How to find Memory wallhack undetect.

Posts 115 of 20 · Page 1 of 2
How to find Memory wallhack undetect.
0045B6D4 75 11 JNZ SHORT crossfir.0045B6E7
0045B6D6 830D 18CD6D00 01 OR DWORD PTR DS:[6DCD18],1
0045B6DD B8 70CB6D00 MOV EAX,crossfir.006DCB70 <==== Pointer wallhack cf indonesia.
0045B6E2 E8 19A60600 CALL crossfir.004C5D00
0045B6E7 8B06 MOV EAX,DWORD PTR DS:[ESI]
0045B6E9 8B50 18 MOV EDX,DWORD PTR DS:[EAX+18]
0045B6EC 8D4C24 58 LEA ECX,DWORD PTR SS:[ESP+58]
0045B6F0 51 PUSH ECX
0045B6F1 57 PUSH EDI
0045B6F2 8BCE MOV ECX,ESI
0045B6F4 FFD2 CALL EDX
0045B6F6 84C0 TEST AL,AL
0045B6F8 75 0C JNZ SHORT crossfir.0045B706






006DCB70 <==== i know this is Pointer wallhack
now
how to find memory Wallhack in ollyDbg?
n wich memory wallhack ???


Help me Please
"Pointer Wallhack" ? Never heard anything like this...
Quote Originally Posted by rabir007 View Post
"Pointer Wallhack" ? Never heard anything like this...
NOT POINTER.

But Memory/Byte Wallhack.
How to find Memory Wallhack?
How to find Byte Wallhack?
Quote Originally Posted by rabir007 View Post
"Pointer Wallhack" ? Never heard anything like this...
sometime ago it was possible the fuck up the render styles z buffer so we were making memory wallhack but they started checking it
Quote Originally Posted by kmanev073 View Post
sometime ago it was possible the fuck up the render styles z buffer so we were making memory wallhack but they started checking it
I know it as "Memory Wallhack" i know it
but not "Pointer Wallhack"
I use it for undetected memory SeeGhost...
Quote Originally Posted by rabir007 View Post


I know it as "Memory Wallhack" i know it
but not "Pointer Wallhack"
I use it for undetected memory SeeGhost...
well i beleave it is not that hard to make these features... as i am able to make them in rez mod with no errors i think in memory it is still possible
Quote Originally Posted by kmanev073 View Post
well i beleave it is not that hard to make these features... as i am able to make them in rez mod with no errors i think in memory it is still possible
Hmm, i though on this one night...Also it is very easy, but
Can you send me the 2 Ninjatranslucent.ltb ?
One is the normal, and one for the wallhack...
I'm gonna byte patch after Cf loaded it...


---------- Post added at 03:30 PM ---------- Previous post was at 03:26 PM ----------

Quote Originally Posted by kmanev073 View Post
sometime ago it was possible the fuck up the render styles z buffer so we were making memory wallhack but they started checking it
Anyway, have you ever thought about editing HGWC.exe or XtrapVa.dll (IDK which check the Wallhack) and change the WH pointer to anything else, so it will check a wrong addy...
Quote Originally Posted by rabir007 View Post


Hmm, i though on this one night...Also it is very easy, but
Can you send me the 2 Ninjatranslucent.ltb ?
One is the normal, and one for the wallhack...
I'm gonna byte patch after Cf loaded it...


---------- Post added at 03:30 PM ---------- Previous post was at 03:26 PM ----------



Anyway, have you ever thought about editing HGWC.exe or XtrapVa.dll (IDK which check the Wallhack) and change the WH pointer to anything else, so it will check a wrong addy...
well i dont think they just scan 5 addys xDDD i think they receive some CRC for whole the class and then just get the current class CRC and combine them... anyway i will send you...
Quote Originally Posted by kmanev073 View Post
well i dont think they just scan 5 addys xDDD i think they receive some CRC for whole the class and then just get the current class CRC and combine them... anyway i will send you...
If they check CRC i think we couldn't be able the change the bytes next to it...
Also, i looked into it, and somewhy, i can't find the NinjaTranslucent.LTB in the memory... Nor Crossfire.exe, nor CShell.dll)
Maybe it just read some value, and then clear it up from memory...
Quote Originally Posted by rabir007 View Post


If they check CRC i think we couldn't be able the change the bytes next to it...
Also, i looked into it, and somewhy, i can't find the NinjaTranslucent.LTB in the memory... Nor Crossfire.exe, nor CShell.dll)
Maybe it just read some value, and then clear it up from memory...
idk :P accually it applies it to every model... i think i can change the loaded one but... now when i make wallhack people stay and done move... then i got DC from the room they do check the zbuffer maybe :/
Quote Originally Posted by kmanev073 View Post
idk :P accually it applies it to every model... i think i can change the loaded one but... now when i make wallhack people stay and done move... then i got DC from the room they do check the zbuffer maybe :/
Possible... But there must be some other way to make Mem WH...
how to find offset wallhack pointer wallhack +A4 = offset wallhack
Attach ur crossfire.exe and Binary Searcher
Code:
B8 ?? ?? ?? ?? E8 ?? ?? ?? ?? 8B 06 8B 50 18
You can see WallHackBase.
BASE = WallHackBase + 0xA4
*( BYTE*)(BASE + 0x68) = 8 ; // 4 OFF - 8 ON - 0 is DrawModel maybe
Hope work for you... GoodLuck Man
Quote Originally Posted by ***** View Post
Attach ur crossfire.exe and Binary Searcher
Code:
B8 ?? ?? ?? ?? E8 ?? ?? ?? ?? 8B 06 8B 50 18
You can see WallHackBase.
BASE = WallHackBase + 0xA4
*( BYTE*)(BASE + 0x68) = 8 ; // 4 OFF - 8 ON - 0 is DrawModel maybe
Hope work for you... GoodLuck Man
Creditz for that:
@-[I]fLuX
Posts 115 of 20 · Page 1 of 2
This thread is closed for replies.

Similar Threads

Tags for this Thread

None

Need help?