[Release] Wallhack method all Client / find Maparea pointer

[.Law.]

Just google NomadMemory lib, and if you want the bot to work when cabal is minimized I suggest looking into ControlSend, ControlClick functions.

[wannabe21]

Originally Posted by PunkS7yle

Just google NomadMemory lib, and if you want the bot to work when cabal is minimized I suggest looking into ControlSend, ControlClick functions.

thankyoufortheidea...

[geosnuk]

is there a way in ce to mass edit it to all 0?

[mi5pogi]

Originally Posted by PunkS7yle

Just google NomadMemory lib, and if you want the bot to work when cabal is minimized I suggest looking into ControlSend, ControlClick functions.

this only works without gameguard

[Wayntressierts]

1.

Originally Posted by wannabe21

whats with this code (...)?

Facepalm!
"(...)" means: here goes your main code.
Call the function to activate WH.


2.

Originally Posted by wannabe21

I also created a simple bot using autoit. my bot works smoothly, not detected by gameguard.. the problem is, it works only when cabal is the active window, pls need little help

This is first-grader basic ABC stuff... why dont you ask google or use the forum search?

to make Cabal window active

WinActivate("CABAL")

wait for window to become active...

WinWaitActive("CABAL")

3.

Originally Posted by wannabe21

... and also where can I get that plugin Nomad.au3??

Just use the site search.
You'll find this here on ePvP and some interesting tutorials too.

[jhazee21]

Following The Instruction given by Wayntressierts I get this address 0x0107BF90.. Then I add the address manually and see a box like this
Address:
0x0107BF90=???
Description:
No Description
Type
4Byte
[Box]Pointer

Then after I check the pointer box what should I do next.?

I dont know where to put the pointer fixedmain.exe+C7BF80
It should be in this
< 0 > ????????+0= ????????
or here
____________= ?????????

Thanks.. I really want to learn creating wallhack by myself..

[Squall15]

Is it still working? Cuz i cant make it work for EU. Tried to search everything for myself, and tried that pointer too, but its not working for me.

[genesisVI]

Originally Posted by jhazee21

Following The Instruction given by Wayntressierts I get this address 0x0107BF90.. Then I add the address manually and see a box like this
Address:
0x0107BF90=???
Description:
No Description
Type
4Byte
[Box]Pointer

Then after I check the pointer box what should I do next.?

I dont know where to put the pointer fixedmain.exe+C7BF80
It should be in this
< 0 > ????????+0= ????????
or here
____________= ?????????

Thanks.. I really want to learn creating wallhack by myself..

check the pointer box

add [base pointer]+[OffSet] = ??????

[caine291ph]

after following steps on page 1 i found the base address for PH
how can i find the pointer of the base?

[caine291ph]

Originally Posted by Wayntressierts

Double click the green pointer to add it to your cheattable.
If you double click the adress Cheatengine resolves it as "cabalmain.exe+cXXXXX" or "fixedmain.exe+xxxxxx".
This is a little more elegant than using the plain adress...

0x40814 stays constant. It an offset to get from the maparea adress to the collision map. You do not want to remove the trees and the mountans, you want to remove the collisions..

so ill always use 0x40814 in any version of cabalmain.exe
because it stays constant?

[Wayntressierts]

Yes. Constants are constant.

[jhazee21]

Originally Posted by Wayntressierts

For all the people who asked for it,this is my wallhack method.

This method describes how you can find out the maparea adress and pointer for your client. Its working on all clients I know and play including official servers and Mystery Cabal.


This is it step by step:

1.
Enter the Map Bloody Ice

2.
Scan "Array of Bytes":

01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 07 00 00 00 06 00 00 00 06 00 00 00 06 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 07 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00

This search matrix is complex enough to bring up only one result.

3.
Take this adress and subtract 0x42804.
This should result in an adress like 0x0???020.
This is your Maparea adress. It's changing every time the client is run.

4.
Now do a 4-Byte scan for this adress.
Cheatengine will find one green pointer for this.


btw:If you are using DE/EU Fixedmain without gameguard from our sticky thread the pointer is fixedmain.exe+C7BF80


How to wallhack:
After 0x40000 bytes of map data and visual elements you'll find another 0x40000 bytes of collision map. If you clear the complete collision map (fill with zeros) you'll have a perfectly nice wallhack that gameguard does not detect.


Enjoy..


And good to see you all still around here ;-)

What should I do after Step 4.

I try to Browse This Memory Region but I cant find 0x40000

[caine291ph]

function WallhackClick(sender)
start=readInteger("fixedmain.exe+C7BF80")+0x40814
for i=0,0x3ffff,4 do
writeBytes(start+i,0)
end
end


what is the equivalent of

writeBytes in C++

can anyone help me?

[Wayntressierts]

 memset( WH_Start , 0x0, 0x40000);

easy enough ?

[caine291ph]

Am I coding it right?
anyone please.

DWORD *WH_Start = (DWORD*)(*(DWORD*)0x0107BF90 + 0x40814);