Mafioso Admin
Posts : 40 Join date : 2008-03-17
| Subject: How to make an undetected module. Tue Mar 18, 2008 2:34 pm | |
| You can use this module if you want, and edit the strings: - Quote :
- Public Const PROCESS_ALL_ACCESS = &H1F0FFF
Dim f1holder As Integer Dim timer_pos As Long
'API Declaration Public Declare Function GetWindowThreadProcessId Lib "user32" (ByVal hwnd As Long, lpdwProcessId As Long) As Long Public Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long Public Declare Function WriteProcessMemory Lib "kernel32" (ByVal hProcess As Long, ByVal lpBaseAddress As Any, lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long Public Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long Public Declare Function FindWindow Lib "user32" Alias "FindWindowA" (ByVal Classname As String, ByVal WindowName As String) As Long Public Declare Function GetKeyPress Lib "user32" Alias "GetAsyncKeyState" (ByVal key As Long) As Integer Public Declare Function ReadProcessMem Lib "kernel32" Alias "ReadProcessMemory" (ByVal hProcess As Long, ByVal lpBaseAddress As Any, ByRef lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long
Public Function WriteAByte(gamewindowtext As String, address As Long, value As Byte) Dim hwnd As Long Dim pid As Long Dim phandle As Long hwnd = FindWindow(vbNullString, gamewindowtext) If (hwnd = 0) Then MsgBox "The Game Is Not Working", vbCritical, "Error" End Exit Function End If GetWindowThreadProcessId hwnd, pid phandle = OpenProcess(PROCESS_ALL_ACCESS, False, pid) If (phandle = 0) Then MsgBox "Can't get ProcessId", vbCritical, "Error" Exit Function End If WriteProcessMemory phandle, address, value, 1, 0& CloseHandle hProcess End Function
Public Function WriteAnInt(gamewindowtext As String, address As Long, value As Integer) Dim hwnd As Long Dim pid As Long Dim phandle As Long hwnd = FindWindow(vbNullString, gamewindowtext) If (hwnd = 0) Then MsgBox "The Game Is Not Working", vbCritical, "Error" End End If GetWindowThreadProcessId hwnd, pid phandle = OpenProcess(PROCESS_ALL_ACCESS, False, pid) If (phandle = 0) Then MsgBox "Can't get ProcessId", vbCritical, "Error" Exit Function End If WriteProcessMemory phandle, address, value, 2, 0& CloseHandle hProcess End Function
Public Function WriteALong(gamewindowtext As String, address As Long, value As Long) Dim hwnd As Long Dim pid As Long Dim phandle As Long hwnd = FindWindow(vbNullString, gamewindowtext) If (hwnd = 0) Then MsgBox "The Game Is Not Working", vbCritical, "Error" End Exit Function End If GetWindowThreadProcessId hwnd, pid phandle = OpenProcess(PROCESS_ALL_ACCESS, False, pid) If (phandle = 0) Then MsgBox "Can't get ProcessId", vbCritical, "Error" Exit Function End If WriteProcessMemory phandle, address, value, 4, 0& CloseHandle hProcess End Function
Public Function ReadAByte(gamewindowtext As String, address As Long, valbuffer As Byte) Dim hwnd As Long Dim pid As Long Dim phandle As Long hwnd = FindWindow(vbNullString, gamewindowtext) If (hwnd = 0) Then MsgBox "The Game Is Not Working", vbCritical, "Error" End Exit Function End If GetWindowThreadProcessId hwnd, pid phandle = OpenProcess(PROCESS_ALL_ACCESS, False, pid) If (phandle = 0) Then MsgBox "Can't get ProcessId", vbCritical, "Error" Exit Function End If ReadProcessMem phandle, address, valbuffer, 1, 0& CloseHandle hProcess End Function
Public Function ReadAnInt(gamewindowtext As String, address As Long, valbuffer As Integer) Dim hwnd As Long Dim pid As Long Dim phandle As Long hwnd = FindWindow(vbNullString, gamewindowtext) If (hwnd = 0) Then MsgBox "The Game Is Not Working", vbCritical, "Error" End Exit Function End If GetWindowThreadProcessId hwnd, pid phandle = OpenProcess(PROCESS_ALL_ACCESS, False, pid) If (phandle = 0) Then MsgBox "Can't get ProcessId", vbCritical, "Error" Exit Function End If ReadProcessMem phandle, address, valbuffer, 2, 0& CloseHandle hProcess End Function
Public Function ReadALong(gamewindowtext As String, address As Long, valbuffer As Long) Dim hwnd As Long Dim pid As Long Dim phandle As Long hwnd = FindWindow(vbNullString, gamewindowtext) If (hwnd = 0) Then MsgBox "The Game Is Not Working", vbCritical, "Error" End Exit Function End If GetWindowThreadProcessId hwnd, pid phandle = OpenProcess(PROCESS_ALL_ACCESS, False, pid) If (phandle = 0) Then MsgBox "Can't get ProcessId", vbCritical, "Error" Exit Function End If ReadProcessMem phandle, address, valbuffer, 4, 0& CloseHandle hProcess End Function
Public Function ReadAFloat(gamewindowtext As String, address As Long, valbuffer As Single) Dim hWnd As Long Dim pid As Long Dim phandle As Long hWnd = FindWindow(vbNullString, gamewindowtext) If (hWnd = 0) Then MsgBox "The Game Is Not Working", vbCritical, "Error" End Exit Function End If
GetWindowThreadProcessId hWnd, pid phandle = OpenProcess(PROCESS_ALL_ACCESS, False, pid) If (phandle = 0) Then MsgBox "Can't get ProcessId", vbCritical, "Error" Exit Function End If
ReadProcessMem phandle, address, valbuffer, 4, 0& CloseHandle hProcess End Function
Public Function WriteAFloat(gamewindowtext As String, address As Long, value As Single) Dim hWnd As Long Dim pid As Long Dim phandle As Long
hWnd = FindWindow(vbNullString, gamewindowtext) If (hWnd = 0) Then MsgBox "The Game Is Not Working", vbCritical, "Error" End Exit Function End If
GetWindowThreadProcessId hWnd, pid phandle = OpenProcess(PROCESS_ALL_ACCESS, False, pid) If (phandle = 0) Then MsgBox "Can't get ProcessId", vbCritical, "Error" Exit Function End If
WriteProcessMemory phandle, address, value, 4, 0& CloseHandle hProcess End Function These are the strings that you will edit all together: - Quote :
- GetWindowThreadProcessId
OpenProcess WriteProcessMemory CloseHandle FindWindow GetKeyPress ReadProcessMem WriteAByte WriteAnInt WriteALong ReadAByte ReadAnInt ReadALong ReadAFloat WriteAFloat hWnd pid phandle Then just edit the ones you do have. Ok so these are some of the parts that need editing (the coloured parts): - Quote :
- Public Declare Function GetWindowThreadProcessId Lib "user32" (ByVal hWnd As Long, lpdwProcessId As Long) As Long
Public Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long Public Declare Function WriteProcessMemory Lib "kernel32" (ByVal hProcess As Long, ByVal lpBaseAddress As Any, lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long Public Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long Public Declare Function FindWindow Lib "user32" Alias "FindWindowA" (ByVal Classname As String, ByVal WindowName As String) AsLong Public Declare Function GetKeyPress Lib "user32" Alias "GetAsyncKeyState" (ByVal key As Long) As Integer Public Declare Function ReadProcessMem Lib "kernel32" Alias "ReadProcessMemory" (ByVal hProcess As Long, ByVal lpBaseAddress As Any, ByRef lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Let's start with the first line: - Quote :
- Public Declare Function GetWindowThreadProcessId Lib "user32" (ByVal hWnd As Long, lpdwProcessId As Long) As Long
After "user32" paste this code: - Quote :
- Alias "GetWindowThreadProcessId"
Now you can edit the function name: - Quote :
- GetWindowThreadProcessId
And your code will look like this: - Quote :
- Public Declare Function GWTPIdLib "user32" Alias "GetWindowThreadProcessId"(ByVal hWnd As Long, lpdwProcessId As Long) As Long
Do the exact same method with the following strings: - Quote :
- GetWindowThreadProcessId (Already shown above).
OpenProcess (After "kernel32" paste Alias "OpenProcess") WriteProcessMemory (After "kernel32" paste Alias "WriteProcessMemory") CloseHandle (After "kernel32" paste Alias "CloseHandle") But not these ones: - Quote :
- FindWindow
GetKeyPress ReadProcessMem Because they already have the Alias parts added in their line of code, so you would just edit the function names. If you have edited these strings correctly, they should have being edited like this: - Quote :
- Public Declare Function Editedstring1 Lib "user32" Alias "GetWindowThreadProcessId" (ByVal hWnd As Long, lpdwProcessId As Long) As Long
Public Declare Function Editedstring2 Lib "kernel32" Alias "OpenProcess" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long Public Declare Function Editedstring3 Lib "kernel32" Alias "WriteProcessMemory" (ByVal hProcess As Long, ByVal lpBaseAddress As Any, lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long Public Declare Function Editedstring4 Lib "kernel32"Alias "CloseHandle" (ByVal hObject As Long) As Long Public Declare Function Editedstring5 Lib "user32" Alias "FindWindowA" (ByVal Classname As String, ByVal WindowName As String) AsLong Public Declare Function Editedstring6 Lib "user32" Alias "GetAsyncKeyState" (ByVal key As Long) As Integer Public Declare Function Editedstring7 Lib "kernel32" Alias "ReadProcessMemory" (ByVal hProcess As Long, ByVal lpBaseAddress As Any, ByRef lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As The Bold White parts = what you should have edited/changed. Now just search & replace all the other: - Quote :
- GetWindowThreadProcessId
OpenProcess WriteProcessMemory CloseHandle FindWindow GetKeyPress ReadProcessMem Strings in your module, with the strings you have chosen as a replacement, and as for: - Quote :
- WriteAByte
WriteAnInt WriteALong ReadAByte ReadAnInt ReadALong ReadAFloat WriteAFloat hWnd pid phandle Just Search & Replace with these as well, and your done. Note: Make your own string names up so your module is truly undetected. Tutorial:Mafioso | |
|