Basic VB Hacking Tutorial - Hacking PQ

[LCSBSSRHXXX]

Ok, I decided to post this tutorial I wrote along time ago because there are alot of people having problems with the API and stuff and a few people found this tutorial helpful, I wrote this tutorial in notepad so the spacing and **** is kinda ****ed up, but just live with it...

WriteProscessMemory Tutorial
Basic Game Hacking Tutorial For Visual Basic 6.0
By LCSBSSRHXXX

Tools:
ArtMoney (or other memory searchers)
VB 6.0
Program you want to write new memory too.

In this example we will use a free game called PQ (Progress Quest)
www.progressquest.com




################################################## #################################
### NOTICE: ###
### Addresses, and search results will often varry for different users ###
################################################## #################################




OK to start out make a file on PQ.
Open up ArtMoney and Select Progress Quest in the "Select process" combo box
Now click search set it up as the fallowing :

	Search - Exact Value
	Value  - 
	Type   - ALL

Value is what you want your searching for. Well start out by searching for your characters Race, my characters race it Panda Man,
you need to type the value your searching for exactly how it is in the game (because the search is Case sensetive)

	Search - Exact Value
	Value  - Panda Man
	Type   - ALL

You should come up with a couple of results, around 4 maybe more or less, but around there.


################################################## #################################
### NOTICE: ###
### Addresses, and search results will often varry for different users ###
################################################## #################################

	Value 1 - 0012002F - Panda Man - Text 9 Bytes
	Value 2 - 0016E247 - Panda Man - Text 9 Bytes
	Value 3 - 004D0BCE - Panda Man - Text 9 Bytes
	Value 4 - 009F98D8 - Panda Man - Text 9 Bytes

Now your going to change the values.

	Value 1 - 0012002F - 1 - Text 9 Bytes
	Value 2 - 0016E247 - 2 - Text 9 Bytes
	Value 3 - 004D0BCE - 3 - Text 9 Bytes
	Value 4 - 009F98D8 - 4 - Text 9 Bytes

Now go to the the bottom of ArtMoney and click save, or go to the "Table" menu then click "Save".
Now open PQ back up, and look at your race. It should be the original value with the first letter replaced with one of the numbers you listed.

	Race - 4anda Man

Now that it you know what number wrote to Panda Man (in my case 4) look at Value 4, and write down, or rember that address.

	Value 4 - 009F98D8 - 4 - Text 9 Bytes

The address for value 4 is 009F98D8, now you know what address to write to.
Open up VB, and start a new project, make a module, and a from called what ever
In the module you want to put ur API in it (you dont need all of those calls, but those are the basic API calls you would use to write a hack / trainer.)

Option Explicit
	Public Declare Function FindWindow Lib "user32" Alias "FindWindowA" (ByVal lpClassName As String, ByVal lpWindowName As String) As Long
	Public Declare Function GetWindowThreadProcessId Lib "user32" (ByVal hwnd As Long, lpdwProcessId As Long) As Long
	Public Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long
	Public Declare Function WriteProcessMemory Lib "kernel32" (ByVal hProcess As Long, ByVal lpBaseAddress As Any, ByVal lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long
	Public Declare Function ReadProcessMemory Lib "kernel32" (ByVal hProcess As Long, ByVal lpBaseAddress As Any, ByVal lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long
	Public Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long
	Public Const PROCESS_ALL_ACCESS As Long = &H1F0FFF

Ok now your going to make a form with a command button, and textbox on it. Name the button cmdChange1, and the textbox txtRace.
Double click cmdChange1, so u bring up the code window start out by writing this.

Private Sub cmdChange1_Click()
    Dim hwnd As Long
    Dim pid As Long
    Dim pHandle As Long    
    Dim hProcess as Long

    hwnd = FindWindow(vbNullString, "Progress Quest")
    If (hwnd = 0) Then
        MsgBox "Window not found!"
	Exit sub
    End If
    GetWindowThreadProcessId hwnd, pid
    pHandle = OpenProcess(PROCESS_ALL_ACCESS, False, pid)
    If (pHandle = 0) Then
        MsgBox "Couldn't get a process handle!"
        Exit Sub
    End If
End Sub

Ok that part of the code will find Progress Quest's Window and get the proscess's handle, if the window isn't open it will bing up an error.
Now, for the other part of the code, This will write the new memory to the address, take the address from earlier and plug it in to the code:
Since my address is 009F98D8, we will do this &H009F98D8, this will chop off the first digits (VB will do this automaticly)

Input

WriteProcessMemory pHandle, &H009F98D8, txtRace.Text, Len(txtRace.Text), 0&

Output

WriteProcessMemory pHandle, &H9F98D8, txtRace.Text, Len(txtRace.Text), 0&

Finished code should look like this :

Private Sub cmdChange1_Click()
    Dim hwnd As Long
    Dim pid As Long
    Dim pHandle As Long
    Dim hProcess as Long

    hwnd = FindWindow(vbNullString, "Progress Quest")
    If (hwnd = 0) Then
        MsgBox "Window not found!"
	Exit sub
    End If
    GetWindowThreadProcessId hwnd, pid
    pHandle = OpenProcess(PROCESS_ALL_ACCESS, False, pid)
    If (pHandle = 0) Then
        MsgBox "Couldn't get a process handle!"
        Exit Sub
    End If
    WriteProcessMemory pHandle, &H9F98D8, txtRace.Text, Len(txtRace.Text), 0&
    CloseHandle hProcess
End Sub

[Nitto]

So is it normal for my computer to crash at random after this tutorial? Maybe the version's, you are 6, I am 8 . I learned my API's anyways :D

[Nitto]

yay I got it to work! Praise LCS

[LCSBSSRHXXX]

Took you 9 months, not bad.