Page 1 of 2 12 LastLast
Results 1 to 10 of 15
  1. #1
    dkaitos
    dkaitos is offline
    New member dkaitos's Avatar
    Join Date
    2011 Mar
    Posts
    35
    Thanks Thanks Given 
    1
    Thanks Thanks Received 
    1
    Thanked in
    1 Post
    Rep Power
    0

    Question about values in EDEN ETERNAL

    Hi all guys,

    Some days ago I decided to hack the client of EDEN ETERNAL, a fresh aeria game, just went in open beta.
    I never hacked a MMO, I want to try with this, because it's like any other classic MMORPG.
    I can find the values but seems all these values are just the "labels" written on the interface of the game, so I could not really change ATK speed or MOV speed.

    How do I know if the values are stored on the client?
    If these values are stored on the client, how can I change them?


    Thanks in advice for any response/comments.

  2. #2
    Dwar
    Dwar is offline
    Veteran Dwar's Avatar
    Join Date
    2010 Mar
    Posts
    2,222
    Thanks Thanks Given 
    211
    Thanks Thanks Received 
    2,230
    Thanked in
    292 Posts
    Rep Power
    10
    Quote Originally Posted by dkaitos View Post
    How do I know if the values are stored on the client?
    Check them all... I always follow these steps when begin to analyze new client:
    1. Check all common values. But as these values are "common" it's difficult to find bugs
    2. Check game files. Will help you a little bit to understand client structure
    3. Debug the client
    4. Trace, check, trace etc... Read disassembled code to find something

    But don't forget, in OBT many clients without protection... after release they will be packed and some rootkits/viruses will be attached to them (HS, GG, xTrap etc)
    Please, post your questions on forum, not by PM or mail

    I spend my time, so please pay a little bit of your time to keep world in equilibrium

  3. #3
    dkaitos
    dkaitos is offline
    New member dkaitos's Avatar
    Join Date
    2011 Mar
    Posts
    35
    Thanks Thanks Given 
    1
    Thanks Thanks Received 
    1
    Thanked in
    1 Post
    Rep Power
    0
    Thanks for your tips, I'm going to follow all your steps.

    Quote Originally Posted by Dwar View Post
    But don't forget, in OBT many clients without protection... after release they will be packed and some rootkits/viruses will be attached to them (HS, GG, xTrap etc)
    Infact, I want to have the chanche to work without Antihacks system becouse I'm a newbie ^^"

  4. #4
    Dwar
    Dwar is offline
    Veteran Dwar's Avatar
    Join Date
    2010 Mar
    Posts
    2,222
    Thanks Thanks Given 
    211
    Thanks Thanks Received 
    2,230
    Thanked in
    292 Posts
    Rep Power
    10
    Quote Originally Posted by dkaitos View Post
    without Antihacks system
    So, seize the day
    Please, post your questions on forum, not by PM or mail

    I spend my time, so please pay a little bit of your time to keep world in equilibrium

  5. #5
    dkaitos
    dkaitos is offline
    New member dkaitos's Avatar
    Join Date
    2011 Mar
    Posts
    35
    Thanks Thanks Given 
    1
    Thanks Thanks Received 
    1
    Thanked in
    1 Post
    Rep Power
    0
    I think these values are encrypted, I think i should find the REAL values stored somewhere... Should I look what writes that address right?

  6. #6
    Dwar
    Dwar is offline
    Veteran Dwar's Avatar
    Join Date
    2010 Mar
    Posts
    2,222
    Thanks Thanks Given 
    211
    Thanks Thanks Received 
    2,230
    Thanked in
    292 Posts
    Rep Power
    10
    Quote Originally Posted by dkaitos View Post
    Should I look what writes that address right
    Yeah, try to find routines that writes data to that addresses; set memory BP on read/write.
    Please, post your questions on forum, not by PM or mail

    I spend my time, so please pay a little bit of your time to keep world in equilibrium

  7. #7
    dkaitos
    dkaitos is offline
    New member dkaitos's Avatar
    Join Date
    2011 Mar
    Posts
    35
    Thanks Thanks Given 
    1
    Thanks Thanks Received 
    1
    Thanked in
    1 Post
    Rep Power
    0
    0050CA75 - D9 9A 80000000 - fstp dword ptr [edx+00000080] //When i debug i find this write on my values

    so i open the memory for more understanding

    0050CA5E - E8 BDDB0600 - call 0057A620
    0050CA63 - 5F - pop edi
    0050CA64 - 5E - pop esi
    0050CA65 - C2 0800 - ret 0008
    0050CA68 - DB 44 24 10 - fild dword ptr [esp+10]
    0050CA6C - 8B 56 0C - mov edx,[esi+0C] // It put inside EDX, ESI plus 0C [*1]
    0050CA6F - D8 0D 8C59B300 - fmul dword ptr [00B3598C] : [(float)0.0010] // a multiply (?)
    0050CA75 - D9 9A 80000000 - fstp dword ptr [edx+00000080] // <--- LINE WHERE IT WRITES [*2]
    0050CA7B - 8B 46 0C - mov eax,[esi+0C]
    0050CA7E - 8B 88 80000000 - mov ecx,[eax+00000080]
    0050CA84 - 8B 56 24 - mov edx,[esi+24]
    0050CA87 - 51 - push ecx
    0050CA88 - 8B 8A 88000000 - mov ecx,[edx+00000088]
    0050CA8E - E8 FDDB0600 - call 0057A690

    [*1] here ESI = 0CE9F040
    [*2] here EDX = 0CEA04E0

    inside ESI and EDX, there are addresses, right? Should I go look in those addresses for earn the real values?

  8. #8
    Dwar
    Dwar is offline
    Veteran Dwar's Avatar
    Join Date
    2010 Mar
    Posts
    2,222
    Thanks Thanks Given 
    211
    Thanks Thanks Received 
    2,230
    Thanked in
    292 Posts
    Rep Power
    10
    Quote Originally Posted by dkaitos View Post
    Should I go look in those addresses
    Check this routine from the beginning, step-by-step trace and watch for registers.
    By the way, game will be protected by xTrap (or maybe). Also it looks like another GrandFantasia modification
    Please, post your questions on forum, not by PM or mail

    I spend my time, so please pay a little bit of your time to keep world in equilibrium

  9. #9
    dkaitos
    dkaitos is offline
    New member dkaitos's Avatar
    Join Date
    2011 Mar
    Posts
    35
    Thanks Thanks Given 
    1
    Thanks Thanks Received 
    1
    Thanked in
    1 Post
    Rep Power
    0
    Quote Originally Posted by Dwar View Post
    By the way, game will be protected by xTrap (or maybe). Also it looks like another GrandFantasia modification
    Is this good ?

  10. #10
    Dwar
    Dwar is offline
    Veteran Dwar's Avatar
    Join Date
    2010 Mar
    Posts
    2,222
    Thanks Thanks Given 
    211
    Thanks Thanks Received 
    2,230
    Thanked in
    292 Posts
    Rep Power
    10
    Quote Originally Posted by dkaitos View Post
    Is this good ?
    What exactly? Xtrap or GrandFantasia? xTrap has some interesting protection methods, but as others game protection app - it's a ratified virus About GF, dunno, generally I don't play games
    Please, post your questions on forum, not by PM or mail

    I spend my time, so please pay a little bit of your time to keep world in equilibrium

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •