Wallhack help needed..

12/22/2009 20:55 PomFect#1
Hello..
I was trying to update my offsets of the new wallhack, but its not working..
This is my scrip:
Code:
[ENABLE]
alloc(Wall,64)
label(ReturnWall)

00423981: //8D BC 24 88 00 00 00
jmp Wall
nop
nop
ReturnWall:

Wall:
lea edi,ss:[esp+00000088]
cmp [eax+00000402],5f626577
je ReturnWall
mov [eax+00000402],5f626577
mov [eax+00000406],67616d69
mov [eax+0000040a],616d2e65
mov [eax+0000040e],00000063
jmp ReturnWall

[DISABLE]
dealloc(Wall)
00423981:
lea edi,ss:[esp+00000088]
btw the rest offsets are correct, just this one worng.

Can somone please fix it up for me, thanks :handsdown:
12/22/2009 21:01 ts61fa#2
Quote:
Originally Posted by PomFect View Post
Hello..
I was trying to update my offsets of the new wallhack, but its not working..
This is my scrip:
Code:
[ENABLE]
alloc(Wall,64)
label(ReturnWall)

00423981: //8D BC 24 88 00 00 00
jmp Wall
nop
nop
ReturnWall:

Wall:
lea edi,ss:[esp+00000088]
cmp [eax+00000402],5f626577
je ReturnWall
mov [eax+00000402],5f626577
mov [eax+00000406],67616d69
mov [eax+0000040a],616d2e65
mov [eax+0000040e],00000063
jmp ReturnWall

[DISABLE]
dealloc(Wall)
00423981:
lea edi,ss:[esp+00000088]
btw the rest offsets are correct, just this one worng.

Can somone please fix it up for me, thanks :handsdown:
ur offsets are wrong, u gotto scan the 8D BC 24 88 00 00 00 at CE choose array of bytes then ull get the new adress wich in this situation is>00766E93
i gave u my wallhack but u gotto do it urself next time ;)

[ENABLE]
alloc(Wall,64)
label(ReturnWall)

00766E93: //8D BC 24 88 00 00 00
jmp Wall
nop
nop
ReturnWall:

Wall:
lea edi,ss:[esp+00000088]
cmp [eax+00000402],5f626577
je ReturnWall
mov [eax+00000402],5f626577
mov [eax+00000406],67616d69
mov [eax+0000040a],616d2e65
mov [eax+0000040e],00000063
jmp ReturnWall

[DISABLE]
dealloc(Wall)
00766E93:
lea edi,ss:[esp+00000088]
12/22/2009 21:03 PomFect#3
Thanks :D
But I tried to findout the offsets by myself and i found worng one :X [found 3 offsets :S]
12/22/2009 21:54 ~Kakkarot~#4
+#1 reported at 22/12/09 GMT +1 21:54 cause wrong section

Question anwserd

#requesting close
12/23/2009 16:49 trane.#5
#Closed