[Release] Wallhack method all Client / find Maparea pointer

02/05/2015 03:41 PinkyPoison#121
Wall hack working but can u release a perfect working wall hack?
02/13/2015 03:06 Alz™#122
Quote:
Originally Posted by PinkyPoison View Post
Wall hack working but can u release a perfect working wall hack?
It's imposible at cabal current version :)
03/02/2016 13:07 gonzab#123
this guide still working on oficial servers?
03/07/2016 03:49 Kylo Ren#124
still working?
08/27/2016 07:40 youbrey#125
i am stuck on last stop for WH. i am really dont understand.

Quote:
How to wallhack:
After 0x40000 bytes of map data and visual elements you'll find another 0x40000 bytes of collision map. If you clear the complete collision map (fill with zeros) you'll have a perfectly nice wallhack that gameguard does not detect.
i found map area address like 0x0???020 but dont now what i need to do next.
right click "find map pointers" "Browse memory region" or what??
i really dont know where to "find another 0x40000 bytes of collision map"

pls someone help.
11/27/2016 16:51 tanzoro2#126
i really dont know where to find another 0x40000 bytes of collision map

Please help me
09/11/2017 02:58 jairlara24#127
3.
Take this adress and subtract 0x42804.
This should result in an adress like 0x0???020.
This is your Maparea adress. It's changing every time the client is run.






I did not understand this part please help me
09/11/2017 12:50 HansMarcos#128
Quote:
Originally Posted by jairlara24 View Post
3.
Take this adress and subtract 0x42804.
This should result in an adress like 0x0???020.
This is your Maparea adress. It's changing every time the client is run.






I did not understand this part please help me
use developer calculator paste what address you get in hex type substact 42804 = MapArea Base Address

Map Area Base Addres + 40814 = Wallhack Start Point
09/19/2017 15:03 leo447#129
hi, am tryn to make this lua script work on c++

start=readInteger("fixedmain.exe+C7BF80")+0x40814
for i=0,0x3ffff,4 do
writeBytes(start+i,0)
end

Yes i know that "fixedmain.exe+C7BF80" is a pointer ive found it make script work but i need it on c++ .
Anyone care to explain what this line does

"readInteger("fixedmain.exe+C7BF80")+0x40814"
like go to this address "fixedmain.exe+C7BF80" find out whats in there and then add 0x40814 to it decimal for "40814" is "264212" and store what at start ? the sum of whats inside in "fixedmain.exe+C7BF80" address + 0x40814 ? So we basicaly just changed the value of that address ?
and we change to "0" the values thats inside from address "fixedmain.exe+C7BF80"+1 for "262143" times ? jesus my head hurts ... if u gona say smth about memset ... u better use words that are simple af please !!!
09/20/2017 05:49 HansMarcos#130
Quote:
Originally Posted by leo447 View Post
hi, am tryn to make this lua script work on c++

start=readInteger("fixedmain.exe+C7BF80")+0x40814
for i=0,0x3ffff,4 do
writeBytes(start+i,0)
end

Yes i know that "fixedmain.exe+C7BF80" is a pointer ive found it make script work but i need it on c++ .
Anyone care to explain what this line does

"readInteger("fixedmain.exe+C7BF80")+0x40814"
like go to this address "fixedmain.exe+C7BF80" find out whats in there and then add 0x40814 to it decimal for "40814" is "264212" and store what at start ? the sum of whats inside in "fixedmain.exe+C7BF80" address + 0x40814 ? So we basicaly just changed the value of that address ?
and we change to "0" the values thats inside from address "fixedmain.exe+C7BF80"+1 for "262143" times ? jesus my head hurts ... if u gona say smth about memset ... u better use words that are simple af please !!!
Ill make this simple

open calculator take the hex in this thing fixedmain.exe+C7BF80 "C7BF80" then add 400,000 in HEX You get Map Area Base which is "107BF80" then all you have to do now is just add 40814 in CE result if all steps is followed

[Only registered and activated users can see links. Click Here To Register...]

Result of that address will be the Wallhack Starting Address

for the script this should be it

start=readInteger("107BF80")+0x40814
for i=0,0x3ffff,4 do
writeBytes(start+i,0)
end
09/20/2017 08:14 leo447#131
Quote:
Originally Posted by HansMarcos View Post
Ill make this simple

open calculator take the hex in this thing fixedmain.exe+C7BF80 "C7BF80" then add 400,000 in HEX You get Map Area Base which is "107BF80" then all you have to do now is just add 40814 in CE result if all steps is followed

[Only registered and activated users can see links. Click Here To Register...]

Result of that address will be the Wallhack Starting Address

for the script this should be it

start=readInteger("107BF80")+0x40814
for i=0,0x3ffff,4 do
writeBytes(start+i,0)
end
Goodmorning thank you for reply . I managed to get it to work with lua no problem there ok lets start.
For my server the values/addresses are.

B82B10 +400000 = 0xF82B10 or 16263952 decimal. So if i do :

start=readInteger("F82B10")+0x40814
for i=0,0x3ffff,4 do
writeBytes(start+i,0)
end

All good it works fine with roll .
I need it to embed this lua code into c++ now that we have the addresses i need to translate it .
what ive found about this line of code

"start=readInteger("F82B10")+0x40814"

Go to address 0xF82B10 get the value that is stored inside "value in decimal" covert it into hex then add 0x4081 result is "9ADE834" or "162392116" decimal.
Now take that result as address and start from that address for 0x3ffff times or else "262143 decimal value" times and each time increase address by one and replace whatever is the value inside that address to 0. Now i saw some values werent 0 but 6 , 7 maybe thats why it isnt perfect wallhack i am working on it .
i need this into c++ code my head hurts .
09/21/2017 06:01 HansMarcos#132
Quote:
Originally Posted by leo447 View Post
Goodmorning thank you for reply . I managed to get it to work with lua no problem there ok lets start.
For my server the values/addresses are.

B82B10 +400000 = 0xF82B10 or 16263952 decimal. So if i do :

start=readInteger("F82B10")+0x40814
for i=0,0x3ffff,4 do
writeBytes(start+i,0)
end

All good it works fine with roll .
I need it to embed this lua code into c++ now that we have the addresses i need to translate it .
what ive found about this line of code

"start=readInteger("F82B10")+0x40814"

Go to address 0xF82B10 get the value that is stored inside "value in decimal" covert it into hex then add 0x4081 result is "9ADE834" or "162392116" decimal.
Now take that result as address and start from that address for 0x3ffff times or else "262143 decimal value" times and each time increase address by one and replace whatever is the value inside that address to 0. Now i saw some values werent 0 but 6 , 7 maybe thats why it isnt perfect wallhack i am working on it .
i need this into c++ code my head hurts .
i didn't understand every word you said :)

well my guess is your trying to do wallhack in official??? if it is official i dont know about perfect wallhack in official my wallhack works the same only roll over to wallhack so can't help you anymore how to do perfect wallhack in official / in private server this method works perfectly and it does perfect wallhack
09/21/2017 19:19 logi23#133
Great guide, thanks to Wayntressierts & HansMarcos it was straightforward.
I noticed, that there are problems moving lpm+rpm on regular area after using it, so there's my question - is there any easy way to undo it? Or should I store the values changed by script and restore them afterwards?

--Edit
After Cabal update (rollover is now non-moving skill) that wallhack functionality seems to have no longer any use.