[Release] Wallhack method all Client / find Maparea pointer

06/13/2013 13:10 swordskillamp#91
3.
Take this adress and subtract 0x42804.
This should result in an adress like 0x0???020.
This is your Maparea adress. It's changing every time the client is run.

How can i subtract it?
can you teach me please ? :)
06/13/2013 13:30 darkhole_29#92
Quote:
Originally Posted by swordskillamp View Post
3.
Take this adress and subtract 0x42804.
This should result in an adress like 0x0???020.
This is your Maparea adress. It's changing every time the client is run.

How can i subtract it?
can you teach me please ? :)

use calculator and the important thing .... [brain.exe]:rtfm:

and set it as a hex or programer type
07/27/2013 11:14 lintekens02#93
not smooth in ph.. tested it today.. can pass through the wall but it seems i get suck back everytime.. same goes with skatemode and fade


edit: is this fixed in ep10??
07/27/2013 15:22 paulken#94
not working in ph? i try scanning the array of byte but zero result
07/28/2013 05:38 lintekens02#95
Quote:
Originally Posted by paulken View Post
not working in ph? i try scanning the array of byte but zero result
i just tried it yesterday.. it still works but as i said.. its like gravity pulling you back to your original place. then if ever you pass through a wall.. you get stuck there.. Fuji said the same
08/19/2013 20:19 paulken#96
Quote:
Originally Posted by lintekens02 View Post
i just tried it yesterday.. it still works but as i said.. its like gravity pulling you back to your original place. then if ever you pass through a wall.. you get stuck there.. Fuji said the same
i think sir fuji find another way to wallhack he post it
on his facebook page that its not totally patch :D
08/20/2013 18:24 nasyer_boy#97
Quote:
Originally Posted by lintekens02 View Post
i just tried it yesterday.. it still works but as i said.. its like gravity pulling you back to your original place. then if ever you pass through a wall.. you get stuck there.. Fuji said the same
there is a way to wallhack.. but so annoying DC...
08/25/2013 08:15 murlock1234#98
HOW TO FIND " x " IN PROGRAMER CALCULATOR?
02/28/2014 00:03 bokswagen11#99
Quote:
Originally Posted by genesisVI View Post
tnx mate my life is easier w/ autoit :handsdown:
can i use this to dekaron rising and assault fire games?
03/01/2014 08:38 zyke_023#100
can you teach me how to off the wallhack? anyone..?

plz pm me.. nid it soo badly
04/21/2014 21:31 nicolassp#101
3.
Take this adress and subtract 0x42804.
This should result in an adress like 0x0???020.
This is your Maparea adress. It's changing every time the client is run.

I did not so someone could make a beaded explanation?
04/21/2014 21:41 Wayntressierts#102
This just means: If you scan the AoB Code in Cheatengine, you'll get a result.
Take this result's address and substract (use windows calculator -> programmers view -> HEX mode) 42804.

The result of the substraction will be an address which ends wih xxxxx20.

Then you know you did it right.
04/21/2014 23:08 nicolassp#103
Hahahaha Wayn a Great thank you friend I managed to reach the finish line are missing a little something for all work,

How to wallhack:
After 0x40000 bytes of map data and visual elements you'll find another 0x40000 bytes of collision map. If you clear the complete collision map (fill with zeros) you'll have a perfectly nice wallhack que gameguard does not detect.

could give a slightly better explanation? did not understand the part of 0x400000
04/21/2014 23:28 Wayntressierts#104
Okay.. you found the maparea. The first 40000 bytes (and a little) are mapdata (Trees, Mountains etc.) we don't need to change that.

Now, take the maparea address (your xxxxx20) and add 40814 (windows calculator, HEX).

This is the point (address) where a second map (for collisions) begins. It stores where you can walk and where not. Finish line would be to clear that map with zeros (=walk everywhere).

If you use cheatengine you may do it with a LUA script like:

PHP Code:
function WallhackClick(sender)
  
start=memoryrecord_getValue(addresslist_getMemoryRecordByDescription(getAddressList(), "Wallhack Base"))+0x40814
  
for i=0,0x3ffff,do
    
writeBytes(start+i,0)
  
end
end 
04/21/2014 23:43 nicolassp#105
Wayn not quite understand the lua script, you could call me on fb?


MyName Nicolas Ferreira