Memory Address's Update

[giacometti]

Originally posted by coder62+--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (coder62)</td></tr><tr><td id='QUOTE'>
and to the disconnect things i have an easier way to you:

if you want to disconnect write "c3" at "4889f4" after you dced write "8d" to the same function it blocks the send function so you dont send anymore the onlinecheck packets and dc so with writing 8d you reenable the send function.
[/b]

it worked. This one takes about 10 sec to log out.. its like lag disconnect.


<!--QuoteBegin--coder62

another method to my first one the first one takes it times this does almost instant dc:

offset1:004889F4
offset2:004889FA

write to offset1:00516f7c0d8b
write to offset2:c300000e7de8

do any action ingame that send something, instead of sending something it will be redirected to the winsock close function and you will be dced instant

to restore it for normal working

write to offset1:08b70f04418d
write to ofset2:516f68b95051

advantage you dont need to inject anything and even can use it in tools like autoit.
[/quote]

it worked too. Amazing!!! This one dced in no time, just like cotobo used to be. No words for you coder62, no words! (just kidding, i think i will need to make a tag for you: TYVMA = Thank you very much AGAIN !!!) Well, I think ConquerPlus will have a dced option next version =D

[blinko]

Originally posted by MonkFox@Jan 14 2007, 06:19
also, ive used hex/binary to decode tcp headers,
but you can decode this .exe file the same way huh?

hex -> binary -> unicode?


Thanks,

Justin

umm..dunno what you're actually talking about..but if you're using cheat engine..just select Conquer.exe as the process, and click View Memory inside the following window will be a bunch of address's each with it's own purpose and value.

However cheat engine i think although good could have been better since it uses 16 byte arrays.

so the starting address might not change the value you want it to, you'll have to figure out which address goes to the specific value..

but it's all in hex and binary..then of course each value you read such as character names and such will be in unicode.So i guess your answer is yes? lol

[TheOne785]

00512065 - Cyclone Address just change it to 32768 to get cyclone.

[high]

hmm i got a question what program do i gotta download to type that stuff in?lol sorry im a nub

[blinko]

Originally posted by high@Jan 16 2007, 06:54
hmm i got a question what program do i gotta download to type that stuff in?lol sorry im a nub

well.. maybe CheatEngine/TSearch, a hex editor for extra resources, and a Scripting Language.

[blinko]

Originally posted by TheOne785@Jan 15 2007, 18:10
00512065 - Cyclone Address just change it to 32768 to get cyclone.

well actually when righting that in vb6.0 you write it 4 bytes to the address 00512064, and in vb.net you do a 4 byte value at address 00512066

where like

VB6.0
00512064 = 32768

VB.NET way
00512066 = 128

i'll also be posting up code for multi client reading thanx to unknownone and also a quick application for reading the Cyclone value into both client's even while minimized.
And then we'll be getting processID without using Findwindow and or FindwindowEx.

We'll be using Process controls to get processID to quickly read memory to Conquer if maybe u changed the title with another tool..it'll bypass that without giving a new name for the client.I'm also going to try and manipulate the FindWindowEx to work as a multi Process checker instead of multiple windows.

[high6]

Originally posted by blinko+Jan 16 2007, 14:22--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (blinko @ Jan 16 2007, 14:22)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin--TheOne785@Jan 15 2007, 18:10
00512065 - Cyclone Address just change it to 32768 to get cyclone.

well actually when righting that in vb6.0 you write it 4 bytes to the address 00512064, and in vb.net you do a 4 byte value at address 00512066

where like

VB6.0
00512064 = 32768

VB.NET way
00512066 = 128 [/b][/quote]
or you can just write 1 byte(128) to 00512066 in either one.

[lollmfaorofl]

ummmm im all confused, what is this **** thing?

[ToppleTurtle]

Download a memory editor. Manually Add the adresses, and play with the values. Everything is client side though.

[ZeRo-ToLeRaNcE]

Hello guys!

i want to ask of someone can tall me to program the Pointer for Arrowpacks.

i have with cheat engine the adress and HEX 46 and i get my arrows in pack,

but how do i read that in VB.NET 2005 with Memoryreadprocess API??

can someone help me please?

and has someone allrerady the adress for HP found?? to make an AutoHealer.

i want in my program to make an Autohealer, when de HP is coming on example on 250 then my program has to send an SENDKEY F1 for example to make de HP better.

Greetz, DyNy

[Fujiy]

How use offsets?

[nTL3fTy]

Well I didn't see this one in the main list but it might have never been added:

Attribute Points - &H512C14

Found another (kind of useless though)

Number of messages on the side of the screen (where you see people talk) - &H5160E8 (max of 20)

[Fujiy]

Somebody know how to read if char is 2RB?

[nTL3fTy]

Originally posted by Fujiy@Feb 5 2007, 10:07
Somebody know how to read if char is 2RB?

I would say it's a 0 or 1 value (false or true for second reborn) but I have no idea... you would have to test with it a bit...

[ColdStart]

You know what would be great? If somebody could find the address for your current Garment so that you could "try before you buy." See in my case, I don't want to waste &#036;15 just to find out my char looks like a flowery idiot and I don't currently have a garment.
If you have a Garment, please, I MEAN PLEASE, help us find this address. It's value will probably be the ItemType ID number for that specific Garment.