PDA

View Full Version : Hints on hacking COD5 (v1.0.1017)


faldo
20th November 2008, 18:14
It's been ages since i last posted here... guess work does get the best of you in the end :P

Anyways, i havn't been really active in the public hacking scene for some time even though i've hacked quite a lot of games. I fell in love with COD4 but only played it at LAN-gettogethers and now i've bought COD5 and love playing/hacking it.
Instead of releasing a public hack i'm just going to reveal two methods on how to enable WallHack and TeamSwitch. The methods i'm about to explain are in their "raw format", if you alter ANY adress in the 0x400000 to 0x700000 adress-range, PB will kick you for bad memory (but not ban you). Having that said, there are many ways to bypass PB that i will not go into here.

Wallhack:
I can't take the credit for finding the WallHack function itself, i found it here on MPC for the beta and replicated it on to v1.0.1017. It's actually pretty simple (if you know what you're doing), look up the adress: 0x6A6843 and change the EDX-register to 0x12. You'll have to freeze the register useing one of many methods since it is allways being written to.
This wallhack method is pretty primitive and is not as fancy as wrappers or other D3D-hacks, but it does the job very well.

TeamSwitch:
In another thread, BlackDove said that teams are held by the server... that's not at all the case. Teams are acctually hardcoded into several places in the gamecode depending on what map and mode you're running.
The key-adress to teams is 0x46E6D5, this adress defines what team you're on and you'll find the "team-address" in its ESI-register + the offset ofcourse. The team-function will also doublecheck your teamnumber with the server every few milliseconds, because of this check you'll need to freeze the adress holding the teamnumber. I will not reveal the addresses holding the teamnumer for security reasons *waves to EB* but if you know how to use a dissasembler you can easely see what the above adress writes to.
The TeamSwitch combined with the Wallhack above is just perfect, since you sometimes have a hard time knowing if you're shooting through a wall useing the wallhack, the teamswitch helps out, only displaying the nametag of your oponent when you're line of sight, that way you can never be accused of shooting though walls xD
Other than that, the teamswitch will reveal your oponents on the minimap aswell (unless you're playing hardcore).

That's all for now folks, tata!

BlackDove
20th November 2008, 18:39
That teamswitch is a valid patch location, but the possibility of editing something in memory so that you appear to be on the other team on other peoples' computers is an entirely different story. And this is what the other person was describing.

faldo
20th November 2008, 19:07
Ok, well i couldn't read your mind mate, heh. There was only one way i could interpret "Teams are controlled server-side" ;)
But you're absolutly correct, what other ppl see on their screen is controlled by the server and their client.

gkarmas@gmail.c
20th November 2008, 19:14
well that seems pretty. i would love to try it on my own but not enough skills on that computing part and this post is not completed guide. just an "idea" :)
i already cheated the rank-xp with cheat engine but i dont really know how to search and change an address.

faldo
20th November 2008, 19:21
well that seems pretty. i would love to try it on my own but not enough skills on that computing part and this post is not completed guide. just an "idea" :)
i already cheated the rank-xp with cheat engine but i dont really know how to search and change an address.
This wasn't intended as a guide, just a hint for ppl that already knows how to hack but don't wanna spend the time searching. Cheatengine is a great tool, but i'm affraid you'll need a bit more knowlege of ASM and OllyDBG in order to use these hints :)

gkarmas@gmail.c
20th November 2008, 19:32
weel i ve found something. on ollydbg found the 0046E6D5 address , double-click and returns me "MOV DWORD PTR DS:[ESI+2C],EDX"