unlimited buffs

[KuRIoS]

I am also the same person who discovered the Max Regeneration HP exploit in GW (now patched)

+++++++++++Unlimited Buff Time (BH Exclusive)++++++++++++

Things you need:

-- Tsearch 1.6b (http://www.xcheater.com/download.asp...tsearch_16.zip)

This is the Memory Editor that you shall use against WoW

-- A Brain
-- Some Tsearch skills.

Optional:

--Cheat Engine
Some of my guildies had problems with Tsearch in that the unknown values were too ginormous and crashed their system. Using Cheat Engine can cut down the searches. If you have bad lag while using Tsearch, use this instead.

(Author's Note : Memory Editors are extremely detectable. Use at your own risk!)



+++++++++++++++++++++++++++++

Unfortunately we cannot create a video as we are banned, so please don't even ask. However, we are currently working on a video in an emu server. But we all know how different real live servers are versus emu servers..

1) First of all, this will be very lag-intensive. Turn off whatever programs that bites into your memory. Turn your graphic settings lowest. I have a 4 GB memory and it still frustrates me with the lag. If possible (optional) get a memory extender or optimizer.


Possibilities:

http://www.dmk.ca/index2.html
(I used a crack for this.)

OR FREE

http://www.snapfiles.com/get/foptimizer.html


Use Ctrl+Shift+Esc. End all processes that isn't System excluding explorer.exe and WoW.exe.



Little Timmy: But how will I know what to do next???

Print the guide out or write it down.

(This is the part where I sympathize for those porn-watchers who download spyware into their comp daily.)

NOTE: I have not instructed you to take anything against Warden. This means you are detectable. But the benefits are worth it


2) Once everything is cleared, log into WoW to whatever you want to use this exploit on.

You can log in anywhere, log in normally. (Realize once you tone down the graphic settings you have to reset anyways)

3) Now, before I continue, what my guild and I did was have friends buff us. For example, my druid friend would innervate me. However, this can be done with self-buffs anything with a timer actually, be it 1 sec- 30 min going from Sprint to Scroll of Agility. Think about the possibilities!
You can keep that Berserking forever! You can keep that Rapid Fire forever!

Now, I know this will come up inevitably:

Can you unlimit buff pets?

Answer: No, no you cannot. Somehow the method does not work with pets.

-- Have your friend log in.

STOP: Before you do anything, set WoW into windowed mode for maximum control. Trust me you do not want to be Alt-Tabbing out of maximizing mode.

Open up Tsearch.

4) Use the Arrow thing on the top left of tsearch and scroll down to the process: WoW.exe. This will designate all searches toward WoW.exe.

5) Go back into WoW and have your friend buff you (in this case my friend buffed me with Innervate)

6) Quickly, I went into T-search. I searched for "Unknown Value"

7) A BUNCH of addresses came up. A ginormous load of lag also came up. (NOTE : Lag is a part of this. The reason I wanted you to minimize lag is for 2 reasons: control & not crashing/dcing. However, I do want you to keep lag high as you can without crashing. More times than not, the timer for the spell will be a bit extended due to your lag and that split second may be the time you click the last search and get the value you need.

As long as the buff is on, keep searching Value has not changed. Keep on doing this. This will shorten the gigantic list of spells a little bit. The more you do it the shorter it gets.

9) When it wears off, keep searching 'has changed' this will shorten it even more.

10) Have a friend cast the same buff on you again. Searched has changed. Then as long as it is on you, search NOT CHANGED.

(NOTE: It is ESSENTIAL that your friend does not cast anything else.

For e.g.

1. Innervate
2. Unknown
3. Hasn't changed
4. Hasn't changed
5. Hasn't changed
6. Innervate wears off
7. Has changed
8. Has changed
9. Has changed
----Up to now, the user is doing it correctly
10. Friend casts Rejuvenate
-----> DO NOT DO THIS. You will have to log out to restart if you do this! The values will entirely shift if you do this. I REPEAT DO NOT DO THIS


Rinse and repeat this method until your list is truncated so much that you only get a few 100.

11. From here, the task gets even more tedious. Start from the first one, and freeze it. (Click the box and a blue smiley should appear). Go into WoW and wait until spell reaches its limit. If done correctly, it should not and keep last forever. Here is how it should look:

Rejuvenate - 3
Rejuvenate - 2
Rejuvenate - 1
Rejuvenate - 0
Rejuvenate - 0

Although it hits 0 it will not disappear and the spell is still active.

If it disappears, then unfreeze and freeze the 2nd one. Rinse and repeat until you find it.

Sound easy? Easier said than done. Realize that with each freeze you run the risk of crashing yourself due to some error in the memory address when you freeze. If you crash, the addresses may/may not reset. And you will have to restart all over again. So unless you have a patient friend when doing this the first time, you should self-buff.

12. Once you have found the right address, do not rejoice yet. Right down the address (should be a combonation of numbers and letters). Next time you need it, simply punch in the address and freeze.

Note: Each address is different for each spell and each player that casts it.

For e.g.

Billy casts on Bob ' Rejuvenation ' - Address: x <- variable
Billy casts on Bob ' Innervate ' - Address : y

They will have different addresses.

Billy casts on Bob ' Rejuvenation ' - Address: x <- variable
Joe casts on Bob ' Rejuvenation ' - Address : z
Joe casts on Bob 'Innervate ' - Address : a

You see how they differ? The cast must be from the same person consistently.

Yes, this is one of the exploits where you need friends. That requires going outside. Don't cry! Just kidding.

+++++++++++++++++++++++++++===

That is the end of the guide. Now, to understand and maximize this, you need to understand this.

A memory address symbolizes the spell's activation. When the spell is active, the memory address pops up. When it is not, it disappears. You want to seek this address and when you find it, you want to freeze it. Freeze it will make it unchangeable, undisappearable - that means the spell is always active.

Now what's up with the change not change?

Well, at the beginning you have no idea what address it is so you search Unknown.

When the innervate is cast, you want to put has changed caues the address appeared.

When it weawrs out, you put has not changed because it disappeared.

NOTE : Magnifying glass = search button



Guildie quote:

Quote: The way that my friend described would be to look for the memory address that contains a variable which consequently controls the buff you have. When Rejuvenate is active, that address will appear. The advantage to this would be that you can apply it at any time by loading that value back into that memory address and locking it providing that the same person casts it

Another quote:

Quote:
When you get a health regen, WoW.exe specifies in a variable the length of time the buff is designated to last. Ergo, you want to scan every few seconds for memory values that changes when you have the buff. When you find that memory address, you can lock it's value so the program can't change it. I assume that WoW.exe runs a loop that kills the buff when it detects that the buff time equals zero. Locking the memory value results in the regen time never reaching zero and gw.exe never running the loop to remove the buff.

+++++++++++++++++++++++++++++

FAQ : Wtf man??? What benefits does this make??? So I can have Rejuvenate on so what?
A : You, sir, are a retard. Have you never heard of Will of the Forsaken? Imagine that? Better yet, imagine boatloads of buffs just stacked upon you neverending, unlifting! Think about the advantages of constantly being healed. Think of a constant Berserking + Rapid Fire. Think about the DPS.

What's the point of having this if I get banned anyways?

A : I realize that I have stressed that you will get banned but that is because I don't want people coming to me or EoN goign wtf i get banned!!!! No, no, I don't want that.

How can I contact you in game for help?

A : You can't. I'm banned. You can contact me on AIM on 'mdn'


Are there any other exploits you know about?

A : Yes, there are many other exploits. If you want to discover your own, look at the Guildies' quotes for the logic behind this exploit.

Does this work on emu servers?

A : Yes

Can I use this in pvp?

A : Yes but I guarantee you that the chances of you getting banned will be higher.

Why don't dis work?

A: Ask me on AIM or reread this. If you still can't figure it out, please walk into the middle of the highway.

Does this work on DoT? Cause if it did, that would be sweet.

A: No it will not. There is no possible way to do this. Unless your opponent is stupid enough to do this process on the DoT having it last forever upon him.

+++++++++++++++++++++++++++++++++++=

Final Words:

Theories: If there was some kind of macro that could self buff and search extremely fast, those instant casts could be unlimited. Usually instant casts have this short range of casting time. If you slo mo-ed it you would see it casting extremely slowly. Now, if there was a spell that would cause damage or healing before the cast was completed, we could potentially use the macro to keep it unlimited. Of course, this would have complications. For e.g. when the target is dead, you will crash as you have nothing to attack. I do not know the time between each dmg if that happened, you would most likely crash. I have yet to try this as I do have a macro that does the searching for me.

Cooldown times are very similar to casting times. In theory, you could use the same technique but instead of preventing it from hitting 0 you could freeze the 0 mark and have it never not cooldown <- double negatives implied. So theoretically, you could keep having Cold Blood on.

This is the exact opposite of unlimited buffs and it will probably work depending if the addresses are the same. So far, I have tested this extensively but I was banned while trying this. I will continue on an emu server and keep you guys updated.









+++++++++++++++++++++++++++++++++++

[Cypher]

Errr, thats funny. I posted this about an hour ago and now its not there, wtf. Oh well. Thanks for the contribution.

Post edited to conform with our posting guidelines. All members please read the relevant section(s), or even better, the whole thing, before posting. Thanks.

http://www.mmowned.com/forums/wow-ex...uncements.html

[Matt]

just updated the post to the full working and latest revision of this post.

im a little suprised other people arent jumping on this!

[janzi9]

I would do this but.. It seems like so much work, meh. Rofl, I'm too lazy to DL TSearch AGAIN!

[Cypher]

Yeah, I knew you could do stuff like this on private servers. I never would have thought the actually buffs would be client side though. Pretty stupid on blizzards behalf.

[Ursulus]

at first i did not trust this post - sound like bogus to me

then decided to give it a try. did not work - i contact OP through AIM.
i just didn't read correctly. it now works fully ))))

i asked why blizzard be stupid so make buff client

OP said it was more complicated than client/server. there is more to it.

TY FOR POSTING THIS. love this exploit. very fun!

[janzi9]

Urs, feel free to +1 the writer

[jtz]

What's even more interesting is that combo points are held client side.

Hint hint !
Don't abuse it guys.

Forgot to mention, Cheat Engine imo is alot easier to use if you know what your searching for. If you happen to get stuck or lost Darkbyte is usually happy to help out.

[janzi9]

jtz! How would I be able to keep it at 5CPs?

[jtz]

You don't keep it at 5cp. You change it so blood frenzy procs without needing to crit(seal fate for rogues ??).

I'm positive you can keep it at 5cp all the time but is it really worth the attention that you'll get from it ?

[janzi9]

Lol, you won't get much attention due to the fact that they don't know how many CP's they have on them. Also they could just think your decked out, don't over use it and your good to go!

[jtz]

Lol, you won't get much attention due to the fact that they don't know how many CP's they have on them. Also they could just think your decked out, don't over use it and your good to go!

That's the way I like to keep it.
Been using this for a little over two months now and I plan to continue using it so i'll just pass the starter hints out.
If you guys manage to figure it out by yourself please do not post it or it will become server sided and ruin the fun for myself and everyone else that has worked hard to get this to work.

(Former Nitto 1320 player)

Edit.
Sorry totally misread your post. Just finished work gah !
Point is, that if all you do is ravage and FB (Ambush and evis for rogues ??) then they'll know something is up. I've actually picked up three rogues that also use this on my server alone so it does get around but noone talks about it. Even I'm careful about using this, if people get shitty and check their combat log then they can figure out whats going on.

[DaUberBird]

U can probably search for 1, 2, 3, 4, 5 depending on how many combo points u have and freeze it. I have a feeling it will be different on every target though. so Iunno :-/

[janzi9]

If Rogues continuously use Eviserate, that IS possible. I do it, theres a talent that has like %70 to add a CP after using a finishing move. I can do up to 10 in one fight continuously.

[oninuva]

i dotn like the sound of this ... theres no pics