Working Offsets (Mem/Hacks) : EverQuest 2 Nerfed Info

Code: Select all

Base 10     Base 16
[Decimal]  [Hex]
0         0
1         1
2         2
3         3
4         4
5         5
6         6
7         7
8         8
9         9
10         A
11         B
12         C
13         D
14         E
15         F

Example:

FF = 255 Decimal because FF: (F*16^1)+(F*16^0) == (15*16^1=240)+(15*16^0=15) == 255 -> (for your information 16^0 = 1)

Code: Select all

#include <iostream>
#include <windows.h>
using namespace std;

int main(int argc, char *argv[])
{
   //Game Window Handle, Id
   char windowTitle[] = "Minesweeper"; 
   HWND gWindow;
   HANDLE gHandle;
   DWORD procId;
   //Read - Write Memory
   DWORD read;
   DWORD written;
   //Base address to act on
   long base_address = 0x100579C;
   long base_address_nop = 0x1002FF5;
   //Storage Buffer (1 x BYTE long)
   DWORD rBuffer = 0;
   DWORD wBuffer = 0;
      
   cout << "Looking for " << windowTitle << " ....\n";

   do
   {
      gWindow = FindWindow(NULL, windowTitle);
   } while (!gWindow);

   cout << "Got " << windowTitle << " Attaching to process...\n";

   GetWindowThreadProcessId(gWindow, &procId);
    gHandle = OpenProcess(PROCESS_ALL_ACCESS, FALSE, procId);
   
   if(!gHandle) 
   {
      cerr << "Failed to attach to process!\n";
      return 0;
   }
   
   ReadProcessMemory(gHandle, (void*)base_address, &rBuffer, sizeof(rBuffer), &read);
   
   if(!read) 
   {
      cerr << "Could not read memory!\n";
      return 0;
   }

   printf("Read Value: 0x%X, Size of Read(%d bytes)\n", rBuffer, sizeof(rBuffer));

   WriteProcessMemory(gHandle, (void*)base_address, &wBuffer, sizeof(wBuffer), &written);
   
   ReadProcessMemory(gHandle, (void*)base_address, &rBuffer, sizeof(rBuffer), &read);
   
   printf("Read Value: 0x%X, Size of Read(%d bytes) -> After Write!\n", rBuffer, sizeof(rBuffer));
   

   //Write array of Bytes - NOP to timer..
   BYTE byteArray[6] = {0x90,0x90,0x90,0x90,0x90,0x90};

   WriteProcessMemory(gHandle, (void*)base_address_nop, &byteArray, sizeof(byteArray), &written);

   CloseHandle(gHandle); 

   return 0;
}

Code: Select all

using System;
using System.Diagnostics;
using System.Runtime.InteropServices;

namespace SweepMine
{
   /// <summary>
   /// Summary description for Class1.
   /// </summary>
   class Class1
   {
      /// <summary>
      /// The main entry point for the application.
      /// </summary>
      [STAThread]
      static void Main(string[] args)
      {

         Console.Write("Looking for \"winmine\"...");


         //find the process and if we dont find it exit.
         Process[] pArray = Process.GetProcessesByName("winmine");
         if (pArray.Length == 0)
            return;

         Console.WriteLine("Found!");

         // Create memory reader
         ProcessMemoryReader pReader = new ProcessMemoryReader();

         // Take the first process found
         pReader.ReadProcess = pArray[0];

         //Open the process for reading/writing
         pReader.OpenProcess();

         //something to count the number of bytes we read (-1 to mean error if we fail)
         int aout=-1;

         //write the the damn hack at 0x1002FF5 with the NOP bytes 'new byte [] {0x90,0x90,0x90,0x90,0x90,0x90}'
         pReader.WriteProcessMemory(((IntPtr)0x1002FF5),new byte[] {0x90,0x90,0x90,0x90,0x90,0x90},out aout);

         
         //output the number of bytes we wrote
         Console.WriteLine("Wrote {0} bytes to memory!",aout);
         
         //close the handle
         pReader.CloseHandle();

         //wait for user input
         Console.Read();



      }


      public class ProcessMemoryReader
      {
         public class ProcessMemoryAPI 
         {
         
            //API calls (this is what lets us call native win32 apis)
            [DllImport("kernel32.dll")]
            public static extern IntPtr OpenProcess(UInt32 dwDesiredAccess, Int32 bInheritHandle, UInt32 dwProcessId);
            [DllImport("kernel32.dll")]
            public static extern Int32 CloseHandle(IntPtr hObject);
            [DllImport("kernel32.dll")]
            public static extern Int32 ReadProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress,[In, Out] byte[] buffer, UInt32 size, out IntPtr lpNumberOfBytesRead);
            [DllImport("kernel32.dll")]
            public static extern Int32 WriteProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress,[In, Out] byte[] buffer, UInt32 size, out IntPtr lpNumberOfBytesWritten);


            //Process access flags
            [Flags]
               public enum ProcessAccessType
            {
               PROCESS_TERMINATE         = (0x0001),
               PROCESS_CREATE_THREAD      = (0x0002), 
               PROCESS_SET_SESSIONID      = (0x0004), 
               PROCESS_VM_OPERATION      = (0x0008), 
               PROCESS_VM_READ            = (0x0010), 
               PROCESS_VM_WRITE         = (0x0020), 
               PROCESS_DUP_HANDLE         = (0x0040), 
               PROCESS_CREATE_PROCESS      = (0x0080), 
               PROCESS_SET_QUOTA         = (0x0100), 
               PROCESS_SET_INFORMATION      = (0x0200), 
               PROCESS_QUERY_INFORMATION   = (0x0400) 
            }
         }


         //Simple class for managing processes and make it look clean
         public ProcessMemoryReader()
         {
         }

         //public place to read processes from 
         public Process ReadProcess
         {
            get
            {
               return m_ReadProcess;
            }
            set
            {
               m_ReadProcess = value;
            }
         }


         //private process ALL MINE MINEEE!!!
         private Process m_ReadProcess = null;

         //default PID
         private IntPtr m_hProcess = IntPtr.Zero;


         //Opens the process for read/write
         public void OpenProcess()
         {
      
            //sets what type of access we want; in this care Read/Write
            ProcessMemoryAPI.ProcessAccessType access;
            access = ProcessMemoryAPI.ProcessAccessType.PROCESS_VM_READ 
               | ProcessMemoryAPI.ProcessAccessType.PROCESS_VM_WRITE 
               | ProcessMemoryAPI.ProcessAccessType.PROCESS_VM_OPERATION;
      
            //calls the API and actually opens up the process
            m_hProcess = ProcessMemoryAPI.OpenProcess((uint)access, 1, (uint)m_ReadProcess.Id);
         }

         //closes the process from whatever we were doing.
         public void CloseHandle()
         {
            int iRetValue;
            iRetValue = ProcessMemoryAPI.CloseHandle(m_hProcess);
            if (iRetValue == 0)
               throw new Exception("CloseHandle failed");
         }

         //reads that perdy memory AND outs the number of bytes read.
         public byte[] ReadProcessMemory(IntPtr MemoryAddress, uint bytesToRead, out int bytesRead)
         {
            byte[] buffer = new byte[bytesToRead];
         
            IntPtr ptrBytesRead;
            ProcessMemoryAPI.ReadProcessMemory(m_hProcess,MemoryAddress,buffer ,bytesToRead,out ptrBytesRead);
         
            bytesRead = ptrBytesRead.ToInt32();

            return buffer;
         }

         //even better than the top function, writes things to the memory and returns number of bytes written.
         public void WriteProcessMemory(IntPtr MemoryAddress, byte[] bytesToWrite ,out int bytesWritten)
         {
            IntPtr ptrBytesWritten;
            ProcessMemoryAPI.WriteProcessMemory(m_hProcess,MemoryAddress,bytesToWrite,(uint)bytesToWrite.Length,out ptrBytesWritten);
         
            bytesWritten = ptrBytesWritten.ToInt32();
         }
      }

   }
}