[Release]Timo264's Cheats

[Timo264]

Hi
For all the People who don't have a working UCE
I realese my Cheats.exe.
It works the same way like a UCE.

State:
-undetected (if it is not PM me and i will change the state)
-works on nearly all P-server
-also on GBL server


Contains:
-Speed
-Z-Coordinate
-F1 Merchant have a look @


HowTo:
-Start Kal
-Start Cheats.exe
-Log in with your Char
-choose a value
-check it to freeze it


VideoTut

btw this proofs, it works at unbreakable


ONLY FOR P-SERVER.
I HAVEN'T TESTED IT ON INT, BUT IT WILL NOT WORK



Update:
-Now Require Admin
-Get the base address of the process


Source: (AutoIt)
btw i know it is crappy written xD

 Spoiler

PHP Code:

;Timo264's Cheats


#RequireAdmin
#include <GUIConstants.au3>
#include <NomadMemory.au3>;(c)Nomad.

SetPrivilege("SeDebugPrivilege", 1)

Global $ur, $off[2], $add, $was[2]
$ur = 0x002F3840
$off[0] = 0x4B14
$off[1] = 0x4640
$add = 0x006A2EBC

#Region ### START Koda GUI section ### Form=
$Form1 = GUICreate("Timo264's Cheats", 211, 67, 193, 125)
$CSpeed = GUICtrlCreateCheckbox("Speed", 0, 0, 57, 17)
$Choehe = GUICtrlCreateCheckbox("Z-Coordinate", 0, 16, 97, 17)
$Cf1 = GUICtrlCreateCheckbox("F1 Merchant", 0, 32, 97, 17)
$Label1 = GUICtrlCreateLabel("Note: for P-Server only", 0, 48, 111, 17)
$ISpeed = GUICtrlCreateInput("", 144, 0, 65, 17)
$Ihoehe = GUICtrlCreateInput("", 144, 16, 65, 17)
$If1 = GUICtrlCreateInput("", 144, 32, 65, 17)
GUISetState(@SW_SHOW)
#EndRegion ### END Koda GUI section ###

While Not ProcessExists("engine.exe")
    $nMsg = GUIGetMsg()
    Switch $nMsg
        Case $GUI_EVENT_CLOSE
            Exit
    EndSwitch
    sleep (20)
WEnd

$Open = _memoryopen(ProcessExists("engine.exe"))
$base = _MemoryGetBaseAddress($Open)
$base = "0x"&Hex(("0x"&$base)+$ur)

While 1
    $nMsg = GUIGetMsg()
    Switch $nMsg
        Case $GUI_EVENT_CLOSE
            Exit
    EndSwitch
    if $cspeed And BitAND(GUICtrlRead($cspeed), $GUI_CHECKED) = $GUI_CHECKED then
        $Point = _memoryread($base, $Open, 'dword')
        $30 = "0x" & Hex($Point + $off[0])
        _MemoryWrite($30 , $Open,GUICtrlRead($ispeed), 'dword')
    Else
        $Point = _memoryread($base, $Open, 'dword')
        $30 = "0x" & Hex($Point + $off[0])
        $was[0] = _MemoryRead($30 , $Open, 'dword')
        GUICtrlSetData($ispeed,$was[0])
    EndIf
    if $Choehe And BitAND(GUICtrlRead($Choehe), $GUI_CHECKED) = $GUI_CHECKED then
        $Point = _memoryread($base, $Open, 'dword')
        $30 = "0x" & Hex($Point + $off[1])
        _MemoryWrite($30 , $Open,GUICtrlRead($ihoehe), 'dword')
    else
        $Point = _memoryread($base, $Open, 'dword')
        $30 = "0x" & Hex($Point + $off[1])
        $was[1] = _MemoryRead($30 , $Open, 'dword')
        GUICtrlSetData($IHoehe, $was[1])
    EndIf
    if $Cf1 And BitAND(GUICtrlRead($Cf1), $GUI_CHECKED) = $GUI_CHECKED then
        _MemoryWrite($add , $Open,GUICtrlRead($if1), 'char[7]')
    else
        $was[1] = _MemoryRead($add , $Open, 'char[7]')
        GUICtrlSetData($if1, $was[1])
    EndIf
    If _IsFocused($Form1,$ISpeed) Then GUICtrlSetState($Cspeed, $GUI_CHECKED)
    If _IsFocused($Form1,$Ihoehe) Then GUICtrlSetState($choehe, $GUI_CHECKED)
    If _IsFocused($Form1,$If1) Then GUICtrlSetState($cf1, $GUI_CHECKED)
    Sleep (100)
WEnd

Func _IsFocused($hWnd, $nCID)
    Return GUICtrlGetHandle($nCID) = ControlGetHandle($hWnd, '', ControlGetFocus($hWnd))
EndFunc

Func _MemoryGetBaseAddress($ah_Handle, $iHexDec = 0) ;(c)Nomad. Szhlopp.

    Local $iv_Address = 0x00100000
    Local $v_Buffer = DllStructCreate('dword;dword;dword;dword;dword;dword;dword')
    Local $vData
    Local $vType

    If Not IsArray($ah_Handle) Then
        SetError(1)
        Return 0
    EndIf


    DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer))

    If Not @Error Then

        $vData = Hex(DllStructGetData($v_Buffer, 2))
        $vType = Hex(DllStructGetData($v_Buffer, 3))

        While $vType <> "00000080"
            DllCall($ah_Handle[0], 'int', 'VirtualQueryEx', 'int', $ah_Handle[1], 'int', $iv_Address, 'ptr', DllStructGetPtr($v_Buffer), 'int', DllStructGetSize($v_Buffer))
            $vData = Hex(DllStructGetData($v_Buffer, 2))
            $vType = Hex(DllStructGetData($v_Buffer, 3))
            If Hex($iv_Address) = "01000000" Then ExitLoop
            $iv_Address += 65536

        WEnd

        If $vType = "00000080" Then
            SetError(0)
            If $iHexDec = 1 Then
                Return Dec($vData)
            Else
                Return $vData
            EndIf

        Else
            SetError(2)
            Return 0
        EndIf

    Else
        SetError(3)
        Return 0
    EndIf

EndFunc   ;==>_MemoryGetBaseAddress 


Tut by 82ndbravo:

Originally Posted by 82ndbravo

I have retested and it works just fine. I have found out that there is a way your suppose to run it.
1:Load kalonline
2:Log in
3:log in with your char and before it hits world
4: start cheat (before u enter the world fully)
5: run like a bat out of hell

be sure u have clicked your char and started to enter the world before u start cheat. And be sure u have cheat on before your char is fully in the world. should work.

I've test windows xp 32-bit and vista 64-bit works on both

Have Fun

Timo264

[AeroFury]

Nice, speedhack is working nice.
How exactly does the Z-coordinate & F1 merchant work?

[Timo264]

with the Z-coordinate you can go ug
and the f1 merchant changes the npc which is called by pressing F1
have a look at

[Zezark]

tried the speed hack but does not work. filled in a random number and checked the box but nothing happend.

[Timo264]

which server?

[Gunn3r]

doesnt work on Quaint....

like..

if i wanna type in something,its auto freezing,nothing changed ingame . . . .

[Timo264]

hmm tested it on 4 p-server
2 with and 2 without GBL
and it worked on all.

i download Quaint atm and will test it there.



Edit: works at Quaint!

[Zezark]

Originally Posted by Timo264

which server?

Fusion kal

[mercenarioo7]

dont works on unbreakable...nothing happens.

[Timo264]

i play unbreakable
it works!

first you start Kal
then you start Cheats.exe
then you log in with your char
then the values in the labels of Cheats.exe should change
then you can change them!

[mercenarioo7]

The values are always on 0 zeros xD

[selvhat]

possible to make it work on int?

[Zafer2008]

virustest?

[NoWallzZz]

hello there
maybe stupid question but when i open this cheat i got this:



and now what to do? how i can know values ? pls explain me

[Timo264]

Originally Posted by selvhat

possible to make it work on int?

this program works like a normal CE.
If you tell me the offsets and the adress of the pointer.

Originally Posted by NoWallzZz

maybe stupid question

YES.

you could atleast read my first post.

How To:
-Start Kal
...