SpyUO - a C# UO packet hooker - Page 2 - RunUO

Phantom · 10-16-2003, 06:19 PM

I don't think its possible as your what you should be using.

Windows 98 is no longer supported by 90% of the computer industry time to upgrade.

Phenos · 10-19-2003, 09:22 AM

Added 4.0.0q support.

sh1ny · 10-19-2003, 07:27 PM

Can you make the zip use somekind of a version number etc ?
:>

Phantom · 10-19-2003, 07:38 PM

Why?

The program itself does so?

sh1ny · 10-19-2003, 07:47 PM

Well it had v1.4, v1.5, then v1.5 for 4.0.0p, then v1.5 for 4.0.0q and since i keep lots of stuff archived it would be nice to keep track of the version etc.

Phenos · 10-19-2003, 08:14 PM

Version number hasn't changed with 4.0.0q support because the program itself is the same.

I've only added a line to Clients.cfg:
[code:1]3F8EBB64: "4.0.0q T2A" 41AAC0 5 1 41ABF0 7 6 ;Phenos / 18 Oct 2003 Tested[/code:1]

Anyway I suggest you to always replace the old versions with the new ones.

Phenos · 11-05-2003, 05:19 PM

Added 4.0.1a support.

Folko · 11-09-2003, 04:34 AM

Phenos,

I found a way to use OpenThread() under Windows98. OpenThread was the only thing which prevented UOLog from being able to attach to the running client in Windows98.
You can read the handles from the process' API function table. Using _DuplicateHandle on the target process with a value of 4 points you to the right direction; you can read the thread's handle from there.
It requires one line of Assembly though, not sure if that's possible in the yucky C# `language'.
If I was still interested in UO, I'd put it into UOLog, but I have different projects running atm..
If you want to, I can mail you the snippet, ~100 lines of C code.

--Folko
lingua latina loquor.

Phenos · 11-09-2003, 08:06 AM

Quote:

Originally Posted by Folko

Phenos,

I found a way to use OpenThread() under Windows98. OpenThread was the only thing which prevented UOLog from being able to attach to the running client in Windows98.
You can read the handles from the process' API function table. Using _DuplicateHandle on the target process with a value of 4 points you to the right direction; you can read the thread's handle from there.
It requires one line of Assembly though, not sure if that's possible in the yucky C# `language'.
If I was still interested in UO, I'd put it into UOLog, but I have different projects running atm..
If you want to, I can mail you the snippet, ~100 lines of C code.

Yeah sure.
Thank you very much Folko, I'll give a try

**ASayre** · 12-11-2003, 12:04 AM

Phenos, 4.0.1b came out... hoping you can make this work for it :-)

**ASayre** · 12-11-2003, 01:24 PM

Nevermind, I gots it :-)

[code:1]
3FD4DA59: "4.0.1b T2A" 41AC20 5 1 41AD50 7 6 ;ASayre8 / 10 Dec 2003 Tested
[/code:1]

shadow_keeper · 12-21-2003, 02:24 PM

Is it just me, or has the download disappeared?
I seem to be able to get to http://uodreams.gamesnet.it/
Its a different matter however getting to http://uodreams.gamesnet.it/SpyUO/SpyUO.zip

Just looking for some friendly heads up on it

Phenos · 12-22-2003, 05:55 PM

I've updated the first post.

The download address has changed, and a new version with various improvements (support for 3D, a new details window, hide option, etc) has come out.

shadow_keeper · 12-22-2003, 11:27 PM

Looking good

You may want to change the post again however, perhaps remove the full stops that are straight after the urls?

Phenos · 12-24-2003, 12:46 PM

Done thanks

**ASayre** · 02-27-2004, 12:42 AM

Well, we /tried/ tried to get it to work with that client with

403671B1: "4.0.2a 2D" 405DE0 5 1 41ABF0 7 6

But it still crashes soemtimes.. nto working perfectly.

Are yas able to find the rightnumber & post 'em?

(Yes, I know this post is a lil' old, but that's cause there hasn't been a client update since then ;-) )

Phantom · 02-27-2004, 01:59 AM

The numbers are right. Something else change causing something related to a timestamp wrong.

I might be able to look at it/

darkstorm · 02-27-2004, 02:55 PM

Quote:

The numbers are right. Something else change causing something related to a timestamp wrong.

Both wrong. The number is incorrect and the timestamp is correct. Maybe you should start your messages with "I think" or "I am not sure" if you're not sure about your information...

Quote:

I might be able to look at it/

Please spend your time more wisely.

@ASayre8:
Your send address was a little off, the correct value for the send address is:
41AAC0.
a) The packet pointer is on the stack, so you need to let the client store it in the ESI register first (the mov ESI, .... opcode).

b) You need to wait until the client called the getPacketLength() function and get the packet length out of the EAX register. Thats why your breakpoint was a little too early. Corrected and tested:

403671B1: "4.0.2a 2D" 41AAC0 5 1 41ABF0 7 6

Phantom · 02-27-2004, 03:21 PM

Darkstorm,

I will ignore your attitude this time, next time I won't. But thank you for pointing out the error. So you know what we had DID work.

But the error I was getting I thought had nothing to do with the address that was off. All I knew it was working, but was giving an expection that you could ignore.

Phenos · 02-27-2004, 03:52 PM

The code for 3D client is:

Code:

403670C3: "4.0.2a 3D"        485802 6 1 485940 2 6

Anyway I'll upload a new SpyUO version soon, with an updated clients.cfg and some improvements (mostly new supported packets).

Phantom · 02-27-2004, 03:54 PM

Super :-)

Phenos · 03-02-2004, 08:06 PM

Released SpyUO 1.7.

New supported packets, more informations on previous packets, better gump parsing, etc...

Cyric · 04-23-2004, 09:56 AM

Hi,

i'd like to filter the weather packet, it's possible?

here i found a list of all packets

http://uo.elitecoder.net/phpBB/viewt...hlight=weather

and these could be the weather's packets

65 - Weather Change
Set current weather

4 bytes

Type:
0x00 = "It starts to rain"
0x01 = "A fierce storm approaches"
0x02 = "It begins to snow"
0x03 = "A storm is brewing."
0xff = Stop all weather.

byte ID (65)
byte Weather Type
byte Number of weather effects
byte Temperature

but i can't filter it..

Phenos · 04-24-2004, 11:00 AM

Option - Filter, select Show all and then select Packet(65).

If you want to automatically decode it you must add the logic to the source and recompile the program.

Cyric · 04-24-2004, 01:59 PM

Quote:

Originally Posted by Phenos

Option - Filter, select Show all and then select Packet(65).

If you want to automatically decode it you must add the logic to the source and recompile the program.

i made what you said, but the weather wasn't filtered..
i think that doesn't matter where but i try it on Uodreams

p.s. if you can give me some explanation in icq, this is mine: 63415243

thank you

10-19-2003, 07:27 PM	#28 (permalink)
sh1ny Join Date: Feb 2003 Location: Bulgaria Age: 26 Posts: 527	Can you make the zip use somekind of a version number etc ? :> __________________ "There is no substitute for good manners, except, perhaps, fast reflexes." The Fourth Dawn

10-19-2003, 07:47 PM	#30 (permalink)
sh1ny Join Date: Feb 2003 Location: Bulgaria Age: 26 Posts: 527	Well it had v1.4, v1.5, then v1.5 for 4.0.0p, then v1.5 for 4.0.0q and since i keep lots of stuff archived it would be nice to keep track of the version etc. __________________ "There is no substitute for good manners, except, perhaps, fast reflexes." The Fourth Dawn

10-19-2003, 08:14 PM	#31 (permalink)
Phenos Join Date: Jan 2003 Posts: 134	Version number hasn't changed with 4.0.0q support because the program itself is the same. I've only added a line to Clients.cfg: [code:1]3F8EBB64: "4.0.0q T2A" 41AAC0 5 1 41ABF0 7 6 ;Phenos / 18 Oct 2003 Tested[/code:1] Anyway I suggest you to always replace the old versions with the new ones. __________________ Phenos - Lorenzo Castelli E-Mail: gcastelli@racine.ra.it

11-05-2003, 05:19 PM	#32 (permalink)
Phenos Join Date: Jan 2003 Posts: 134	Added 4.0.1a support. __________________ Phenos - Lorenzo Castelli E-Mail: gcastelli@racine.ra.it

12-22-2003, 05:55 PM	#38 (permalink)
Phenos Join Date: Jan 2003 Posts: 134	I've updated the first post. The download address has changed, and a new version with various improvements (support for 3D, a new details window, hide option, etc) has come out. __________________ Phenos - Lorenzo Castelli E-Mail: gcastelli@racine.ra.it

10-16-2003, 06:19 PM	#26 (permalink)
Phantom Account Terminated Join Date: Sep 2002 Age: 26 Posts: 3,846	I don't think its possible as your what you should be using. Windows 98 is no longer supported by 90% of the computer industry time to upgrade.

10-19-2003, 09:22 AM	#27 (permalink)
Phenos Join Date: Jan 2003 Posts: 134	Added 4.0.0q support.

10-19-2003, 07:38 PM	#29 (permalink)
Phantom Account Terminated Join Date: Sep 2002 Age: 26 Posts: 3,846	Why? The program itself does so?

11-09-2003, 04:34 AM	#33 (permalink)
Folko Forum Newbie Join Date: Sep 2002 Location: World citizen Posts: 7	Phenos, I found a way to use OpenThread() under Windows98. OpenThread was the only thing which prevented UOLog from being able to attach to the running client in Windows98. You can read the handles from the process' API function table. Using _DuplicateHandle on the target process with a value of 4 points you to the right direction; you can read the thread's handle from there. It requires one line of Assembly though, not sure if that's possible in the yucky C# `language'. If I was still interested in UO, I'd put it into UOLog, but I have different projects running atm.. If you want to, I can mail you the snippet, ~100 lines of C code. --Folko lingua latina loquor.

12-11-2003, 12:04 AM	#35 (permalink)
ASayre RunUO Developer/Demise Person Join Date: Mar 2003 Location: California Age: 20 Posts: 1,700	Phenos, 4.0.1b came out... hoping you can make this work for it :-)

12-11-2003, 01:24 PM	#36 (permalink)
ASayre RunUO Developer/Demise Person Join Date: Mar 2003 Location: California Age: 20 Posts: 1,700	Nevermind, I gots it :-) [code:1] 3FD4DA59: "4.0.1b T2A" 41AC20 5 1 41AD50 7 6 ;ASayre8 / 10 Dec 2003 Tested [/code:1]

12-21-2003, 02:24 PM	#37 (permalink)
shadow_keeper Forum Novice Join Date: Jan 2003 Posts: 150	Is it just me, or has the download disappeared? I seem to be able to get to http://uodreams.gamesnet.it/ Its a different matter however getting to http://uodreams.gamesnet.it/SpyUO/SpyUO.zip Just looking for some friendly heads up on it

12-22-2003, 11:27 PM	#39 (permalink)
shadow_keeper Forum Novice Join Date: Jan 2003 Posts: 150	Looking good You may want to change the post again however, perhaps remove the full stops that are straight after the urls?

12-24-2003, 12:46 PM	#40 (permalink)
Phenos Join Date: Jan 2003 Posts: 134	Done thanks __________________ Phenos - Lorenzo Castelli E-Mail: gcastelli@racine.ra.it

02-27-2004, 12:42 AM	#41 (permalink)
ASayre RunUO Developer/Demise Person Join Date: Mar 2003 Location: California Age: 20 Posts: 1,700	4.0.2a Well, we /tried/ tried to get it to work with that client with 403671B1: "4.0.2a 2D" 405DE0 5 1 41ABF0 7 6 But it still crashes soemtimes.. nto working perfectly. Are yas able to find the rightnumber & post 'em? (Yes, I know this post is a lil' old, but that's cause there hasn't been a client update since then ;-) )

02-27-2004, 01:59 AM	#42 (permalink)
Phantom Account Terminated Join Date: Sep 2002 Age: 26 Posts: 3,846	The numbers are right. Something else change causing something related to a timestamp wrong. I might be able to look at it/

02-27-2004, 03:21 PM	#44 (permalink)
Phantom Account Terminated Join Date: Sep 2002 Age: 26 Posts: 3,846	Darkstorm, I will ignore your attitude this time, next time I won't. But thank you for pointing out the error. So you know what we had DID work. But the error I was getting I thought had nothing to do with the address that was off. All I knew it was working, but was giving an expection that you could ignore.

02-27-2004, 03:52 PM	#45 (permalink)
Phenos Join Date: Jan 2003 Posts: 134	The code for 3D client is: Code: 403670C3: "4.0.2a 3D" 485802 6 1 485940 2 6 Anyway I'll upload a new SpyUO version soon, with an updated clients.cfg and some improvements (mostly new supported packets). __________________ Phenos - Lorenzo Castelli E-Mail: gcastelli@racine.ra.it

02-27-2004, 03:54 PM	#46 (permalink)
Phantom Account Terminated Join Date: Sep 2002 Age: 26 Posts: 3,846	Super :-)

03-02-2004, 08:06 PM	#47 (permalink)
Phenos Join Date: Jan 2003 Posts: 134	Released SpyUO 1.7. New supported packets, more informations on previous packets, better gump parsing, etc... __________________ Phenos - Lorenzo Castelli E-Mail: gcastelli@racine.ra.it

04-23-2004, 09:56 AM	#48 (permalink)
Cyric Join Date: Jun 2003 Posts: 5	Hi, i'd like to filter the weather packet, it's possible? here i found a list of all packets http://uo.elitecoder.net/phpBB/viewt...hlight=weather and these could be the weather's packets 65 - Weather Change Set current weather 4 bytes Type: 0x00 = "It starts to rain" 0x01 = "A fierce storm approaches" 0x02 = "It begins to snow" 0x03 = "A storm is brewing." 0xff = Stop all weather. byte ID (65) byte Weather Type byte Number of weather effects byte Temperature but i can't filter it..

04-24-2004, 11:00 AM	#49 (permalink)
Phenos Join Date: Jan 2003 Posts: 134	Option - Filter, select Show all and then select Packet(65). If you want to automatically decode it you must add the logic to the source and recompile the program. __________________ Phenos - Lorenzo Castelli E-Mail: gcastelli@racine.ra.it

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode