Poker-AI.org

Re: OCR v RE

2014-04-08T20:40:38+00:00

Ok, I think I am done. It was a very educational experience.

Statistics: Posted by HontoNiBaka — Tue Apr 08, 2014 8:40 pm

Re: OCR v RE

2014-03-24T21:05:14+00:00

I was unable to do it with EasyHook, I downloaded MinHook instead: http://www.codeproject.com/Articles/443 ... king-Libra

Now I can hook the winapi calls and the message queue, but I wonder if that will be enough. I have realized, that DrawText only gets called in some cases, for instance, when you hover over a name.

Statistics: Posted by HontoNiBaka — Mon Mar 24, 2014 9:05 pm

Re: OCR v RE

2014-03-24T16:17:58+00:00

You are right, I wanted to use it for botting at first but it was too hard and I used OCR instead. I got interrested in RE again, when I started developing a poker tool, because here I will at least need no stealth, maybe that way it will be somehow possible to do it. It would still be way too hard with stealth.

I admit, it's a little different, from when the topic started.

Statistics: Posted by HontoNiBaka — Mon Mar 24, 2014 4:17 pm

Re: OCR v RE

2014-03-24T15:52:09+00:00

HontoNiBaka wrote:

And then there is not only getting the data, but also the stealth.

Statistics: Posted by spears — Mon Mar 24, 2014 3:52 pm

Re: OCR v RE

2014-03-24T14:26:55+00:00

I am not hiding them. I am not using them for botting, a few guys asked me to develop a software for them, it will do nothing forbidden.

Statistics: Posted by HontoNiBaka — Mon Mar 24, 2014 2:26 pm

Re: OCR v RE

2014-03-24T13:41:29+00:00

How do you hide the hooks?

Statistics: Posted by spears — Mon Mar 24, 2014 1:41 pm

Re: OCR v RE

2014-03-24T12:54:33+00:00

Maybe this can help you, it's c# code for datamining.
http://forumserver.twoplustwo.com/45/so ... ng-353393/
I didn't test it.

Statistics: Posted by shadehs — Mon Mar 24, 2014 12:54 pm

Re: OCR v RE

2014-03-24T09:57:02+00:00

Ok, I stopped trying to use memory scanning and read up about dll injection instead. I have managed to inject my dll with CreateRemoteThread.

I also realized, that PS does have a normal message loop, it was only, that Spy++ didn't display it, because I was using the 64bit version and Stars is 32bit, with 32bit spy++ I can see all the messages.

Now all that is left is detouring the relevant methods. I have already hooked the window message loop, but this will most likelly not be enough.

I also thought about hooking DrawText, because I decompiled a tool for PokerStars and it seems it also hooks DrawText. With that I would probably have all the player names and stacks for all positions.

Am I on the right track? I am also wondering, how I should detour the function. Microsoft Detours is not an option, because I might want to sell my software at some point. Would EasyHook be good?
The alternatives would be to do it by hand, I was thinking about import address table manipulation, export address table manipulation and hot patching, any tipps as to which one to choose, or any other tipps?

Statistics: Posted by HontoNiBaka — Mon Mar 24, 2014 9:57 am

Re: OCR v RE

2014-03-11T10:25:55+00:00

Thank you. I downloaded windbg, it's a good tool. But unfortunatelly I couldn't solve my problem yet. I can search the memory for strings, but not much more. I am trying to break, when the memory changes, but I don't know, which memory addresses are relevant. I can get the dealer chat now and I can get handhistories, but I still can not get real time player names and stacks.

Statistics: Posted by HontoNiBaka — Tue Mar 11, 2014 10:25 am

Re: OCR v RE

2014-03-07T14:39:01+00:00

Perhaps this points you in the right direction?

http://webcache.googleusercontent.com/s ... th-windbg/

Statistics: Posted by Bliss — Fri Mar 07, 2014 2:39 pm

Re: OCR v RE

2014-03-06T20:16:11+00:00

They could probably scan for winapi calls like printwindow. Then they will scan for other processes, automatic clicks etc. and they will make a very detailed scan, the screenshotting alone might not be enough to ban you, but they will find more.

But seriously, how is it even possible to get the gamestate from PokerStars? I have been trying it for 2 days now and I made zero progress. I don't need it for a bot, but for something else.

I monitor it with spy++ and with api monitor -> zero calls to winapi.

I try to scan the memory, it has no real structure, its just 60 MB of random data to me.

I just need the players, open seats and player labels in real time.

I am willing to pay for someone to teach me how to do it.

Statistics: Posted by HontoNiBaka — Thu Mar 06, 2014 8:16 pm

Re: Welcome and Hello

2014-03-01T23:32:15+00:00

ConvexPolytope wrote:

HontoNiBaka wrote:

Taking screenshots every second has to be detectable.

But how can they detect it? (not using VM)

Statistics: Posted by bpdummy666 — Sat Mar 01, 2014 11:32 pm

Re: Welcome and Hello

2013-12-16T13:46:09+00:00

ConvexPolytope wrote:

Taking screenshots every second has to be detectable.

Not if you use 2 machines or run the poker client in a vm

Statistics: Posted by spears — Mon Dec 16, 2013 1:46 pm

Re: Welcome and Hello

2013-12-16T12:21:43+00:00

HontoNiBaka wrote:

I would love to read the data from memory, but to me it seems so extremelly hard, I guess I am more of a high level guy.

If you haven't done any reverse engineering and stuff like that, it is certainly a steep learning curve. Having said that, the difficulty depends a lot on the software and how the data is stored in memory. I haven't reversed any poker software, so I don't know about that.

Quote:

And then there is not only getting the data, but also the stealth.

Stealth is certainly an issue. One could use stealth techniques that modern rootkits use to circumvent anti virus software. Fwiw, OCR is not stealth either. Taking screenshots every second has to be detectable.

Statistics: Posted by ConvexPolytope — Mon Dec 16, 2013 12:21 pm

OCR v RE

2013-12-15T13:53:55+00:00

ConvexPolytope wrote:

even though it seems that most people use OCR rather than reading the data directly from memory

I would love to read the data from memory, but to me it seems so extremelly hard, I guess I am more of a high level guy.

And then there is not only getting the data, but also the stealth.

Statistics: Posted by HontoNiBaka — Sun Dec 15, 2013 1:53 pm