Jump to content
Moopler
  • 0
Sign in to follow this  
Progity

Question Auto login script

Question

1 answer to this question

Recommended Posts

  • 0
Guest yuri

You can update the old ones off @Suu's github (if still there) or in the nDev script folder. I think the webstart method still works too.

only thing I think left is writing a script for auto picking the gms / ems selection menu.
 

;; Looking into mouse action trace - v178.3
;; May be useful or complete shit...

;; Mouse trace changes to different numbers on hovering on each gui element
;; changes to 0 nothing -> found 029E7C3C

;; I see that the mouse hover over object can be found 
00AC7412 - A3 3C7C9E02           - mov [029E7C3C],eax { [00000000] }

;; On trace mouse hover and click calls this function
00E03D40 - 6A FF                 - push -01 { 255 }

;; Mouse clicking on an object is handled here in function 00E03D40
00E03F80 - FF D0                 - call eax

;; Following the trace
 ; compare to 3 different dynamic types..
   ; not on object 
   ; x54: 7C 65 32 28 00 00 00 00 00 00 00 00 00 00 00 00 
   ; x64: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   ; x74: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   ; x84: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   ; on hover
   ; x54: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   ; x64: 74 E4 B8 17 00 00 00 00 00 00 00 00 00 00 00 00  
   ; x74: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   ; x84: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   ; on click
   ; x54: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   ; x64: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   ; x74: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   ; x84: 74 E4 B8 17 00 00 00 00 00 00 00 00 00 00 00 00 
00E03ACF - 39 9C B7 78090000     - cmp [edi+esi*4+00000978],ebx     

;; Which  can be see being placed and compared, jmping, then calling...
00E03C09 - 3B CB                 - cmp ecx,ebx
;; etc...
  
;; Following actions (of the 3 types) now leads to these compares or moves
00E03F5F - 39 AC 86 78090000  - cmp [esi+eax*4+00000978],ebp
00E03F68 - 8B 8C 86 78090000  - mov ecx,[esi+eax*4+00000978]
00E03F73 - 89 AC 86 78090000  - mov [esi+eax*4+00000978],ebp
00E03ACF - 39 9C B7 78090000  - cmp [edi+esi*4+00000978],ebx
00E03BB7 - 8B AC B7 78090000  - mov ebp,[edi+esi*4+00000978]
00E03BC5 - 89 84 B7 78090000  - mov [edi+esi*4+00000978],eax
00E03BF5 - 39 9C B7 78090000  - cmp [edi+esi*4+00000978],ebx
00E03C02 - 8B 8C B7 78090000  - mov ecx,[edi+esi*4+00000978]
00E03C21 - 8B AC B7 78090000  - mov ebp,[edi+esi*4+00000978]
00E03C57 - 8B AC B7 78090000  - mov ebp,[edi+esi*4+00000978]
00E03CAD - 8B 8C B7 78090000  - mov ecx,[edi+esi*4+00000978]
00E03FC5 - 39 AC 86 78090000  - cmp [esi+eax*4+00000978],ebp
0085C144 - 8B 00  - mov eax,[eax] 

;; This pretty close at what I'm looking for
0085C144 - 8B 00                 - mov eax,[eax]

;; Why?
  ;; head of function is 
  0085C140 --> inputs needed info in call
;---------------------------------------------  
0085C140 - 8B 44 24 04           - mov eax,[esp+04]
0085C144 - 8B 00                 - mov eax,[eax]
0085C146 - 56                    - push esi
0085C147 - 8B F1                 - mov esi,ecx
0085C149 - 57                    - push edi
0085C14A - 8B 3E                 - mov edi,[esi]
0085C14C - 3B F8                 - cmp edi,eax
0085C14E - 74 1A                 - je 0085C16A
0085C150 - 89 06                 - mov [esi],eax
0085C152 - 85 C0                 - test eax,eax
0085C154 - 74 08                 - je 0085C15E
0085C156 - 8B 08                 - mov ecx,[eax]
0085C158 - 8B 51 04              - mov edx,[ecx+04]
0085C15B - 50                    - push eax
0085C15C - FF D2                 - call edx
0085C15E - 85 FF                 - test edi,edi
0085C160 - 74 08                 - je 0085C16A
;---------------------------------------------
  ;; function allows this eax accesses pointer eax 28326C0C @ dynamic alloc 17D8D484
    ; on click
      ; x84: 84 E0 B8 17 00 00 00 00 00 00 00 00 00 00 00 00 (B8 17 is constant)
    ; no click
      ; x84: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  
  ; the ecx here is the comparrison from earlier at dynamic
  ; not on object 
   ; x50: 34 DF B8 17 34 DF B8 17 00 00 00 00 00 00 00 00  (B8 17 is constant)
   ; x60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   ; x70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   ; x80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
   ; on hover
   ; x50: 84 E0 B8 17 00 00 00 00 00 00 00 00 00 00 00 00  (B8 17 is constant)
   ; x60: 00 00 00 00 84 E0 B8 17 00 00 00 00 00 00 00 00
   ; x70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   ; x80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  	   
   ; on click
   ; x50: 7C 65 32 28 00 00 00 00 00 00 00 00 00 00 00 00 ; on object ; if not then something like so -> 84 E0 B8 17 00 00 00 00 00 00 00 00 00 00 00 00
   ; x60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   ; x70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   ; x80: 00 00 00 00 7C 65 32 28 00 00 00 00 00 00 00 00 ; on object ; if not then something like so -> 00 00 00 00 84 E0 B8 17 00 00 00 00 00 00 00 00
    
;; not a master at this stuff... so correct if wrong


  
  
  

 

Edited by yuri

Share this post


Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  
×