Results 1 to 15 of 15
  1. #1
    eazygamez's Avatar
    Join Date
    Feb 2013
    Gender
    male
    Posts
    10
    Reputation
    10
    Thanks
    1

    Finding the No Recoil address

    Hey pros,

    I was wondering if you guys were able to guide me into the right direction for scanning for the No Recoil address. The reason why i'm scanning for the address and not taking it from one of the threads is not only to be self sufficient but to gain a learning experience.

    I tried finding out what writes to the y value of the crosshairs but that work out and I didn't know how to scan for the players yaw and pitch to find out what writes to those.

    Can one of you guys take a minute to describe to me the process?

    Thank you

  2. #2
    RolexVI's Avatar
    Join Date
    Jan 2013
    Gender
    male
    Location
    USA
    Posts
    47
    Reputation
    10
    Thanks
    22
    My Mood
    Amused
    I think some of your answer are in this Sticky
    http://www.mpgh.net/forum/207-combat...er-2012-a.html
    If i'm wrong I'm sorry

  3. #3
    _disav0w's Avatar
    Join Date
    Feb 2013
    Gender
    male
    Location
    in disav0w_ 01011010
    Posts
    19
    Reputation
    10
    Thanks
    2
    find references for no recoil in cshell in olly...that will help find byte and more..
    good luck..

  4. #4
    eazygamez's Avatar
    Join Date
    Feb 2013
    Gender
    male
    Posts
    10
    Reputation
    10
    Thanks
    1
    why would there be a referenced text string of recoil?

    ---------- Post added at 12:33 AM ---------- Previous post was at 12:33 AM ----------

    does anybody know how to find it or is it one guy copying from another?

  5. The Following User Says Thank You to eazygamez For This Useful Post:

    [MPGH]Flengo (02-15-2013)

  6. #5
    _disav0w's Avatar
    Join Date
    Feb 2013
    Gender
    male
    Location
    in disav0w_ 01011010
    Posts
    19
    Reputation
    10
    Thanks
    2
    Quote Originally Posted by eazygamez View Post
    why would there be a referenced text string of recoil?

    ---------- Post added at 12:33 AM ---------- Previous post was at 12:33 AM ----------

    does anybody know how to find it or is it one guy copying from another?
    try searching no recoil address and you find and byte too so you seperate into 2 ex; /x95/x56/xE8 <--- off byte on is nop or sometime something...

  7. #6
    eazygamez's Avatar
    Join Date
    Feb 2013
    Gender
    male
    Posts
    10
    Reputation
    10
    Thanks
    1
    you know how many matches you'll have for that AOB scan?

    there must be a way. jeez

  8. #7
    _disav0w's Avatar
    Join Date
    Feb 2013
    Gender
    male
    Location
    in disav0w_ 01011010
    Posts
    19
    Reputation
    10
    Thanks
    2
    Quote Originally Posted by eazygamez View Post
    you know how many matches you'll have for that AOB scan?

    there must be a way. jeez
    just search no recoil address...it leads you to the bytes ex: E5 E8 E4 E3 now convert : /xe5 /xe8 /xe4 /xe3
    if we want to make pattern / mask for no recoil... you get old dump... ex: jan ca dump..
    go to old no recoil address get old byte... put old byte on top of new...
    ex of pattern..:
    old byte: e3 e2 e5 e6 00 e4
    new byte..: e5 e2 e3 e6 00 e4
    mask: ?x?x?x
    it search for pattern in logger than the ? say value might change ...

  9. #8
    eazygamez's Avatar
    Join Date
    Feb 2013
    Gender
    male
    Posts
    10
    Reputation
    10
    Thanks
    1
    how would you do it with cheat engine?

  10. #9
    5555satan's Avatar
    Join Date
    Sep 2012
    Gender
    male
    Location
    i dont remember where i live
    Posts
    297
    Reputation
    10
    Thanks
    238
    My Mood
    Paranoid
    here you go
    Code:
    		if(NoRecoil)	
    		{
    	memcpy((LPVOID) (ADDR_NORECOIL), "\x90\x90\x90", 3);
    		}else{
    				memcpy((LPVOID) (ADDR_NORECOIL), "\xD8\x66\x58", 3);
    		}
    Press Thanks if i helped you / if you liked my signature



    Add me on skype: ReFusioNN-

  11. #10
    Ch40zz-C0d3r's Avatar
    Join Date
    Apr 2011
    Gender
    male
    Posts
    839
    Reputation
    44
    Thanks
    400
    My Mood
    Twisted
    So, to get some skill into this thread, instead of leeching theres a way.
    So open cheat engine and find your ammo address, set a breakpoint on access or write and shoot one more time.
    Trace back from there into a subcall, and there is recoil applied with the CPU-F floats, simply nop both lines to prevent writing the recoil, or nop the both lines to read the recoil

    Progress with my game - "Disbanded"
    • Fixed FPS lag on spawning entities due to the ent_preload buffer!
    • Edit the AI code to get some better pathfinding
    • Fixed the view bug within the sniper scope view. The mirror entity is invisible now!
    • Added a new silencer for ALL weapons. Also fixed the rotation bugs
    • Added a ton of new weapons and the choice to choose a silencer for every weapon
    • Created a simple AntiCheat, noobs will cry like hell xD
    • The name will be Disbanded, the alpha starts on the 18th august 2014



    Some new physics fun (Serversided, works on every client)



    My new AI
    http://www.youtube.com/watch?v=EMSB1GbBVl8

    And for sure my 8 months old gameplay with 2 friends
    http://www.youtube.com/watch?v=Na2kUdu4d_k

  12. The Following User Says Thank You to Ch40zz-C0d3r For This Useful Post:

    [MPGH]Flengo (02-15-2013)

  13. #11
    R3d_L1n3's Avatar
    Join Date
    Dec 2012
    Gender
    male
    Posts
    137
    Reputation
    10
    Thanks
    208
    Quote Originally Posted by Ch40zz-C0d3r View Post
    So, to get some skill into this thread, instead of leeching theres a way.
    So open cheat engine and find your ammo address, set a breakpoint on access or write and shoot one more time.
    Trace back from there into a subcall, and there is recoil applied with the CPU-F floats, simply nop both lines to prevent writing the recoil, or nop the both lines to read the recoil
    Oh camon he cant find norecoil ! how would he understand break point .. , There trick i know witch is using cheatengine by decreased / increased val while pick a gun

  14. #12
    R4v0r's Avatar
    Join Date
    Nov 2012
    Gender
    male
    Location
    London
    Posts
    234
    Reputation
    11
    Thanks
    141
    My Mood
    Amazed

    Jesus, just help the guy already, @eazygamez
    Dump/unpack your CShell.dll, open in IDA, click Search->sequence of bytes
    Input this as string: D9 44 24 14 D8 D1 DF E0 DD D9 F6 C4 41 75 09 ,
    Click: "Search Down" radiobutton, and check "Find all occurrences", click OK and it will take you to the current NoRecoil address.

    This is my method, I do this for all the addresses I use, enjoy
    Last edited by R4v0r; 02-15-2013 at 12:33 PM.

  15. #13
    Acea's Avatar
    Join Date
    Oct 2012
    Gender
    female
    Location
    Home of the elks
    Posts
    346
    Reputation
    80
    Thanks
    2,204
    My Mood
    Stressed
    Just load a dumped cshell in ida, hit scan for sequence of bytes, and put 'D8 66 58'. Easy way of updating. But if you were to find the address and lets say you don't have a past reference you can use a bypass and attach cheat engine then put unknown initial value, put a weapon with more recoil, put increased value then scan again, then goto less recoil then do less value and repeat. You could also use classes or a debugger to get it but i'm way to lazy to type all that out. Best way to learn is trial and error

  16. #14
    Ch40zz-C0d3r's Avatar
    Join Date
    Apr 2011
    Gender
    male
    Posts
    839
    Reputation
    44
    Thanks
    400
    My Mood
    Twisted
    Quote Originally Posted by Acea View Post
    Just load a dumped cshell in ida, hit scan for sequence of bytes, and put 'D8 66 58'. Easy way of updating. But if you were to find the address and lets say you don't have a past reference you can use a bypass and attach cheat engine then put unknown initial value, put a weapon with more recoil, put increased value then scan again, then goto less recoil then do less value and repeat. You could also use classes or a debugger to get it but i'm way to lazy to type all that out. Best way to learn is trial and error
    You actually dont need a bypass on x64 systems and x64 version

    Progress with my game - "Disbanded"
    • Fixed FPS lag on spawning entities due to the ent_preload buffer!
    • Edit the AI code to get some better pathfinding
    • Fixed the view bug within the sniper scope view. The mirror entity is invisible now!
    • Added a new silencer for ALL weapons. Also fixed the rotation bugs
    • Added a ton of new weapons and the choice to choose a silencer for every weapon
    • Created a simple AntiCheat, noobs will cry like hell xD
    • The name will be Disbanded, the alpha starts on the 18th august 2014



    Some new physics fun (Serversided, works on every client)



    My new AI
    http://www.youtube.com/watch?v=EMSB1GbBVl8

    And for sure my 8 months old gameplay with 2 friends
    http://www.youtube.com/watch?v=Na2kUdu4d_k

  17. #15
    eazygamez's Avatar
    Join Date
    Feb 2013
    Gender
    male
    Posts
    10
    Reputation
    10
    Thanks
    1
    Problem with unknown / decreased / increased is that I land with a load of addresses not to mention, no spread, weapon values (possibly) and hundreds of other addresses that don't correspond to the recoil.

    I have my own memory scanner btw so I don't need cheat engine.

Similar Threads

  1. [Tutorial] How to find the Force Host address
    By NightmareTX_RETIRED in forum Call of Duty Modern Warfare 3 Tutorials
    Replies: 21
    Last Post: 08-08-2012, 11:55 AM
  2. How to find the I.P Address of a Player?
    By domer in forum CrossFire Help
    Replies: 7
    Last Post: 07-31-2011, 11:50 PM
  3. [Help] Finding the right address
    By Lyoto Machida in forum C++/C Programming
    Replies: 15
    Last Post: 06-13-2011, 07:13 AM
  4. Help - How to find No Recoil addresses?
    By Ragehax in forum Combat Arms Hack Coding / Programming / Source Code
    Replies: 25
    Last Post: 05-05-2010, 08:07 PM
  5. Can someone explain how I find the spread address with MHS?
    By Starecase in forum Combat Arms Hacks & Cheats
    Replies: 11
    Last Post: 10-06-2008, 11:56 PM