[Release]Timo264's Cheats

Hi
For all the People who don't have a working UCE
I realese my Cheats.exe.
It works the same way like a UCE.

State:
-undetected (if it is not PM me and i will change the state)
-works on nearly all P-server
-also on GBL server

Contains:
-Speed
-Z-Coordinate
-F1 Merchant have a look @[Only registered and activated users can see links. Click Here To Register...]

HowTo:
-Start Kal
-Start Cheats.exe
-Log in with your Char
-choose a value
-check it to freeze it

VideoTut

[Only registered and activated users can see links. Click Here To Register...]

PHP Code:


			
;Timo264's Cheats





#RequireAdmin

#include <GUIConstants.au3>

#include <NomadMemory.au3>;(c)Nomad.



SetPrivilege("SeDebugPrivilege", 1)



Global $ur, $off[2], $add, $was[2]

$ur = 0x002F3840

$off[0] = 0x4B14

$off[1] = 0x4640

$add = 0x006A2EBC



#Region ### START Koda GUI section ### Form=

$Form1 = GUICreate("Timo264's Cheats", 211, 67, 193, 125)

$CSpeed = GUICtrlCreateCheckbox("Speed", 0, 0, 57, 17)

$Choehe = GUICtrlCreateCheckbox("Z-Coordinate", 0, 16, 97, 17)

$Cf1 = GUICtrlCreateCheckbox("F1 Merchant", 0, 32, 97, 17)

$Label1 = GUICtrlCreateLabel("Note: for P-Server only", 0, 48, 111, 17)

$ISpeed = GUICtrlCreateInput("", 144, 0, 65, 17)

$Ihoehe = GUICtrlCreateInput("", 144, 16, 65, 17)

$If1 = GUICtrlCreateInput("", 144, 32, 65, 17)

GUISetState(@SW_SHOW)

#EndRegion ### END Koda GUI section ###



While Not ProcessExists("engine.exe")

    $nMsg = GUIGetMsg()

    Switch $nMsg

        Case $GUI_EVENT_CLOSE

            Exit

    EndSwitch

    sleep (20)

WEnd



$Open = _memoryopen(ProcessExists("engine.exe"))

$base = _MemoryGetBaseAddress($Open)

$base = "0x"&Hex(("0x"&$base)+$ur)



While 1

    $nMsg = GUIGetMsg()

    Switch $nMsg

        Case $GUI_EVENT_CLOSE

            Exit

    EndSwitch

    if $cspeed And BitAND(GUICtrlRead($cspeed), $GUI_CHECKED) = $GUI_CHECKED then

        $Point = _memoryread($base, $Open, 'dword')

        $30 = "0x" & Hex($Point + $off[0])

        _MemoryWrite($30 , $Open,GUICtrlRead($ispeed), 'dword')

    Else

        $Point = _memoryread($base, $Open, 'dword')

        $30 = "0x" & Hex($Point + $off[0])

        $was[0] = _MemoryRead($30 , $Open, 'dword')

        GUICtrlSetData($ispeed,$was[0])

    EndIf

    if $Choehe And BitAND(GUICtrlRead($Choehe), $GUI_CHECKED) = $GUI_CHECKED then

        $Point = _memoryread($base, $Open, 'dword')

        $30 = "0x" & Hex($Point + $off[1])

        _MemoryWrite($30 , $Open,GUICtrlRead($ihoehe), 'dword')

    else

        $Point = _memoryread($base, $Open, 'dword')

        $30 = "0x" & Hex($Point + $off[1])

        $was[1] = _MemoryRead($30 , $Open, 'dword')

        GUICtrlSetData($IHoehe, $was[1])

    EndIf

    if $Cf1 And BitAND(GUICtrlRead($Cf1), $GUI_CHECKED) = $GUI_CHECKED then

        _MemoryWrite($add , $Open,GUICtrlRead($if1), 'char[7]')

    else

        $was[1] = _MemoryRead($add , $Open, 'char[7]')

        GUICtrlSetData($if1, $was[1])

    EndIf

    If _IsFocused($Form1,$ISpeed) Then GUICtrlSetState($Cspeed, $GUI_CHECKED)

    If _IsFocused($Form1,$Ihoehe) Then GUICtrlSetState($choehe, $GUI_CHECKED)

    If _IsFocused($Form1,$If1) Then GUICtrlSetState($cf1, $GUI_CHECKED)

    Sleep (100)

WEnd



Func _IsFocused($hWnd, $nCID)

    Return GUICtrlGetHandle($nCID) = ControlGetHandle($hWnd, '', ControlGetFocus($hWnd))

EndFunc



Func _MemoryGetBaseAddress($ah_Handle, $iHexDec = 0) ;(c)Nomad. Szhlopp.



    Local $iv_Address = 0x00100000

    Local $v_Buffer = DllStructCreate('dword;dword;dword;dword;dword;dword;dword')

    Local $vData

    Local $vType



    If Not IsArray($ah_Handle) Then

        SetError(1)

        Return 0

    EndIf





    DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer))



    If Not @Error Then



        $vData = Hex(DllStructGetData($v_Buffer, 2))

        $vType = Hex(DllStructGetData($v_Buffer, 3))



        While $vType <> "00000080"

            DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer))

            $vData = Hex(DllStructGetData($v_Buffer, 2))

            $vType = Hex(DllStructGetData($v_Buffer, 3))

            If Hex($iv_Address) = "01000000" Then ExitLoop

            $iv_Address += 65536



        WEnd



        If $vType = "00000080" Then

            SetError(0)

            If $iHexDec = 1 Then

                Return Dec($vData)

            Else

                Return $vData

            EndIf



        Else

            SetError(2)

            Return 0

        EndIf



    Else

        SetError(3)

        Return 0

    EndIf



EndFunc   ;==>_MemoryGetBaseAddress

Tut by 82ndbravo:

Quote:

Originally Posted by 82ndbravo

I have retested and it works just fine. I have found out that there is a way your suppose to run it.
1:Load kalonline
2:Log in
3:log in with your char and before it hits world
4: start cheat (before u enter the world fully)
5: run like a bat out of hell :D

be sure u have clicked your char and started to enter the world before u start cheat. And be sure u have cheat on before your char is fully in the world. should work.

I've test windows xp 32-bit and vista 64-bit works on both

Have Fun

Timo264

01/16/2010 17:01 AeroFury#2

Nice, speedhack is working nice.
How exactly does the Z-coordinate & F1 merchant work?

01/16/2010 19:14 Timo264#3

with the Z-coordinate you can go ug
and the f1 merchant changes the npc which is called by pressing F1
have a look at [Only registered and activated users can see links. Click Here To Register...]

01/16/2010 20:39 Zezark#4

tried the speed hack but does not work. filled in a random number and checked the box but nothing happend.

01/16/2010 20:43 Timo264#5

which server?

01/16/2010 21:39 Gunn3r#6

doesnt work on Quaint....

like..

if i wanna type in something,its auto freezing,nothing changed ingame . . . .

01/16/2010 22:21 Timo264#7

hmm tested it on 4 p-server
2 with and 2 without GBL
and it worked on all.

i download Quaint atm and will test it there.

Edit: works at Quaint!

01/17/2010 11:07 Zezark#8

Quote:

Originally Posted by Timo264

which server?

Fusion kal

01/18/2010 18:55 mercenarioo7#9

dont works on unbreakable...nothing happens.

01/19/2010 11:54 Timo264#10

i play unbreakable
it works!

first you start Kal
then you start Cheats.exe
then you log in with your char
then the values in the labels of Cheats.exe should change
then you can change them!

01/19/2010 17:51 mercenarioo7#11

The values are always on 0 zeros xD

01/20/2010 17:12 selvhat#12

possible to make it work on int?

01/20/2010 17:13 Zafer2008#13

virustest?

01/20/2010 19:43 NoWallzZz#14

hello there
maybe stupid question but when i open this cheat i got this:
[Only registered and activated users can see links. Click Here To Register...]

and now what to do? how i can know values ? pls explain me

01/20/2010 22:32 Timo264#15

Quote:

Originally Posted by selvhat

possible to make it work on int?

this program works like a normal CE.
If you tell me the offsets and the adress of the pointer.

Quote:

Originally Posted by NoWallzZz

maybe stupid question

YES.

you could atleast read my first post.

Quote:

How To:
-Start Kal
...

Page 1 of 4

Last »