Jump to content

Recommended Posts

Posted

Can anyone help me tell me in which dll the login screen editboxes are generated, I'm trying to do an autologin for interlude, but for that, I need to know how to do it or find the hook for the login and password editboxes, thank you

 

1.png

Posted

engine.dll

?RequestAuthLogin@UNetworkHandler@@UAEHPAG0H@Z

int __fastcall RequestAuthLogin(unsigned int This, unsigned int EDX, wchar_t * login, wchar_t * password, int unk)

  • Like 2
  • Thanks 1
  • 3 months later...
Posted
On 7/7/2024 at 1:22 PM, wongerlt said:

engine.dll

?RequestAuthLogin@UNetworkHandler@@UAEHPAG0H@Z

int __fastcall RequestAuthLogin(unsigned int This, unsigned int EDX, wchar_t * login, wchar_t * password, int unk)

   

Hello! What arguments should be passed to these variables "unsigned int This" if you call the function with your hook manually? Did you manage to figure this out? Because when I override the existing function with my hook using an existing int, everything works fine

int __fastcall hkRequestAuthLogin(int thisPtr, void* edx, wchar_t* Login, wchar_t* Password, int OTP)
{
    mLogin = L"qwertyui";
    mPassword = L"1234567";
    mOTP = -1;
    return fpRequestAuthLogin(thisPtr, mLogin, mPassword, mOTP);
}

, but I still couldn’t manage to call the function externally.

void myLogin(wchar_t* Login, wchar_t* Password, int OTP)
{
    mLogin = Login;
    mPassword = Password;
    mOTP = OTP;
    fpRequestAuthLogin(1432, mLogin, mPassword, mOTP);
}

Can u help me with this? 

Posted
8 hours ago, Loryq said:

   

Hello! What arguments should be passed to these variables "unsigned int This" if you call the function with your hook manually? Did you manage to figure this out? Because when I override the existing function with my hook using an existing int, everything works fine

int __fastcall hkRequestAuthLogin(int thisPtr, void* edx, wchar_t* Login, wchar_t* Password, int OTP)
{
    mLogin = L"qwertyui";
    mPassword = L"1234567";
    mOTP = -1;
    return fpRequestAuthLogin(thisPtr, mLogin, mPassword, mOTP);
}

, but I still couldn’t manage to call the function externally.

void myLogin(wchar_t* Login, wchar_t* Password, int OTP)
{
    mLogin = Login;
    mPassword = Password;
    mOTP = OTP;
    fpRequestAuthLogin(1432, mLogin, mPassword, mOTP);
}

Can u help me with this? 

from where u get 1432?

Posted
1 hour ago, wongerlt said:

from where u get 1432?

It's just a number from nowhere. ) I tried to intercept these values that the client provides to the original function, and each time it's a new number, 9 digits long, like this: 163791744.

Posted
12 minutes ago, Loryq said:

It's just a number from nowhere. ) I tried to intercept these values that the client provides to the original function, and each time it's a new number, 9 digits long, like this: 163791744.

you see im from l2 interface send data to server before login via "RequestPCCafeCouponUse("your data bla bla bla"); and then hook this function in DLL:
?RequestPCCafeCouponUse@UNetworkHandler@@UAEXVFString@@@Z
int __fastcall new_RequestPCCafeCouponUse(unsigned int This, wchar_t * data) {

// extract your info from data variable... which u send from interface RequestPCCafeCouponUse

fpRequestAuthLogin(This,  L"ID",L"PASS" ,0);
return 0;
}

  • Like 1
Posted
9 minutes ago, Loryq said:

Oh, I hadn't thought of that, thanks for the tip! But what this ‘this’ is, I don't understand at all. 😅

NetworkHandler

Posted
1 hour ago, wongerlt said:

NetworkHandler

Hmm, I wonder if I can save this value and use it in the future, so that I can access specific functions without using other packages. Thank you for your answers, they are very helpful to me!

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...