Page 1 of 1

SC2 Cheats - Starcraft 2 Hacking Tool Packets

Posted: July 17th, 2010, 1:18 am
by tault_Broden
Code:
struct SHeader
{
DWORD dwProtocol; // 0x03
DWORD dwSize; // Without Header!
byte bPacketId;
};

struct SUnitAction : SHeader // PacketId 0x1B
{
DWORD dwActionType; // Move -> 0x88020000, Attack -> 0x8C020000, Queue -> 0x8A020000
DWORD dwUnk; // When moving unit(s): 0x007FFFFF, when building SCV: 0x00000701 ,when canceling SCV: 0x00016800
DWORD dwUnk2; // When moving unit(s): 0x0F, When building/canceling SCV: 0x07, 0x37 when setting rally point
DWORD dwUnk3; // 0x501 when setting rally point
DWORD dwTargetId;
DWORD dwPosX;
DWORD dwPosY;
DWORD dwPosZ;
}; // sizeof 0x21


Moving unit around, normal and queuein' moves

Code:
04EF956C 03 00 00 00 21 00 00 00 1B 00 00 02 8A FF FF 7F ...!.....Šÿÿ
04EF957C 00 0F 00 00 00 00 00 00 00 00 00 00 00 80 08 BA ............ۼ
04EF958C F5 80 06 6D 8E 80 00 BF DD õ€mŽ€.¿Ý

04EF956C 03 00 00 00 21 00 00 00 1B 00 00 02 8A FF FF 7F ...!.....Šÿÿ
04EF957C 00 0F 00 00 00 00 00 00 00 00 00 00 00 80 08 24 ............€$
04EF958C 0B 80 06 89 A8 80 00 BF DC €‰¨€.¿Ü

04C8956C 03 00 00 00 21 00 00 00 1B 00 00 02 88 FF FF 7F ...!.....ˆÿÿ
04C8957C 00 0F 00 00 00 00 00 00 00 00 00 00 00 80 08 B1 ............€±
04C8958C 95 80 06 42 FC 80 00 BF DC •€Bü€.¿Ü..

04C8956C 03 00 00 00 21 00 00 00 1B 00 00 02 8A FF FF 7F ...!.....Šÿÿ
04C8957C 00 0F 00 00 00 00 00 00 00 00 00 00 00 80 08 38 ............€8
04C8958C 65 80 06 67 2A 80 00 BF DE e€g*€.¿Þ..

04C8956C 03 00 00 00 21 00 00 00 1B 00 00 02 88 FF FF 7F ...!.....ˆÿÿ
04C8957C 00 0F 00 00 00 00 00 00 00 00 00 00 00 80 08 44 ............€D
04C8958C 91 80 06 B5 BC 80 00 BF DD ‘€µ¼€.¿Ý

04C8956C 03 00 00 00 21 00 00 00 1B 00 00 02 8A FF FF 7F ...!.....Šÿÿ
04C8957C 00 0F 00 00 00 00 00 00 00 00 00 00 00 80 08 A2 ............€¢
04C8958C 3F 80 06 41 4E 80 00 BF DF ?€AN€.¿ß

04C8956C 03 00 00 00 21 00 00 00 1B 00 00 02 00 01 07 00 ...!.......
04C8957C 00 07 00 00 00 00 00 00 00 00 00 00 00 80 00 00 ............€..
04C8958C 00 80 00 00 00 80 00 00 00 .€...€...

Set Rally point

Code:
04CD956C 03 00 00 00 22 00 00 00 1B 00 00 02 88 FF FF 7F ...".....ˆÿÿ
04CD957C 00 37 00 00 00 00 00 01 50 00 01 01 EC 80 00 8C .7.....P.ì€.Œ
04CD958C 00 80 00 72 80 80 00 0B FB .€.r€€. û

Build SCV

Code:
04C8956C 03 00 00 00 21 00 00 00 1B 00 00 02 00 01 07 00 ...!.......
04C8957C 00 07 00 00 00 00 00 00 00 00 00 00 00 80 00 00 ............€..
04C8958C 00 80 00 00 00 80 00 00 00 .€...€...

Cancel WBF

Code:
04CD956C 03 00 00 00 21 00 00 00 1B 00 00 0A 00 00 68 01 ...!........h
04CD957C 00 07 00 00 00 00 00 00 00 00 04 00 00 80 00 00 ...........€..
04CD958C 00 80 00 00 00 80 00 .€...€.


Select Unit:

Code:
04CD956C 03 00 00 00 0E 00 00 00 9C 02 00 09 01 04 08 01 ......œ..
04CD957C 01 01 1E 00 00 01 00 00 00 00 00 00 00 00 00 00 ............
04CD958C 00 00 00 00 00 00 00 .......

Pause Game:

Code:
04CD956C 03 00 00 00 06 00 00 00 90 00 00 00 0E 07


Unpause Game:

Code:
04CD956C 03 00 00 00 06 00 00 00 91 00 00 00 0E 03


Ally Stuff:

Code:
04CD956C 03 00 00 00 09 00 00 00 26 00 00 00 00 00 00 00 .......&.......
04CD957C 00 00 ..


This is where packet is sent (before crypted):
Code:

00E17910 8B0D 9C279A01 MOV ECX,DWORD PTR DS:[19A279C]
00E17916 8D85 889CFEFF LEA EAX,DWORD PTR SS:[EBP+FFFE9C88]
00E1791C 50 PUSH EAX
00E1791D 68 18289A01 PUSH SC2.019A2818 ; ASCII "perCppA"
00E17922 6A 02 PUSH 2
00E17924 E8 D73DC5FF CALL SC2.00A6B700


Note: That function is only called if you're on battle.net.

Posted: July 27th, 2010, 9:04 am
by dragonaged
Awesome. I wonder how many of these have changed.

Posted: July 28th, 2010, 11:23 am
by tault_Broden
Prob none of them due to the game.