[Release] Wallhack method all Client / find Maparea pointer

[PinkyPoison]

Wall hack working but can u release a perfect working wall hack?

[Alz™]

Originally Posted by PinkyPoison

Wall hack working but can u release a perfect working wall hack?

It's imposible at cabal current version

[gonzab]

this guide still working on oficial servers?

[Kylo Ren]

still working?

[youbrey]

i am stuck on last stop for WH. i am really dont understand.

How to wallhack:
After 0x40000 bytes of map data and visual elements you'll find another 0x40000 bytes of collision map. If you clear the complete collision map (fill with zeros) you'll have a perfectly nice wallhack that gameguard does not detect.

i found map area address like 0x0???020 but dont now what i need to do next.
right click "find map pointers" "Browse memory region" or what??
i really dont know where to "find another 0x40000 bytes of collision map"

pls someone help.

[tanzoro2]

i really dont know where to find another 0x40000 bytes of collision map

Please help me

[jairlara24]

3.
Take this adress and subtract 0x42804.
This should result in an adress like 0x0???020.
This is your Maparea adress. It's changing every time the client is run.






I did not understand this part please help me

[HansMarcos]

Originally Posted by jairlara24

3.
Take this adress and subtract 0x42804.
This should result in an adress like 0x0???020.
This is your Maparea adress. It's changing every time the client is run.






I did not understand this part please help me

use developer calculator paste what address you get in hex type substact 42804 = MapArea Base Address

Map Area Base Addres + 40814 = Wallhack Start Point

[leo447]

hi, am tryn to make this lua script work on c++

start=readInteger("fixedmain.exe+C7BF80")+0x40814
for i=0,0x3ffff,4 do
writeBytes(start+i,0)
end

Yes i know that "fixedmain.exe+C7BF80" is a pointer ive found it make script work but i need it on c++ .
Anyone care to explain what this line does

"readInteger("fixedmain.exe+C7BF80")+0x40814"
like go to this address "fixedmain.exe+C7BF80" find out whats in there and then add 0x40814 to it decimal for "40814" is "264212" and store what at start ? the sum of whats inside in "fixedmain.exe+C7BF80" address + 0x40814 ? So we basicaly just changed the value of that address ?
and we change to "0" the values thats inside from address "fixedmain.exe+C7BF80"+1 for "262143" times ? jesus my head hurts ... if u gona say smth about memset ... u better use words that are simple af please !!!

[HansMarcos]

Originally Posted by leo447

hi, am tryn to make this lua script work on c++

start=readInteger("fixedmain.exe+C7BF80")+0x40814
for i=0,0x3ffff,4 do
writeBytes(start+i,0)
end

Yes i know that "fixedmain.exe+C7BF80" is a pointer ive found it make script work but i need it on c++ .
Anyone care to explain what this line does

"readInteger("fixedmain.exe+C7BF80")+0x40814"
like go to this address "fixedmain.exe+C7BF80" find out whats in there and then add 0x40814 to it decimal for "40814" is "264212" and store what at start ? the sum of whats inside in "fixedmain.exe+C7BF80" address + 0x40814 ? So we basicaly just changed the value of that address ?
and we change to "0" the values thats inside from address "fixedmain.exe+C7BF80"+1 for "262143" times ? jesus my head hurts ... if u gona say smth about memset ... u better use words that are simple af please !!!

Ill make this simple

open calculator take the hex in this thing fixedmain.exe+C7BF80 "C7BF80" then add 400,000 in HEX You get Map Area Base which is "107BF80" then all you have to do now is just add 40814 in CE result if all steps is followed



Result of that address will be the Wallhack Starting Address

for the script this should be it

start=readInteger("107BF80")+0x40814
for i=0,0x3ffff,4 do
writeBytes(start+i,0)
end

[leo447]

Originally Posted by HansMarcos

Ill make this simple

open calculator take the hex in this thing fixedmain.exe+C7BF80 "C7BF80" then add 400,000 in HEX You get Map Area Base which is "107BF80" then all you have to do now is just add 40814 in CE result if all steps is followed



Result of that address will be the Wallhack Starting Address

for the script this should be it

start=readInteger("107BF80")+0x40814
for i=0,0x3ffff,4 do
writeBytes(start+i,0)
end

Goodmorning thank you for reply . I managed to get it to work with lua no problem there ok lets start.
For my server the values/addresses are.

B82B10 +400000 = 0xF82B10 or 16263952 decimal. So if i do :

start=readInteger("F82B10")+0x40814
for i=0,0x3ffff,4 do
writeBytes(start+i,0)
end

All good it works fine with roll .
I need it to embed this lua code into c++ now that we have the addresses i need to translate it .
what ive found about this line of code

"start=readInteger("F82B10")+0x40814"

Go to address 0xF82B10 get the value that is stored inside "value in decimal" covert it into hex then add 0x4081 result is "9ADE834" or "162392116" decimal.
Now take that result as address and start from that address for 0x3ffff times or else "262143 decimal value" times and each time increase address by one and replace whatever is the value inside that address to 0. Now i saw some values werent 0 but 6 , 7 maybe thats why it isnt perfect wallhack i am working on it .
i need this into c++ code my head hurts .

[HansMarcos]

Originally Posted by leo447

Goodmorning thank you for reply . I managed to get it to work with lua no problem there ok lets start.
For my server the values/addresses are.

B82B10 +400000 = 0xF82B10 or 16263952 decimal. So if i do :

start=readInteger("F82B10")+0x40814
for i=0,0x3ffff,4 do
writeBytes(start+i,0)
end

All good it works fine with roll .
I need it to embed this lua code into c++ now that we have the addresses i need to translate it .
what ive found about this line of code

"start=readInteger("F82B10")+0x40814"

Go to address 0xF82B10 get the value that is stored inside "value in decimal" covert it into hex then add 0x4081 result is "9ADE834" or "162392116" decimal.
Now take that result as address and start from that address for 0x3ffff times or else "262143 decimal value" times and each time increase address by one and replace whatever is the value inside that address to 0. Now i saw some values werent 0 but 6 , 7 maybe thats why it isnt perfect wallhack i am working on it .
i need this into c++ code my head hurts .

i didn't understand every word you said

well my guess is your trying to do wallhack in official??? if it is official i dont know about perfect wallhack in official my wallhack works the same only roll over to wallhack so can't help you anymore how to do perfect wallhack in official / in private server this method works perfectly and it does perfect wallhack

[logi23]

Great guide, thanks to Wayntressierts & HansMarcos it was straightforward.
I noticed, that there are problems moving lpm+rpm on regular area after using it, so there's my question - is there any easy way to undo it? Or should I store the values changed by script and restore them afterwards?

--Edit
After Cabal update (rollover is now non-moving skill) that wallhack functionality seems to have no longer any use.