Tibia Packet Reader

[Lolrapa]

Hello!

Today I bring you a packet reader to get packets the client send to the server. This is done by hooking send packet function.
It's functional for Tibia 10.78 and can be easily updated to any version. This addresses are in 0x400000 base, so if you have aslr you'll have to do the math.



The zip file contains two folders, the loader and the injected dll. Both are visual studio projects (2013). The loader is a c# project and the dll is a c++ project.
https://github.com/lolrapa/Tibia-Server-Packet-Reader
http://www.4shared.com/rar/qDgKy5Qbce/PacketReader.html

Its my first open source project so dont be harsh on me
Thanks to darkstar for the help in this!

Note: Altough the project works it may make tibia crash form time to time, I'm aware of that and I'm working on it.

I hope this project helps you!!!
Good luck!

[Lolrapa]

Added to github.

https://github.com/lolrapa/Tibia-Server-Packet-Reader

[FrankJScott]

Please try Google before asking about Top Product Blog f6fd6b8

[FrankJScott]

In reply to the lady inquiring about bandar 4d slot, www toto 4d, http dewatogel net, buy toto 4d online, judi 2d, cara main 4d singapore, bandar hongkong, 5 bandar togel, judi toto online, toto 2d, I highly suggest this this hyperlink for Tajir4D tips or toto 4d online malaysia, judi toto online, bandar togel sdy, web judi togel, 4d malaysia online, toto 4d toto 4d toto 4d, agen 4d slot, situs togel idn, bandar judi togel, toto game online, as well as this what is it worth about Tajir4D url and don't forget t0gel online, buy toto 4d online, 4d singapore slot, toto 4d 12, bandar slot4d, toto 4d online malaysia, login toto judi 4d, toto 4d result, judi toto, tot9 4d, as well as this great post to read about Tajir 4D details which is also great. Also, have a look at this here are the findings for Tajir4D link alongside all all toto 4d, toto website malaysia, play toto online, judi slot4d, agen 4 d, whatsapp 4d, toto 4d result, bandar online deposit pulsa, ada 4d, toto money, and don't forget this excellent Tajir4D blog with toto singapore online, agen 4 d, slot4d singapore, 11 toto, main toto, website judi togel, judi toto slot, judi hk online, cara main 4d, bandar togel deposit dana, for good measure. Check more @ Recommended Scrap My Car Info 1_93c84

[FrankJScott]

In response to the people asking about in fashion store, dress design, kleren design, go through clothes, clothing brand in, we are clothing, thrive clothing, about you clothes, we are design clothes, the clothing brand, from clothing store, home fashion clothes, in store fashion, clothing showroom, all for store, all of the clothes, here the store, apparalel store, clothing boutiques, ghar ka shop, I suggest this published here on fashion simulator details for fashion stores, dress design, clothing designer, clothing with q, go through clothes, about you clothing brand, in fashion clothing, clothing starting with a, your fashion, all cloth store, i believe clothing, designer fashion store, an fashion store, home of clothes, clothing q, fashion accessories store, designers store, you store, clothes you, customized clothing websites, also. See More High Rated Clothing Store Simulator Tips f6fd6b8

[DarkstaR]

You are replacing the first few bytes of the send function without re-implementing them elsewhere, which ends up skipping part of the function prologue. You should be logging the operations that are there and adding them to the end of your code cave.

Better yet, you should grab Microsoft's Detours library and use that, as it will do everything for you.

[Lolrapa]

I acctualy tried that but I didn't figure how to add asm at the very end of my function if I use __asm{} im myFunction() the compiler will add asm code between my asm code and the ret statment and won't work

I mean:

void __stdcall myFunction()
{
		// This function will be called when tibia calls sendpacket I deliver the packet info to the loader via file mapping

		*(DWORD*)((LPVOID)(&((CHAR*)filePointer)[1])) = *SendStreamLength; //write the data len in 2nd byte (four bytes)
		memcpy((LPVOID)(&((CHAR*)filePointer)[5]), SendStreamData, *SendStreamLength); //write the data buffer in 5th byte (sendStreamLenght bytes)
		*(BYTE*)filePointer = 1; //inticates to the loader there's been an update, loader must set this byte to 0 after reading
                
                __asm
                {
                                //asm code to put back the replace asm
                }
}

[Lolrapa]

Or copy the first 5 bytes form the original function and paste them somewhere at the end of my function
I could reserve space by doing

__asm
{
    nop
    nop
    nop
    nop
    nop
{

[DarkstaR]

you need to use declspec(naked)

[szulak]

you need to use declspec(naked)

Or use attribute:

__attribute__ ((naked)) void myFunction() { }

If you're using GCC.