Search found 12 matches

by Casper
Fri Oct 24, 2003 3:52 am
Forum: MQ2::Development::Feature Discussion
Topic: eqlib.dll stays in memory after mq closes?
Replies: 18
Views: 4559

That's frightening...

For security alone I can't believe you Win9x users aren't running on XP; *especially* those of you that call yourselves hackers.
by Casper
Tue Oct 21, 2003 11:57 pm
Forum: MQ2::Development::Feature Discussion
Topic: FYI - Process cloaking...
Replies: 7
Views: 3058

A million ways...

Detour'ing GetProcAddress() is very easy. Unfortunately it's equally easy to tell if you have detoured it. ... but, why stop at GetProcAddress? You're going to have to hook all the API that PSAPI and Tool Help use because they can get module lists and find you that was as well. THEN you're going to ...
by Casper
Tue Oct 21, 2003 8:55 pm
Forum: MQ2::Development::Feature Discussion
Topic: FYI - Process cloaking...
Replies: 7
Views: 3058

Shouldn't be a problem at all...

Compuboy - no known virus do this. This is a bit more complicated then what virus' usually do and requires more access then they can get. dont_know_at_all - Yes. I can cloak a DLL from a process that has loaded it - including making calls to open handles to it fail; e.g. GetProcAddress( hDLL, "...
by Casper
Tue Oct 21, 2003 7:08 pm
Forum: MQ2::Development::Feature Discussion
Topic: FYI - Process cloaking...
Replies: 7
Views: 3058

FYI - Process cloaking...

fyi - I just wrote some code to hide a process from the OS. In essence this allows MQ (or any other process for that matter) to run completely undetectable by all Win32 API; e.g. PSApi and the ToolHelp API can't detect the process and even System Internals Process Explorer and the Windows Task Manag...
by Casper
Thu Nov 14, 2002 1:01 am
Forum: MQ2::Development::Feature Discussion
Topic: VC6 compiling
Replies: 17
Views: 3652

I compiled this for VC6 a while ago. Here's a link:

"http://groups.msn.com/TheCasper/page.ms ... Lib&fc_a=0"
by Casper
Mon Nov 11, 2002 1:09 am
Forum: MQ2::General
Topic: MacroQuest - Is it Safe?
Replies: 18
Views: 6652

What if you used a 3rd part program to change the EULA so you could click no and it would still let you play the game. :) ------------------- That's easy - the EULA and the addendum exist in eqmain.dll. The button ID they use for Accept is 1004 and Cancel 1003 - just switch them. You can use Get/Set...
by Casper
Wed Oct 23, 2002 7:30 am
Forum: MQ2::General
Topic: Ack! Verant Spying?!
Replies: 26
Views: 7472

It's common practice to spit out log files from your application, game, or utility.
by Casper
Sun Oct 20, 2002 9:58 pm
Forum: MacroQuest::Help (Outdated)
Topic: Can't tell if MQ is even working
Replies: 4
Views: 1520

This item moved from Macro::Help forum
by Casper
Sun Oct 20, 2002 9:54 pm
Forum: Outdated Macros::Macro Help
Topic: arrays and there creative use.
Replies: 1
Views: 1074

It looks like you're trying to play with arrays when you don't need to. You're not populating your array elements with any type of persistance so don't bother with them. 1) Make a function that returns whether you can take requests from the player making the request. 2) Make a function that returns ...
by Casper
Mon Sep 02, 2002 9:02 am
Forum: Outdated Macros::Macro Help
Topic: Help UI + crash fix??
Replies: 6
Views: 1631

I’m looking into a crash problem now honter1.

Are you referring to a crash that occurs after a command is issued; such as a slash command (e.g. /who or /mouseto)?
by Casper
Fri Aug 23, 2002 4:59 am
Forum: MacroQuest::Help (Outdated)
Topic: Odd Cursor Problem
Replies: 2
Views: 928

Go to: "http://groups.msn.com/TheCasper/page.msnw?fc_a=0&fc_p=%2FGeneric%20Tools%2FOld%20UI%20Cursor%20Workaround" .. and download MCasper.exe. The only thing it does is move the cursor to the top left corner of the screen for one minute; which effectively hides it in game. You'll basi...