Memory address of cyclone

[hok30]

Right... how bout for English client

[Some-Guy]

You'll have to find the address in memory which stores the latest timestamp related to your jumps and make sure it's over 500, best bet would be to freeze it at 1000 or so.

Also @ Lateralus you could make a proxy to do that, but you'd need to crack the new encryptions used. Unless the spanish client didn't get that update.

[Lateralus]

Originally Posted by Some-Guy

You'll have to find the address in memory which stores the latest timestamp related to your jumps and make sure it's over 500, best bet would be to freeze it at 1000 or so.

Also @ Lateralus you could make a proxy to do that, but you'd need to crack the new encryptions used. Unless the spanish client didn't get that update.

I understand that.. But how in the WORLD can I find the timestamp related to jumps? That's where I'm stuck. :P

[shitboi]

easiest way to find speedhack(or any other values) address for foriegn clients is to make a reference to maglobal.inf

Firstly, find out the difference between addresses of a simple to find value(say, money you have), and the value you want to locate(in this case, char mode/speedhack).

In this example i am refering to maglobal.inf 5016(lazy to update)

MoneyInv=&H50BBF4
CharEffects=&H50ADF6

do a hex calculation, BBF4 - ADF6 = DFE
So the difference between money address and char address is DFE.

Now log into your foriegn client. find the address for money, i am sure even a ****** can do that without much prob. Substract DFE from the address for money and you will get your cyclone address. You will know what to do with other addresses.

However, this doesn't work for certain addresses. Then you will have to find it the traditional way.

As for timestamp thingy, i have no idea what is going on. I'd like to learn more about it.

[Lateralus]

Originally Posted by shitboi

easiest way to find speedhack(or any other values) address for foriegn clients is to make a reference to maglobal.inf

Firstly, find out the difference between addresses of a simple to find value(say, money you have), and the value you want to locate(in this case, char mode/speedhack).

In this example i am refering to maglobal.inf 5016(lazy to update)

MoneyInv=&H50BBF4
CharEffects=&H50ADF6

do a hex calculation, BBF4 - ADF6 = DFE
So the difference between money address and char address is DFE.

Now log into your foriegn client. find the address for money, i am sure even a ****** can do that without much prob. Substract DFE from the address for money and you will get your cyclone address. You will know what to do with other addresses.

However, this doesn't work for certain addresses. Then you will have to find it the traditional way.

As for timestamp thingy, i have no idea what is going on. I'd like to learn more about it.

AH, I understand! Much thanks!!!!!!!!

[shitboi]

So, no pros is going to explain timestamp? lol

[IAmHawtness]

Originally Posted by shitboi

So, no pros is going to explain timestamp? lol

That's exactly what I'm waiting on. I keep looking for this thread when I go here, hoping to see some post that explains the timestamp things

[hartoman]

many thx that was vry infrmative i thank u from pits of my hart :bow: :bow:

:hearts and kisses:

[shitboi]

hmmmm, i'll suggest this method. though i am very doubtful it will work. but here it goes.

Firstly, since that timestamp can be done client side, there has to be a way to locate it.

In normal conditions, the timestamp thingy is set to (eg) X. When cyclone activates, timestamp will be set to X+Y where Y is TQ programmer defined. When cyclone is over, it will be set back to X.

So, by doing a search for unknown value -> changed value -> initial value, it should give us a proper result. However, there are problems like, unknown type, and address not within the memory declaration of Conquer.exe (should be within, lmao)

[Some-Guy]

Originally Posted by shitboi

In normal conditions, the timestamp thingy is set to (eg) X. When cyclone activates, timestamp will be set to X+Y where Y is TQ programmer defined. When cyclone is over, it will be set back to X.

The timestamp stores the amount of time between each jump, if this is less than a certain value it is allowed, if it is not then you are disconnected (set amount stored server side).

[Lateralus]

I have an idea, but I'm about to leave to go somewhere.. Can someone possibly find out for me?

My idea - search for unknown value, use cyclone and jump, search for increased value.. when cyclone ends, jump and search for decreased value until you are limited to only a few addresses.

[UPSman2]

problem is time stamp doesn't increase, its the same value since its like

if jump < 1 second then disconnect

[Lateralus]

Originally Posted by UPSman2

problem is time stamp doesn't increase, its the same value since its like

if jump < 1 second then disconnect

Breakpoint?

[shitboi]

Yeti told me that is it's actually a series of asm codes injected into conquer process. -.-?(i don't know what i am talking here, lol)

He did say it can be done by writing array-of-byte values to -->2<-- addresses. But didn't mention how the address is to be located. This timestamp thingy should be a kiddy thing for those who reverse engineered co. lol. Help!!! omfg..

[Lateralus]

Originally Posted by shitboi

Yeti told me that is it's actually a series of asm codes injected into conquer process. -.-?(i don't know what i am talking here, lol)

He did say it can be done by writing array-of-byte values to -->2<-- addresses. But didn't mention how the address is to be located. This timestamp thingy should be a kiddy thing for those who reverse engineered co. lol. Help!!! omfg..

Ok, this brings up more questions. How will we know what arrays to write to it?

Lol @ kiddy thing for those who reverse engineered conquer. *sigh*...