SHOOT THOUGH WALL

Posts 16–30 of 40 · Page 2 of 3
@A$IAN is right u need the pointer first of all.
wallmgr??? 0xA65ED4
if((*(DWORD*)((*(DWORD*)(CShell+wallmgr))+(4*i))) != NULL)
*(bool*)((*(DWORD*)((CShell)+wallmgr))+(i*0x4F4)+0 x4E8) = true;
*(bool*)((*(DWORD*)((CShell)+wallmgr))+(i*0x4F4)+0 x4EC) = true;
*(bool*)((*(DWORD*)((CShell)+wallmgr))+(i*0x4F4)+0 x4F0) = true;
}
}
}
here finish
Code:
if(stw==1)
{
		DWORD Ptr = *(DWORD*)(CShell+0xA65ED4); 
		if(Ptr!=NULL)
		{
		for(int i = 0;i<64;i++)
		{
		*(bool*)(Ptr+(i*0x4F4)+0x1BC) = 1;
		*(bool*)(Ptr+(i*0x4F4)+0x1C0) = 1;
		*(bool*)(Ptr+(i*0x4F4)+0x1C8) = 1;
		}
		}
}
Quote Originally Posted by [G]a[M]e[R] View Post
here finish
Code:
if(stw==1)
{
		DWORD Ptr = *(DWORD*)(CShell+0xA65ED4); 
		if(Ptr!=NULL)
		{
		for(int i = 0;i<64;i++)
		{
		*(bool*)(Ptr+(i*0x4F4)+0x1BC) = 1;
		*(bool*)(Ptr+(i*0x4F4)+0x1C0) = 1;
		*(bool*)(Ptr+(i*0x4F4)+0x1C8) = 1;
		}
		}
}
WallMgr Pointer Not Right . ! , And Please Stop Sharing to PUBLIC , we know that u code hacks
Quote Originally Posted by BlackLite View Post
WallMgr Pointer Not Right . ! , And Please Stop Sharing to PUBLIC , we know that u code hacks
you say wroing ? lol why this working by me? xD
Quote Originally Posted by [G]a[M]e[R] View Post
you say wroing ? lol why this working by me? xD

Ahh.. Anyway , Good Job i was on phone , so i didn't check ..
Quote Originally Posted by BlackLite View Post

Ahh.. Anyway , Good Job i was on phone , so i didn't check ..
xD ok
Quote Originally Posted by [G]a[M]e[R] View Post
here finish
Code:
if(stw==1)
{
		DWORD Ptr = *(DWORD*)(CShell+0xA65ED4); 
		if(Ptr!=NULL)
		{
		for(int i = 0;i<64;i++)
		{
		*(bool*)(Ptr+(i*0x4F4)+0x1BC) = 1;
		*(bool*)(Ptr+(i*0x4F4)+0x1C0) = 1;
		*(bool*)(Ptr+(i*0x4F4)+0x1C8) = 1;
		}
		}
}
OMFG, do you want a mem leak xD?
Jezus.. cheak your code... Do you even know what you are changing??? I don't mean that you can shoot trough walls... But I mean what in the memory.
GOT IT, thanks everyone.... now just need to find out how to see the people to kill,lol
Hmmz:

Code:
1012E342    50              PUSH EAX
1012E343    E8 880E1800     CALL 102AF1D0
1012E348    83C4 08         ADD ESP,8
1012E34B    3BC3            CMP EAX,EBX
1012E34D    74 23           JE SHORT 1012E372
1012E34F    8B48 04         MOV ECX,DWORD PTR DS:[EAX+4]
1012E352    8B51 04         MOV EDX,DWORD PTR DS:[ECX+4]
1012E355    A1 D45EA610     MOV EAX,DWORD PTR DS:[10A65ED4]
1012E35A    8B4A 04         MOV ECX,DWORD PTR DS:[EDX+4]
1012E35D    8D9406 C7030000 LEA EDX,DWORD PTR DS:[ESI+EAX+3C7]
1012E364    8A01            MOV AL,BYTE PTR DS:[ECX]
1012E366    8802            MOV BYTE PTR DS:[EDX],AL
1012E368    83C1 01         ADD ECX,1
1012E36B    83C2 01         ADD EDX,1
1012E36E    3AC3            CMP AL,BL
1012E370  ^ 75 F2           JNZ SHORT 1012E364
1012E372    57              PUSH EDI
1012E373    8D4C24 2C       LEA ECX,DWORD PTR SS:[ESP+2C]
1012E377    E8 A41FFFFF     CALL 10120320
1012E37C    8B08            MOV ECX,DWORD PTR DS:[EAX]
1012E37E    68 70082F10     PUSH 102F0870                                                                                              ; ASCII "EdgeShotEnabled"
1012E383    51              PUSH ECX
1012E384    E8 470E1800     CALL 102AF1D0
1012E389    83C4 08         ADD ESP,8
1012E38C    3BC3            CMP EAX,EBX
1012E38E    74 1C           JE SHORT 1012E3AC
1012E390    8B50 04         MOV EDX,DWORD PTR DS:[EAX+4]
1012E393    8B42 04         MOV EAX,DWORD PTR DS:[EDX+4]
1012E396    8B40 04         MOV EAX,DWORD PTR DS:[EAX+4]
1012E399    50              PUSH EAX
1012E39A    FFD5            CALL EBP
1012E39C    8B0D D45EA610   MOV ECX,DWORD PTR DS:[10A65ED4]
1012E3A2    83C4 04         ADD ESP,4
1012E3A5    89840E E8040000 MOV DWORD PTR DS:[ESI+ECX+4E8],EAX
1012E3AC    57              PUSH EDI
1012E3AD    8D4C24 2C       LEA ECX,DWORD PTR SS:[ESP+2C]
1012E3B1    E8 6A1FFFFF     CALL 10120320
1012E3B6    8B10            MOV EDX,DWORD PTR DS:[EAX]
1012E3B8    68 60082F10     PUSH 102F0860                                                                                              ; ASCII "WallShotEnabled"
1012E3BD    52              PUSH EDX                                                                                                   ; ntdll.DbgUiRemoteBreakin
1012E3BE    E8 0D0E1800     CALL 102AF1D0
1012E3C3    83C4 08         ADD ESP,8
1012E3C6    3BC3            CMP EAX,EBX
1012E3C8    74 1C           JE SHORT 1012E3E6
1012E3CA    8B40 04         MOV EAX,DWORD PTR DS:[EAX+4]
1012E3CD    8B48 04         MOV ECX,DWORD PTR DS:[EAX+4]
1012E3D0    8B41 04         MOV EAX,DWORD PTR DS:[ECX+4]
1012E3D3    50              PUSH EAX
1012E3D4    FFD5            CALL EBP
1012E3D6    8B15 D45EA610   MOV EDX,DWORD PTR DS:[10A65ED4]
1012E3DC    83C4 04         ADD ESP,4
1012E3DF    898416 EC040000 MOV DWORD PTR DS:[ESI+EDX+4EC],EAX
1012E3E6    57              PUSH EDI
1012E3E7    8D4C24 2C       LEA ECX,DWORD PTR SS:[ESP+2C]
1012E3EB    E8 301FFFFF     CALL 10120320
1012E3F0    8B00            MOV EAX,DWORD PTR DS:[EAX]
1012E3F2    68 48082F10     PUSH 102F0848                                                                                              ; ASCII "PerfectWallShotEnabled"
1012E3F7    50              PUSH EAX
1012E3F8    E8 D30D1800     CALL 102AF1D0
1012E3FD    83C4 08         ADD ESP,8
1012E400    3BC3            CMP EAX,EBX
1012E402    74 1C           JE SHORT 1012E420
1012E404    8B48 04         MOV ECX,DWORD PTR DS:[EAX+4]
1012E407    8B51 04         MOV EDX,DWORD PTR DS:[ECX+4]
1012E40A    8B42 04         MOV EAX,DWORD PTR DS:[EDX+4]
1012E40D    50              PUSH EAX
1012E40E    FFD5            CALL EBP
1012E410    8B0D D45EA610   MOV ECX,DWORD PTR DS:[10A65ED4]
1012E416    83C4 04         ADD ESP,4
1012E419    89840E F0040000 MOV DWORD PTR DS:[ESI+ECX+4F0],EAX
1012E420    8305 D05EA610 0>ADD DWORD PTR DS:[10A65ED0],1
1012E427    83C7 01         ADD EDI,1
1012E42A  ^ E9 81F9FFFF     JMP 1012DDB0
1012E42F    8D5424 14       LEA EDX,DWORD PTR SS:[ESP+14]
I did't test it, but I have:

Code:
/*Useless for you, becouse you don't have my wall class :P*/
WallPointer->EdgeShotEnabled = true;
WallPointer->WallShotEnabled = true;
WallPointer->PerfectWallShotEnabled = true;
EdgeShotEnabled is at 0x3C7
WallShotEnabled is at 0x4E8
PerfectWallShotEnabled is at 0x4EC

Were did you get 0x1BC etc?
Quote Originally Posted by Brimir View Post
Hmmz:

Code:
1012E342    50              PUSH EAX
1012E343    E8 880E1800     CALL 102AF1D0
1012E348    83C4 08         ADD ESP,8
1012E34B    3BC3            CMP EAX,EBX
1012E34D    74 23           JE SHORT 1012E372
1012E34F    8B48 04         MOV ECX,DWORD PTR DS:[EAX+4]
1012E352    8B51 04         MOV EDX,DWORD PTR DS:[ECX+4]
1012E355    A1 D45EA610     MOV EAX,DWORD PTR DS:[10A65ED4]
1012E35A    8B4A 04         MOV ECX,DWORD PTR DS:[EDX+4]
1012E35D    8D9406 C7030000 LEA EDX,DWORD PTR DS:[ESI+EAX+3C7]
1012E364    8A01            MOV AL,BYTE PTR DS:[ECX]
1012E366    8802            MOV BYTE PTR DS:[EDX],AL
1012E368    83C1 01         ADD ECX,1
1012E36B    83C2 01         ADD EDX,1
1012E36E    3AC3            CMP AL,BL
1012E370  ^ 75 F2           JNZ SHORT 1012E364
1012E372    57              PUSH EDI
1012E373    8D4C24 2C       LEA ECX,DWORD PTR SS:[ESP+2C]
1012E377    E8 A41FFFFF     CALL 10120320
1012E37C    8B08            MOV ECX,DWORD PTR DS:[EAX]
1012E37E    68 70082F10     PUSH 102F0870                                                                                              ; ASCII "EdgeShotEnabled"
1012E383    51              PUSH ECX
1012E384    E8 470E1800     CALL 102AF1D0
1012E389    83C4 08         ADD ESP,8
1012E38C    3BC3            CMP EAX,EBX
1012E38E    74 1C           JE SHORT 1012E3AC
1012E390    8B50 04         MOV EDX,DWORD PTR DS:[EAX+4]
1012E393    8B42 04         MOV EAX,DWORD PTR DS:[EDX+4]
1012E396    8B40 04         MOV EAX,DWORD PTR DS:[EAX+4]
1012E399    50              PUSH EAX
1012E39A    FFD5            CALL EBP
1012E39C    8B0D D45EA610   MOV ECX,DWORD PTR DS:[10A65ED4]
1012E3A2    83C4 04         ADD ESP,4
1012E3A5    89840E E8040000 MOV DWORD PTR DS:[ESI+ECX+4E8],EAX
1012E3AC    57              PUSH EDI
1012E3AD    8D4C24 2C       LEA ECX,DWORD PTR SS:[ESP+2C]
1012E3B1    E8 6A1FFFFF     CALL 10120320
1012E3B6    8B10            MOV EDX,DWORD PTR DS:[EAX]
1012E3B8    68 60082F10     PUSH 102F0860                                                                                              ; ASCII "WallShotEnabled"
1012E3BD    52              PUSH EDX                                                                                                   ; ntdll.DbgUiRemoteBreakin
1012E3BE    E8 0D0E1800     CALL 102AF1D0
1012E3C3    83C4 08         ADD ESP,8
1012E3C6    3BC3            CMP EAX,EBX
1012E3C8    74 1C           JE SHORT 1012E3E6
1012E3CA    8B40 04         MOV EAX,DWORD PTR DS:[EAX+4]
1012E3CD    8B48 04         MOV ECX,DWORD PTR DS:[EAX+4]
1012E3D0    8B41 04         MOV EAX,DWORD PTR DS:[ECX+4]
1012E3D3    50              PUSH EAX
1012E3D4    FFD5            CALL EBP
1012E3D6    8B15 D45EA610   MOV EDX,DWORD PTR DS:[10A65ED4]
1012E3DC    83C4 04         ADD ESP,4
1012E3DF    898416 EC040000 MOV DWORD PTR DS:[ESI+EDX+4EC],EAX
1012E3E6    57              PUSH EDI
1012E3E7    8D4C24 2C       LEA ECX,DWORD PTR SS:[ESP+2C]
1012E3EB    E8 301FFFFF     CALL 10120320
1012E3F0    8B00            MOV EAX,DWORD PTR DS:[EAX]
1012E3F2    68 48082F10     PUSH 102F0848                                                                                              ; ASCII "PerfectWallShotEnabled"
1012E3F7    50              PUSH EAX
1012E3F8    E8 D30D1800     CALL 102AF1D0
1012E3FD    83C4 08         ADD ESP,8
1012E400    3BC3            CMP EAX,EBX
1012E402    74 1C           JE SHORT 1012E420
1012E404    8B48 04         MOV ECX,DWORD PTR DS:[EAX+4]
1012E407    8B51 04         MOV EDX,DWORD PTR DS:[ECX+4]
1012E40A    8B42 04         MOV EAX,DWORD PTR DS:[EDX+4]
1012E40D    50              PUSH EAX
1012E40E    FFD5            CALL EBP
1012E410    8B0D D45EA610   MOV ECX,DWORD PTR DS:[10A65ED4]
1012E416    83C4 04         ADD ESP,4
1012E419    89840E F0040000 MOV DWORD PTR DS:[ESI+ECX+4F0],EAX
1012E420    8305 D05EA610 0>ADD DWORD PTR DS:[10A65ED0],1
1012E427    83C7 01         ADD EDI,1
1012E42A  ^ E9 81F9FFFF     JMP 1012DDB0
1012E42F    8D5424 14       LEA EDX,DWORD PTR SS:[ESP+14]
I did't test it, but I have:

Code:
/*Useless for you, becouse you don't have my wall class :P*/
WallPointer->EdgeShotEnabled = true;
WallPointer->WallShotEnabled = true;
WallPointer->PerfectWallShotEnabled = true;
EdgeShotEnabled is at 0x3C7
WallShotEnabled is at 0x4E8
PerfectWallShotEnabled is at 0x4EC

Were did you get 0x1BC etc?
0x1BC is outdated. And you are wrong
It is:
Code:
EdgeShotEnabled is at 0x4E8
WallShotEnabled is at 0x4EC
PerfectWallShotEnabled is at 0x4F0
Quote Originally Posted by Brimir View Post
Hmmz:

Code:
1012E342    50              PUSH EAX
1012E343    E8 880E1800     CALL 102AF1D0
1012E348    83C4 08         ADD ESP,8
1012E34B    3BC3            CMP EAX,EBX
1012E34D    74 23           JE SHORT 1012E372
1012E34F    8B48 04         MOV ECX,DWORD PTR DS:[EAX+4]
1012E352    8B51 04         MOV EDX,DWORD PTR DS:[ECX+4]
1012E355    A1 D45EA610     MOV EAX,DWORD PTR DS:[10A65ED4]
1012E35A    8B4A 04         MOV ECX,DWORD PTR DS:[EDX+4]
1012E35D    8D9406 C7030000 LEA EDX,DWORD PTR DS:[ESI+EAX+3C7]
1012E364    8A01            MOV AL,BYTE PTR DS:[ECX]
1012E366    8802            MOV BYTE PTR DS:[EDX],AL
1012E368    83C1 01         ADD ECX,1
1012E36B    83C2 01         ADD EDX,1
1012E36E    3AC3            CMP AL,BL
1012E370  ^ 75 F2           JNZ SHORT 1012E364
1012E372    57              PUSH EDI
1012E373    8D4C24 2C       LEA ECX,DWORD PTR SS:[ESP+2C]
1012E377    E8 A41FFFFF     CALL 10120320
1012E37C    8B08            MOV ECX,DWORD PTR DS:[EAX]
1012E37E    68 70082F10     PUSH 102F0870                                                                                              ; ASCII "EdgeShotEnabled"
1012E383    51              PUSH ECX
1012E384    E8 470E1800     CALL 102AF1D0
1012E389    83C4 08         ADD ESP,8
1012E38C    3BC3            CMP EAX,EBX
1012E38E    74 1C           JE SHORT 1012E3AC
1012E390    8B50 04         MOV EDX,DWORD PTR DS:[EAX+4]
1012E393    8B42 04         MOV EAX,DWORD PTR DS:[EDX+4]
1012E396    8B40 04         MOV EAX,DWORD PTR DS:[EAX+4]
1012E399    50              PUSH EAX
1012E39A    FFD5            CALL EBP
1012E39C    8B0D D45EA610   MOV ECX,DWORD PTR DS:[10A65ED4]
1012E3A2    83C4 04         ADD ESP,4
1012E3A5    89840E E8040000 MOV DWORD PTR DS:[ESI+ECX+4E8],EAX
1012E3AC    57              PUSH EDI
1012E3AD    8D4C24 2C       LEA ECX,DWORD PTR SS:[ESP+2C]
1012E3B1    E8 6A1FFFFF     CALL 10120320
1012E3B6    8B10            MOV EDX,DWORD PTR DS:[EAX]
1012E3B8    68 60082F10     PUSH 102F0860                                                                                              ; ASCII "WallShotEnabled"
1012E3BD    52              PUSH EDX                                                                                                   ; ntdll.DbgUiRemoteBreakin
1012E3BE    E8 0D0E1800     CALL 102AF1D0
1012E3C3    83C4 08         ADD ESP,8
1012E3C6    3BC3            CMP EAX,EBX
1012E3C8    74 1C           JE SHORT 1012E3E6
1012E3CA    8B40 04         MOV EAX,DWORD PTR DS:[EAX+4]
1012E3CD    8B48 04         MOV ECX,DWORD PTR DS:[EAX+4]
1012E3D0    8B41 04         MOV EAX,DWORD PTR DS:[ECX+4]
1012E3D3    50              PUSH EAX
1012E3D4    FFD5            CALL EBP
1012E3D6    8B15 D45EA610   MOV EDX,DWORD PTR DS:[10A65ED4]
1012E3DC    83C4 04         ADD ESP,4
1012E3DF    898416 EC040000 MOV DWORD PTR DS:[ESI+EDX+4EC],EAX
1012E3E6    57              PUSH EDI
1012E3E7    8D4C24 2C       LEA ECX,DWORD PTR SS:[ESP+2C]
1012E3EB    E8 301FFFFF     CALL 10120320
1012E3F0    8B00            MOV EAX,DWORD PTR DS:[EAX]
1012E3F2    68 48082F10     PUSH 102F0848                                                                                              ; ASCII "PerfectWallShotEnabled"
1012E3F7    50              PUSH EAX
1012E3F8    E8 D30D1800     CALL 102AF1D0
1012E3FD    83C4 08         ADD ESP,8
1012E400    3BC3            CMP EAX,EBX
1012E402    74 1C           JE SHORT 1012E420
1012E404    8B48 04         MOV ECX,DWORD PTR DS:[EAX+4]
1012E407    8B51 04         MOV EDX,DWORD PTR DS:[ECX+4]
1012E40A    8B42 04         MOV EAX,DWORD PTR DS:[EDX+4]
1012E40D    50              PUSH EAX
1012E40E    FFD5            CALL EBP
1012E410    8B0D D45EA610   MOV ECX,DWORD PTR DS:[10A65ED4]
1012E416    83C4 04         ADD ESP,4
1012E419    89840E F0040000 MOV DWORD PTR DS:[ESI+ECX+4F0],EAX
1012E420    8305 D05EA610 0>ADD DWORD PTR DS:[10A65ED0],1
1012E427    83C7 01         ADD EDI,1
1012E42A  ^ E9 81F9FFFF     JMP 1012DDB0
1012E42F    8D5424 14       LEA EDX,DWORD PTR SS:[ESP+14]
I did't test it, but I have:

Code:
/*Useless for you, becouse you don't have my wall class :P*/
WallPointer->EdgeShotEnabled = true;
WallPointer->WallShotEnabled = true;
WallPointer->PerfectWallShotEnabled = true;
EdgeShotEnabled is at 0x3C7
WallShotEnabled is at 0x4E8
PerfectWallShotEnabled is at 0x4EC

Were did you get 0x1BC etc?

0x3C7 if wrong its0x4F0
Quote Originally Posted by JusCaus View Post
0x3C7 if wrong its0x4F0
Read what I wrote
w8, indeed. You are ride.

Code:
1012E3B6    8B10            MOV EDX,DWORD PTR DS:[EAX]
1012E3B8    68 60082F10     PUSH 102F0860                                                                                              ; ASCII "WallShotEnabled"
1012E3BD    52              PUSH EDX                                                                                                   ; ntdll.DbgUiRemoteBreakin
1012E3BE    E8 0D0E1800     CALL 102AF1D0
1012E3C3    83C4 08         ADD ESP,8
1012E3C6    3BC3            CMP EAX,EBX
1012E3C8    74 1C           JE SHORT 1012E3E6
1012E3CA    8B40 04         MOV EAX,DWORD PTR DS:[EAX+4]
1012E3CD    8B48 04         MOV ECX,DWORD PTR DS:[EAX+4]
1012E3D0    8B41 04         MOV EAX,DWORD PTR DS:[ECX+4]
1012E3D3    50              PUSH EAX
1012E3D4    FFD5            CALL NEAR EBP
1012E3D6    8B15 D45EA610   MOV EDX,DWORD PTR DS:[10A65ED4]
1012E3DC    83C4 04         ADD ESP,4
1012E3DF    898416 EC040000 MOV DWORD PTR DS:[ESI+EDX+4EC],EAX
1012E3E6    57              PUSH EDI
1012E3E7    8D4C24 2C       LEA ECX,DWORD PTR SS:[ESP+2C]
1012E3EB    E8 301FFFFF     CALL 10120320
This is one "Command".
ohhhhh i have forgot make a update sry xD i releas soon xD
Posts 16–30 of 40 · Page 2 of 3

Post a Reply

Similar Threads

Tags for this Thread

None

Talk with us