minimap unit tracking in game [release]

[MindChild]

UPDATE!

for 3.0.3 update your cf.xml file as follows:

<?xml version="1.0" encoding="utf-8" ?> 
<patches>
<patch>
	<name>Track Units</name>
	<address>62e6c0</address>
	<newvalue>94</newvalue>
	<oldvalue>95</oldvalue>
</patch>
<patch>
	<name>Track Objects</name>
	<address>4d6da4</address>
	<newvalue>e4</newvalue>
	<oldvalue>c0</oldvalue>

</patch>
<patch>
	<name>Wall Climb</name>
	<address>690238</address>
	<newvalue>Eb</newvalue>
	<oldvalue>75</oldvalue>
</patch>
</patches>

now, this is definately bannable (as it modifies a piece of WoW.exe's memory) so i am not responsible for any bannings. (well, technically i am, but you took that risk of your own free will :P)

ok, so basically what this does is, when you check "track units" it track everything that you ARENT actually set to track...meaning if a hunter is tracking beasts and enables this, every unit EXCEPT beasts are tracked...

It randomly chooses a title and does not show up on the taskbar.

it looks for wow.exe so if your wow is for some reason something else...good luck?

i would suggest you turn it off (by unchecking) before logging out, changing realms, or really any sort of connection changes.

EDIT: it now has a track objects option enjoy
EDIT2: It now has a wall hack option. The program was also changed to allow more 1byte hacks in the future by editing cf.xml
anyway here ya go
EDIT3: It now checks which of the patches/hacks are valid and active...it doesnt display the invalid ones and it autochecks the ones that are already active (in case you closed it previously with a hack active)
rapidshare - RapidShare: Easy Filehosting
megaupload - MEGAUPLOAD - The leading online storage and file delivery service
and a virustotal
Virustotal. MD5: abd952d282fd45c7dc3d421d0115ead2


how it works...

it sets a SETNE to a SETE for tracking units...meaning it tracks the unit if it isnt supposed to instead of if it is supposed to...
its a single byte hack.

for the objects:

i change the test al,al to a test ah,ah (the high value of EAX is usually 0 when you cant interact with an object ... such as campfire lights...though campfires are interactable)

thus when an object can be moused over, it displays on minimap...i think, minor testing went along with it all so if there are problems, let me know.

for wallhack...i'm not sure...i changed a jump to always return 0 on 68f350 (i would assume this would be your climb level check...to see if you can actually climb...not sure though) and it let me climb mountains...it DOES NOT allow you to jump out of water onto a mountain though...you actually have to run from a place you are allowed to stand
again, minimal testing with these so go at it at your own risk


just a heads up...when i installed .NEt 1.1 SP1 (thats service pack 1) the program stopped working...i havent as of yet figured out how to get around that. so, as of right now either dont installed 1.1 sp1 or...uninstall it to make it work (or let me know if you know how to get around the problem)...basically it gives access denied on openning the process and i cant seem to set the debug priveledge either :-S

[Deathisfear]

Sounds like a "Virus" if you know what I mean..

[MindChild]

haven't the foggiest actually

[Nesox]

lol it probably just changes tracking type in the ePlayerFields so you can see evrything, wowemuhacker does the same for it's tracking hack i use that sometime on retail servers and it's not detectable, altho i dunno if that is a virus or not...

[pardalis1111]

just scanned with avg. no virus.

Edit: and it works +2 rep

[Hackingmac]

But he needs to upload a VirusTotal - Free Online Virus and Malware Scan scan

[Manky]

one of the rare occasions a leecher posts something good.. + rep

[kynox]

It's clean.

// ------------------------------------------------------------------------------
//     This code was generated by 
//     Spices.Decompiler
//     ver.5.1.2.0
//     http://www.9rays.net
//     Copyright 2008 9Rays.Net, Inc All rights reserved.
// ------------------------------------------------------------------------------

namespace WindowsApplication1
{
    using System;
    using System.ComponentModel;
    using System.Diagnostics;
    using System.Drawing;
    using System.Runtime.CompilerServices;
    using System.Runtime.InteropServices;
    using System.Text;
    using System.Windows.Forms;
    using Microsoft.VisualBasic;
    using Microsoft.VisualBasic.CompilerServices;
    using WindowsApplication1;

    public class Form1 : Form
    {
        [AccessedThroughProperty("CheckBox1")]
        private CheckBox _CheckBox1;
        private const int PROCESS_ALL_ACCESS = 2035711;
        private IContainer components;
        public Form1() : base()
        {
            base.Load += new EventHandler(this.Form1_Load);
            InitializeComponent();
        }
        [DebuggerStepThrough]
        private void InitializeComponent()
        {
            CheckBox1 = new System.Windows.Forms.CheckBox();
            base.SuspendLayout();
            CheckBox1.Location = new System.Drawing.Point(72, 32);
            CheckBox1.Name = "CheckBox1�";
            System.Drawing.Size size = new System.Drawing.Size(136, 24);
            CheckBox1.Size = size;
            CheckBox1.TabIndex = 0;
            CheckBox1.Text = "Track Units�";
            size = new System.Drawing.Size(5, 13);
            base.AutoScaleBaseSize = size;
            size = new System.Drawing.Size(284, 84);
            base.ClientSize = size;
            base.Controls.Add(CheckBox1);
            base.Name = "Form1�";
            base.ShowInTaskbar = false;
            base.Text = "Track Yourself Silly�";
            base.ResumeLayout(false);
        }
        public static void Main()
        {
            Application.Run(new Form1());
        }
        [DllImport("kernel32")]
        private static extern int OpenProcess(int dwDesiredAccess, int bInheritHandle, int dwProcessId);
        [DllImport("kernel32")]
        private static extern int WriteProcessMemory(int hProcess, int lpBaseAddress, ref int lpBuffer, int nSize, ref int lpNumberOfBytesWritten);
        [DllImport("kernel32")]
        private static extern int ReadProcessMemory(int hProcess, int lpBaseAddress, ref int lpBuffer, int nSize, ref int lpNumberOfBytesWritten);
        [DllImport("kernel32")]
        private static extern int CloseHandle(int hObject);
        public void WriteName(bool trackunits)
        {
            try
            {
                ASCIIEncoding aSCIIEncoding = new ASCIIEncoding();
                Process[] arrProcess = Process.GetProcessesByName("WoW�");
                if (arrProcess.Length == 0)
                {
                    Interaction.MsgBox("Warcraft is not running.�", MsgBoxStyle.OKOnly, null);
                    return;
                }
                int i1 = Form1.OpenProcess(2035711, 0, arrProcess[0].Id);
                if (i1.Equals(IntPtr.Zero))
                {
                    Interaction.MsgBox("Failed to open Warcraft III process.�", MsgBoxStyle.OKOnly, null);
                    return;
                }
                byt = trackunits ? 148 : 149;
                byte byt;
                int i3 = byt;
                Form1.WriteProcessMemory(i1, 6478944, ref i3, 1, ref 0);
                byt = (byte)i3;
                Form1.CloseHandle(i1);
            }
            catch (Exception exception1)
            {
                Interaction.MsgBox(exception1.Message, MsgBoxStyle.OKOnly, null);
            }
        }
        protected override void Dispose(bool disposing)
        {
            if ((disposing) && (this.components != null))
            {
                this.components.Dispose();
            }
            base.Dispose(disposing);
        }
        private void CheckBox1_CheckedChanged(object sender, EventArgs e)
        {
            WriteName(CheckBox1.Checked);
        }
        private void Form1_Load(object sender, EventArgs e)
        {
            Random random = new Random();
            base.Text = RandomString(random.Next(1, 100), random.Next(-1, 1) > 0);
        }
        private string RandomString(int size, bool lowerCase)
        {
            StringBuilder stringBuilder;
            Random random;
            stringBuilder = new StringBuilder();
            random = new Random();
            for (int i = 0; i <= (size - 1); i++)
            {
                stringBuilder.Append(Convert.ToChar(Convert.ToInt32((26 * random.NextDouble()) + 65)));
            }
            if (!lowerCase)
            {
                return stringBuilder.ToString();
            }
            else
            {
                return stringBuilder.ToString().ToLower();
            }
        }
        internal new virtual CheckBox CheckBox1
        {
            get
            {
                return this._CheckBox1;
            }
            set
            {
                if (this._CheckBox1 != null)
                {
                    this._CheckBox1.CheckedChanged -= new EventHandler(this.CheckBox1_CheckedChanged);
                }
                this._CheckBox1 = value;
                if (this._CheckBox1 != null)
                {
                    this._CheckBox1.CheckedChanged += new EventHandler(this.CheckBox1_CheckedChanged);
                }
            }
        }
    }
}

[Xarg0]

.Net Code is funny :-), are there any good ways to protect .NET code from beeing decompiled?
Caus a packed pe wouldn't stop me from unpacking it and then decomiling it.

[BlackPhynix]

detectable or not ? Nesox means that its not but is this true?

[TommyT]

thanks a bunch

[Cursed]

You should be safe using this... Afaik its not being checked by Warden atm.

[TommyT]

can some 1 upload to another site rapidshare sux

[TommyT]

reached its dl limit

[MindChild]

.Net Code is funny :-), are there any good ways to protect .NET code from beeing decompiled?
Caus a packed pe wouldn't stop me from unpacking it and then decomiling it.

well, surely there isnt anything to stop that completely, but things like themida sure do help to slow the process.

also: added object trackability