| View previous topic :: View next topic |
| Author |
Message |
Anden100
Grandmaster Cheater
![]() Reputation: 0
Joined: 20 Apr 2007
Posts: 668
|
 Posted: Sat Apr 19, 2008 2:40 am Post subject: Using RekW0n's smuggler, without the .dll |
 |
|
Is it possible, to avoid using the .dll from RekW0n's smuggler source, and just include, the functions inside the .dll, in my project?, i only got the .dll, not the source, and i really wish to do it without the .dll 
|
|
| Back to top |
|
 |
DeletedUser14087
I post too much
![]() Reputation: 2
Joined: 21 Jun 2006
Posts: 3069
|
| Posted: Sat Apr 19, 2008 3:28 am Post subject: |
|
|
The APIs that the smuggler uses are from that .dll, you can't avoid from using it unless you will use IPHLPAPI.pas (which can be found on google),i don't know i haven't tried but give it a shot.
Open question: Why don't microsoft support object pascal ?
there's a war between Borland and Microsoft ;.;
|
|
| Back to top |
|
|
Anden100
Grandmaster Cheater
![]() Reputation: 0
Joined: 20 Apr 2007
Posts: 668
|
| Posted: Sat Apr 19, 2008 5:06 am Post subject: |
|
|
| i guess ill just use the .dll then...
|
|
| Back to top |
|
|
atom0s
Moderator
 Reputation: 205
Joined: 25 Jan 2006
Posts: 8587
Location: 127.0.0.1
|
| Posted: Sat Apr 19, 2008 9:06 am Post subject: |
|
|
Care to link to the source code? And what function would you be talking about from it? (Whats it do?)
_________________
- Retired. |
|
| Back to top |
|
|
Anden100
Grandmaster Cheater
![]() Reputation: 0
Joined: 20 Apr 2007
Posts: 668
|
|
| Back to top |
|
|
atom0s
Moderator
Reputation: 205
Joined: 25 Jan 2006
Posts: 8587
Location: 127.0.0.1
|
| Posted: Sat Apr 19, 2008 10:49 am Post subject: |
|
|
| Anden100 wrote: | | http://forum.cheatengine.org/viewtopic.php?t=163491 |
Ok, and what function(s) did you want to use without the DLL?
_________________
- Retired. |
|
| Back to top |
|
|
Anden100
Grandmaster Cheater
![]() Reputation: 0
Joined: 20 Apr 2007
Posts: 668
|
| Posted: Sat Apr 19, 2008 10:53 am Post subject: |
|
|
| well... the main function, enable/disable the internet connection O.o
|
|
| Back to top |
|
|
atom0s
Moderator
Reputation: 205
Joined: 25 Jan 2006
Posts: 8587
Location: 127.0.0.1
|
| Posted: Sat Apr 19, 2008 11:00 am Post subject: |
|
|
| Anden100 wrote: | | well... the main function, enable/disable the internet connection O.o |
Well the dll itself doesn't seem to be included with the source code, and the DropAllU unit is not rek's code (As said by the other topic and google search found the same code (older) on other sites.) You would need to take a look at the source of the DLL to rewrite the same thing inside the program.
The DLL itself doesn't appear to get injected but instead, the functions are imported and called, so you could do it without the DLL if you learned what is being done inside that DLL. Debugging can probably help you figure that out.
_________________
- Retired. |
|
| Back to top |
|
|
Anden100
Grandmaster Cheater
![]() Reputation: 0
Joined: 20 Apr 2007
Posts: 668
|
| Posted: Sat Apr 19, 2008 1:12 pm Post subject: |
|
|
| Wiccaan wrote: | | Anden100 wrote: | | well... the main function, enable/disable the internet connection O.o |
Well the dll itself doesn't seem to be included with the source code, and the DropAllU unit is not rek's code (As said by the other topic and google search found the same code (older) on other sites.) You would need to take a look at the source of the DLL to rewrite the same thing inside the program.
The DLL itself doesn't appear to get injected but instead, the functions are imported and called, so you could do it without the DLL if you learned what is being done inside that DLL. Debugging can probably help you figure that out. |
Yea, i found out that myself, but since i dont got the source of the .dll, im pretty stuck at this point...
this is what i found:
| Code: | procedure InstallFW(MyIP: String);
var
IpLocal : TIpBytes;
ipOther : TIpBytes;
ipOtherMask : TIpBytes;
ipMy : TIpBytes;
ipMyMask : TIpBytes;
begin
if (MyIP <> '') and Not Assigned(Handle_Interface) then begin
FillChar(IpLocal, 4, #0);
IpLocal := StrToIpBytes(MyIP);
PfCreateInterface(0, PF_ACTION_FORWARD, PF_ACTION_FORWARD, False, False, Handle_Interface);
PfBindInterfaceToIPAddress(Handle_Interface, PF_IPV4, @ipLocal);
//
ipMy := StrToIpBytes(PChar(MyIP));
ipMyMask := StrToIpBytes('255.255.255.255');
//
ipOther := StrToIpBytes('0.0.0.0');
ipOtherMask := StrToIpBytes('0.0.0.0');
// Eingehende Pakete
ZeroMemory(@ipFltIn, SizeOf(ipFltIn));
ipFltIn.dwFilterFlags := 0;
ipFltIn.dwRule := 0;
ipFltIn.pfatType := PF_IPV4;
ipFltIn.fLateBound := 0;
ipFltIn.dwProtocol := FILTER_PROTO_TCP;
ipFltIn.wDstPort := FILTER_TCPUDP_PORT_ANY;
ipFltIn.wDstPortHighRange := FILTER_TCPUDP_PORT_ANY;
ipFltIn.DstAddr := @ipMy;
ipFltIn.DstMask := @ipMyMask;
ipFltIn.wSrcPort := 80;
ipFltIn.wSrcPortHighRange := 80;
ipFltIn.SrcAddr := @ipOther;
ipFltIn.SrcMask := @ipOtherMask;
// Ausgehende Pakete
ZeroMemory(@ipFltOut, SizeOf(ipFltOut));
ipFltOut.dwFilterFlags := 0;
ipFltOut.dwRule := 0;
ipFltOut.pfatType := PF_IPV4;
ipFltOut.fLateBound := 0;
ipFltOut.dwProtocol := FILTER_PROTO_TCP;
ipFltOut.wDstPort := 80;
ipFltOut.wDstPortHighRange := 80;
ipFltOut.DstAddr := @ipOther;
ipFltOut.DstMask := @ipOtherMask;
ipFltOut.wSrcPort := FILTER_TCPUDP_PORT_ANY;
ipFltOut.wSrcPortHighRange := FILTER_TCPUDP_PORT_ANY;
ipFltOut.SrcAddr := @ipMy;
ipFltOut.SrcMask := @ipMyMask;
PfAddFiltersToInterface(Handle_Interface, 1, @ipFltIn, 1, @ipFltOut, nil);
end;
end; |
| Code: |
undeclared identifier: 'TIpBytes'
Wondering wich unit i need..., and then i just need the "removefw"... |
|
|
| Back to top |
|
|
DeletedUser14087
I post too much
![]() Reputation: 2
Joined: 21 Jun 2006
Posts: 3069
|
| Posted: Sat Apr 19, 2008 4:03 pm Post subject: |
|
|
| Wiccaan wrote: | | Care to link to the source code? And what function would you be talking about from it? (Whats it do?) |
_PfCreateInterface@24
_PfDeleteInterface@4
_PfBindInterfaceToIPAddress@12
_PfUnBindInterface@4
| Code: | function PCrtInterFc(
dwName: DWORD;
inAction: The_Action;
outAction: The_Action;
bUseLog: BOOL;
bMustBeUnique: BOOL;
var ppInterface: The_Handle
):DWORD;
stdcall; external TheDll name '_PfCreateInterface@24';
function PDltInterFc(
pInterface: The_Handle): DWORD;
stdcall; external TheDll name '_PfDeleteInterface@4';
function PBndIntrfc2IPAddy(
pInterface: The_Handle;
pfatLinkType: AddyType;
IPAddress: PB_A): DWORD;
stdcall; external TheDll name '_PfBindInterfaceToIPAddress@12';
function PfUnBindInterface(
pInterface: The_Handle): DWORD;
stdcall; external TheDll name '_PfUnBindInterface@4'; |
i think you should hook these APIs to make it work again.
|
|
| Back to top |
|
|
atom0s
Moderator
Reputation: 205
Joined: 25 Jan 2006
Posts: 8587
Location: 127.0.0.1
|
| Posted: Sun Apr 20, 2008 8:46 am Post subject: |
|
|
Those aren't API. They are exports from that DLL...
@Anden100: Yeah, but that code is making calls to the exported functions from that DLL which using just that code isn't going to do anything since you still need the DLL to use them. If anything, look around for that DLL and see if you can find the source to do it and replicate it without being in a DLL.
_________________
- Retired. |
|
| Back to top |
|
|
DeletedUser14087
I post too much
![]() Reputation: 2
Joined: 21 Jun 2006
Posts: 3069
|
| Posted: Sun Apr 20, 2008 9:17 am Post subject: |
|
|
| Wiccaan wrote: | Those aren't API. They are exports from that DLL...
@Anden100: Yeah, but that code is making calls to the exported functions from that DLL which using just that code isn't going to do anything since you still need the DLL to use them. If anything, look around for that DLL and see if you can find the source to do it and replicate it without being in a DLL. |
i toled him to search for iphlpapi.pas
btw, if they're not APIs, mind explaining me why it is called iphlpapi.dll ?
|
|
| Back to top |
|
|
atom0s
Moderator
Reputation: 205
Joined: 25 Jan 2006
Posts: 8587
Location: 127.0.0.1
|
| Posted: Sun Apr 20, 2008 9:21 am Post subject: |
|
|
| Rot1 wrote: | | btw, if they're not APIs, mind explaining me why it is called iphlpapi.dll ? |
They're not Win32 API which is what you made it sound like you were referring to by telling him/me to look them up. Which is what my response was meaning.
_________________
- Retired. |
|
| Back to top |
|
|
DeletedUser14087
I post too much
![]() Reputation: 2
Joined: 21 Jun 2006
Posts: 3069
|
| Posted: Sun Apr 20, 2008 12:49 pm Post subject: |
|
|
| Wiccaan wrote: | | Rot1 wrote: | | btw, if they're not APIs, mind explaining me why it is called iphlpapi.dll ? |
They're not Win32 API which is what you made it sound like you were referring to by telling him/me to look them up. Which is what my response was meaning. |
i didn't say their Win32 APIs, but they're exported function, so they are considered as api.
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
