Moderator
Reputation: 10
Joined: 28 Nov 2006 Posts: 6300
|
Posted: Tue Jun 05, 2007 4:58 pm Post subject: |
|
|
Yeah there is one, I looks kool.
When they make "Vista compatible for CE" then i might switch.
|
|
| Back to top |
|
 |
|