[Release] Wallhack method all Client / find Maparea pointer

09/15/2012 02:35 .Law.#46
Just google NomadMemory lib, and if you want the bot to work when cabal is minimized I suggest looking into ControlSend, ControlClick functions.
09/15/2012 03:08 wannabe21#47
Quote:
Originally Posted by PunkS7yle View Post
Just google NomadMemory lib, and if you want the bot to work when cabal is minimized I suggest looking into ControlSend, ControlClick functions.
thankyoufortheidea...:D:D:D
09/17/2012 06:58 geosnuk#48
is there a way in ce to mass edit it to all 0?
09/17/2012 14:54 mi5pogi#49
Quote:
Originally Posted by PunkS7yle View Post
Just google NomadMemory lib, and if you want the bot to work when cabal is minimized I suggest looking into ControlSend, ControlClick functions.
this only works without gameguard :)
09/17/2012 19:01 Wayntressierts#50
1.
Quote:
Originally Posted by wannabe21 View Post
whats with this code (...)?
Facepalm!
"(...)" means: here goes your main code.
Call the function to activate WH.


2.
Quote:
Originally Posted by wannabe21 View Post
I also created a simple bot using autoit. my bot works smoothly, not detected by gameguard.. the problem is, it works only when cabal is the active window, pls need little help
This is first-grader basic ABC stuff... why dont you ask google or use the forum search?

to make Cabal window active
Code:
WinActivate("CABAL")
wait for window to become active...
Code:
WinWaitActive("CABAL")

3.
Quote:
Originally Posted by wannabe21 View Post
... and also where can I get that plugin Nomad.au3??
Just use the site search.
You'll find this here on ePvP and some interesting tutorials too.
09/17/2012 22:04 jhazee21#51
Following The Instruction given by Wayntressierts I get this address 0x0107BF90.. Then I add the address manually and see a box like this
Address:
0x0107BF90=???
Description:
No Description
Type
4Byte
[Box]Pointer

Then after I check the pointer box what should I do next.?

I dont know where to put the pointer fixedmain.exe+C7BF80
It should be in this
< 0 > ????????+0= ????????
or here
____________= ?????????

Thanks.. I really want to learn creating wallhack by myself..
09/27/2012 12:36 Squall15#52
Is it still working? Cuz i cant make it work for EU. Tried to search everything for myself, and tried that pointer too, but its not working for me.
09/27/2012 12:50 genesisVI#53
Quote:
Originally Posted by jhazee21 View Post
Following The Instruction given by Wayntressierts I get this address 0x0107BF90.. Then I add the address manually and see a box like this
Address:
0x0107BF90=???
Description:
No Description
Type
4Byte
[Box]Pointer

Then after I check the pointer box what should I do next.?

I dont know where to put the pointer fixedmain.exe+C7BF80
It should be in this
< 0 > ????????+0= ????????
or here
____________= ?????????

Thanks.. I really want to learn creating wallhack by myself..
check the pointer box

add [base pointer]+[OffSet] = ??????
09/29/2012 17:58 caine291ph#54
after following steps on page 1 i found the base address for PH
how can i find the pointer of the base?
10/01/2012 14:27 caine291ph#55
Quote:
Originally Posted by Wayntressierts View Post
Double click the green pointer to add it to your cheattable.
If you double click the adress Cheatengine resolves it as "cabalmain.exe+cXXXXX" or "fixedmain.exe+xxxxxx".
This is a little more elegant than using the plain adress...

0x40814 stays constant. It an offset to get from the maparea adress to the collision map. You do not want to remove the trees and the mountans, you want to remove the collisions.. :rolleyes:
so ill always use 0x40814 in any version of cabalmain.exe
because it stays constant?
10/02/2012 14:00 Wayntressierts#56
Yes. Constants are constant.
10/04/2012 12:29 jhazee21#57
Quote:
Originally Posted by Wayntressierts View Post
For all the people who asked for it,this is my wallhack method.

This method describes how you can find out the maparea adress and pointer for your client. Its working on all clients I know and play including official servers and Mystery Cabal.


This is it step by step:

1.
Enter the Map Bloody Ice

2.
Scan "Array of Bytes":

01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 07 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00

This search matrix is complex enough to bring up only one result.

3.
Take this adress and subtract 0x42804.
This should result in an adress like 0x0???020.
This is your Maparea adress. It's changing every time the client is run.

4.
Now do a 4-Byte scan for this adress.
Cheatengine will find one green pointer for this.


btw:If you are using DE/EU Fixedmain without gameguard from our sticky thread the pointer is fixedmain.exe+C7BF80


How to wallhack:
After 0x40000 bytes of map data and visual elements you'll find another 0x40000 bytes of collision map. If you clear the complete collision map (fill with zeros) you'll have a perfectly nice wallhack that gameguard does not detect. :D


Enjoy..


And good to see you all still around here ;-)
What should I do after Step 4.

I try to Browse This Memory Region but I cant find 0x40000
10/04/2012 15:16 caine291ph#58
function WallhackClick(sender)
start=readInteger("fixedmain.exe+C7BF80")+0x40814
for i=0,0x3ffff,4 do
writeBytes(start+i,0)
end
end


what is the equivalent of

writeBytes in C++

can anyone help me?
10/05/2012 03:31 Wayntressierts#59
Code:
 memset( WH_Start , 0x0, 0x40000);
easy enough ?
10/05/2012 09:28 caine291ph#60
Am I coding it right?
anyone please.

DWORD *WH_Start = (DWORD*)(*(DWORD*)0x0107BF90 + 0x40814);