How to find Memory wallhack undetect.

0045B6D4 75 11 JNZ SHORT crossfir.0045B6E7
0045B6D6 830D 18CD6D00 01 OR DWORD PTR DS:[6DCD18],1
0045B6DD B8 70CB6D00 MOV EAX,crossfir.006DCB70 <==== Pointer wallhack cf indonesia.
0045B6E2 E8 19A60600 CALL crossfir.004C5D00
0045B6E7 8B06 MOV EAX,DWORD PTR DS:[ESI]
0045B6E9 8B50 18 MOV EDX,DWORD PTR DS:[EAX+18]
0045B6EC 8D4C24 58 LEA ECX,DWORD PTR SS:[ESP+58]
0045B6F0 51 PUSH ECX
0045B6F1 57 PUSH EDI
0045B6F2 8BCE MOV ECX,ESI
0045B6F4 FFD2 CALL EDX
0045B6F6 84C0 TEST AL,AL
0045B6F8 75 0C JNZ SHORT crossfir.0045B706

006DCB70 <==== i know this is Pointer wallhack
now
how to find memory Wallhack in ollyDbg?
n wich memory wallhack ???

Help me Please

"Pointer Wallhack" ? Never heard anything like this...

how to find offset wallhack pointer wallhack +A4 = offset wallhack

Just u need to search . !
http://www.mpgh.net/forum/242-crossf...k-address.html

Originally Posted by rabir007

"Pointer Wallhack" ? Never heard anything like this...

NOT POINTER.

But Memory/Byte Wallhack.
How to find Memory Wallhack?
How to find Byte Wallhack?

Attach ur crossfire.exe and Binary Searcher

Code:

B8 ?? ?? ?? ?? E8 ?? ?? ?? ?? 8B 06 8B 50 18

You can see WallHackBase.
BASE = WallHackBase + 0xA4
*( BYTE*)(BASE + 0x68) = 8 ; // 4 OFF - 8 ON - 0 is DrawModel maybe
Hope work for you... GoodLuck Man

Originally Posted by rabir007

"Pointer Wallhack" ? Never heard anything like this...

sometime ago it was possible the fuck up the render styles z buffer so we were making memory wallhack but they started checking it

Originally Posted by *****

Attach ur crossfire.exe and Binary Searcher

Code:

B8 ?? ?? ?? ?? E8 ?? ?? ?? ?? 8B 06 8B 50 18

You can see WallHackBase.
BASE = WallHackBase + 0xA4
*( BYTE*)(BASE + 0x68) = 8 ; // 4 OFF - 8 ON - 0 is DrawModel maybe
Hope work for you... GoodLuck Man

Creditz for that:
@-[I]fLuX

Originally Posted by kmanev073

sometime ago it was possible the fuck up the render styles z buffer so we were making memory wallhack but they started checking it

I know it as "Memory Wallhack" i know it
but not "Pointer Wallhack"
I use it for undetected memory SeeGhost...

Originally Posted by rabir007

I know it as "Memory Wallhack" i know it
but not "Pointer Wallhack"
I use it for undetected memory SeeGhost...

well i beleave it is not that hard to make these features... as i am able to make them in rez mod with no errors i think in memory it is still possible

Originally Posted by kmanev073

well i beleave it is not that hard to make these features... as i am able to make them in rez mod with no errors i think in memory it is still possible

Hmm, i though on this one night...Also it is very easy, but
Can you send me the 2 Ninjatranslucent.ltb ?
One is the normal, and one for the wallhack...
I'm gonna byte patch after Cf loaded it...

---------- Post added at 03:30 PM ---------- Previous post was at 03:26 PM ----------

Originally Posted by kmanev073

sometime ago it was possible the fuck up the render styles z buffer so we were making memory wallhack but they started checking it

Anyway, have you ever thought about editing HGWC.exe or XtrapVa.dll (IDK which check the Wallhack) and change the WH pointer to anything else, so it will check a wrong addy...

Originally Posted by rabir007

Hmm, i though on this one night...Also it is very easy, but
Can you send me the 2 Ninjatranslucent.ltb ?
One is the normal, and one for the wallhack...
I'm gonna byte patch after Cf loaded it...

---------- Post added at 03:30 PM ---------- Previous post was at 03:26 PM ----------

Anyway, have you ever thought about editing HGWC.exe or XtrapVa.dll (IDK which check the Wallhack) and change the WH pointer to anything else, so it will check a wrong addy...

well i dont think they just scan 5 addys xDDD i think they receive some CRC for whole the class and then just get the current class CRC and combine them... anyway i will send you...

Originally Posted by kmanev073

well i dont think they just scan 5 addys xDDD i think they receive some CRC for whole the class and then just get the current class CRC and combine them... anyway i will send you...

If they check CRC i think we couldn't be able the change the bytes next to it...
Also, i looked into it, and somewhy, i can't find the NinjaTranslucent.LTB in the memory... Nor Crossfire.exe, nor CShell.dll)
Maybe it just read some value, and then clear it up from memory...

Originally Posted by rabir007

If they check CRC i think we couldn't be able the change the bytes next to it...
Also, i looked into it, and somewhy, i can't find the NinjaTranslucent.LTB in the memory... Nor Crossfire.exe, nor CShell.dll)
Maybe it just read some value, and then clear it up from memory...

idk :P accually it applies it to every model... i think i can change the loaded one but... now when i make wallhack people stay and done move... then i got DC from the room they do check the zbuffer maybe :/

Originally Posted by kmanev073

idk :P accually it applies it to every model... i think i can change the loaded one but... now when i make wallhack people stay and done move... then i got DC from the room they do check the zbuffer maybe :/

Possible... But there must be some other way to make Mem WH...

How to find Memory wallhack undetect.

Post a Reply

Similar Threads

Tags for this Thread