United Hackprogrammers Front(UHF)-CO2 Memory Tables

giacometti · 08/03/2007, 04:51

hello, here is my gift for you guys.... Hows thing going around here? ive been checking this forum a little bit often now..

(1) current HP dma defeat (read hp at $004d28fe):
</span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE ( TSEARCH FORMAT)</td></tr><tr><td id='QUOTE'>

</span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (injected code cave)</td></tr><tr><td id='QUOTE'>
offset 0x4d290e
push eax
push 01
mov ecx,edi
mov [0x4d28fe],eax
jmp 0x41fd3c

offset 0x41fd37
jmp 0x4d290e
[/b][/quote]
</span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (original code)</td></tr><tr><td id='QUOTE'>
offset 0x41fd37
push eax
push 01
mov ecx,edi
[/b][/quote]

[/b][/quote]
or just the pokes values:
Poke 4D290E 50 6A 01 8B CF A3 FE 28 4D 00 E9
Poke 4D2919 1F D4 F4 FF
Poke 41FD37 E9 D2 2B 0B 00

(2) for read arrow count, read pointer at $004D4718 and offset $46. (2 bytes)

ah, sorry if this is in not in the correct layout... if any problem to understand this let me know...

joek · 08/03/2007, 11:51

Quote:

Originally posted by giacometti@Aug 3 2007, 10:51
hello, here is my gift for you guys....

Nice one, thanks giacometti; HP DMA patch tested and working will put it into rev 1 of the 4353 table.

All thats left now is MP & Slot1 DMA and the following addresses :-
PKpoints
XPKillCnt
ClientRGB-R
ClientRGB-G
ClientRGB-B
Trippyness
CharEffects

ZeRo-ToLeRaNcE · 08/03/2007, 21:07

Hello guys!!

i have change my tool with the new adressess and the HP, but when i start my tool, i get this error in the debug mode of conquer, because it crached:

Code:

First-chance exception at 0x76494c1c in Conquer.exe&#58; 0xC0000005&#58; Access violation reading location 0x76494c1c.

I think TQ has built-in an protection to read or write some adressess!

Have someone else the same trouble with the reading of the memory adressess?

greets,

DyNy

joek · 08/03/2007, 21:17

Quote:
Originally posted by DyNy28@Aug 4 2007, 03:07
Hello guys!!

i have change my tool with the new adressess and the HP, but when i start my tool, i get this error in the debug mode of conquer, because it crached:

Code:

First-chance exception at 0x76494c1c in Conquer.exe: 0xC0000005: Access violation reading location 0x76494c1c.

I think TQ has built-in an protection to read or write some adressess!

Have someone else the same trouble with the reading of the memory adressess?

greets,

DyNy

Nope, seems to work ok for M8,
but then I'm not using that **** .net stuff

Is that from the memory table I posted here ?
Double check that its using the correct addresses.

ZeRo-ToLeRaNcE · 08/03/2007, 22:00

He Joek!

i have been BOTJAILED, and i don't understand it, because my tool is totally clientside!!!

i have running Cheat Engine with my game, when i was testing arrowcount and stuff, can it be that CE has write someting and that send to to server of TQ?

it is reading only i think

HELP

PS - I disable now all functions of my tool! untill i have found what is wrong

joek · 08/03/2007, 22:18

Quote:

Originally posted by DyNy28@Aug 4 2007, 04:00
He Joek!

i have been BOTJAILED, and i don't understand it, because my tool is totally clientside!!!

i have running Cheat Engine with my game, when i was testing arrowcount and stuff, can it be that CE has write someting and that send to to server of TQ?

it is reading only i think

HELP

PS - I disable now all functions of my tool! untill i have found what is wrong

**** that sucks man, hope it wasn't a main character.

My preliminary test character is already in BJ safer that way,
but I have been testing on secondary chars with CE and no problems on my end.

How long had you been testing with CE for when it got you ?

Were you testing the effects stuff ?

Is this the same character you got the Access violation with before ?

TQ could be checking active programs, however thats illegal, but then you never know with those guys.

ZeRo-ToLeRaNcE · 08/03/2007, 23:14

Quote:

Originally posted by joek+Aug 3 2007, 22:18--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (joek @ Aug 3 2007, 22:18)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin--DyNy28@Aug 4 2007, 04:00
He Joek!

i have been BOTJAILED, and i don't understand it, because my tool is totally clientside!!!

i have running Cheat Engine with my game, when i was testing arrowcount and stuff, can it be that CE has write someting and that send to to server of TQ?

it is reading only i think

HELP

PS - I disable now all functions of my tool! untill i have found what is wrong

**** that sucks man, hope it wasn't a main character.

My preliminary test character is already in BJ safer that way,
but I have been testing on secondary chars with CE and no problems on my end.

How long had you been testing with CE for when it got you ?

Were you testing the effects stuff ?

Is this the same character you got the Access violation with before ?

TQ could be checking active programs, however thats illegal, but then you never know with those guys. [/b][/quote]
Hello Joek!

yes it is my main char! and i havbe other chars to test olso, but never problems had, and yes i have that access volation olso with that char, and i was testing the Auto HP and Auto Reload of my arrows by snakemonsters.

i think i was testing with CE for about 10 minutes i gues.

my program is totaly clientside, and it can't be the reason to get botjailed, or what yoy say that TQ scans the active programs, and that is totaly illegal.

I don't know what is happend.

my friend told me that TQ now olso the chat text scans, maby thats the reason.
im totally confused,

or the new conquer.exe has an crc check if you use an Multiclient, thats the only reason i can think yet.

this is really sucks...

Tw3ak · 08/04/2007, 00:13

Quote:

Originally posted by DyNy28+Aug 3 2007, 23:14--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (DyNy28 @ Aug 3 2007, 23:14)</td></tr><tr><td id='QUOTE'>

Quote:

Originally posted by -joek@Aug 3 2007, 22:18
<!--QuoteBegin--DyNy28

Quote:

@Aug 4 2007, 04:00
He Joek!

i have been BOTJAILED, and i don't understand it, because my tool is totally clientside!!!

i have running Cheat Engine with my game, when i was testing arrowcount and stuff, can it be that CE has write someting and that send to to server of TQ?

it is reading only i think

HELP

PS - I disable now all functions of my tool! untill i have found what is wrong

Damn that sucks man, hope it wasn't a main character.

My preliminary test character is already in BJ safer that way,
but I have been testing on secondary chars with CE and no problems on my end.

How long had you been testing with CE for when it got you ?

Were you testing the effects stuff ?

Is this the same character you got the Access violation with before ?

TQ could be checking active programs, however thats illegal, but then you never know with those guys.

Hello Joek!

yes it is my main char! and i havbe other chars to test olso, but never problems had, and yes i have that access volation olso with that char, and i was testing the Auto HP and Auto Reload of my arrows by snakemonsters.

i think i was testing with CE for about 10 minutes i gues.

my program is totaly clientside, and it can't be the reason to get botjailed, or what yoy say that TQ scans the active programs, and that is totaly illegal.

I don't know what is happend.

my friend told me that TQ now olso the chat text scans, maby thats the reason.
im totally confused,

or the new conquer.exe has an crc check if you use an Multiclient, thats the only reason i can think yet.

this is really sucks... [/b][/quote]
It can't be crc check on the conquer.exe because i edited it for multi and changed it to allow write ability again same as my previous executables so cotobo would work and i have fixed up tobo to run again on 4353 and i have been running it since the day of patch up to 10 characters at a time and have had no issues of botjail or any errors due to modifying the conquer.exe so it must be something else your doing causing it.

Hope ya figure it out best of luck to ya

joek · 08/04/2007, 00:47

All I can suggest DyNy is change your IP make a noob and see if you can replicate the circumstance that caused the BJing, that way you will have the handle you need to stop it.
My guess is its either related to the access violations or triggering pots/arrows too fast.
Good luck, hope you figure it out mate.

*M* · 08/04/2007, 04:57

CharClass=&H4D428C
PKpoints=&H4D42C0
XPKillCnt=&H4D36EE
ClientRGB-R=&H4D1F46
ClientRGB-G=&H4D1F45
ClientRGB-B=&H4D1F44
Trippyness=&H4D1F47
CharEffects=&H4D36EE

Acidburncx · 08/04/2007, 12:06

error Run-time error 13

joek · 08/04/2007, 12:22

Quote:

Originally posted by *M*@Aug 4 2007, 10:57
CharClass=&H4D428C
PKpoints=&H4D42C0
XPKillCnt=&H4D36EE
ClientRGB-R=&H4D1F46
ClientRGB-G=&H4D1F45
ClientRGB-B=&H4D1F44
Trippyness=&H4D1F47
CharEffects=&H4D36EE

Cool, nice one *M*, I've added those to the rev 2 table.
Good work guys thats it for the main memory addresses,
just need dma bits for mana and slot1,
will see if I can get that done tonight.

[img]text2schild.php?smilienummer=1&text=New Table Out - 4353 revision 2' border='0' alt='New Table Out - 4353 revision 2' />

SniperWanted · 08/04/2007, 13:17

error Run-time error 13 ?

greycongo · 08/04/2007, 23:19

Love your work! Thanks for providing us this service.

ZeRo-ToLeRaNcE · 08/05/2007, 02:16

he guys!

what can you do with those adressess?

ClientRGB-R=&H4D1F46
ClientRGB-G=&H4D1F45
ClientRGB-B=&H4D1F44
Trippyness=&H4D1F47
CharEffects=&H4D36EE

greets,

DyNy