WTW

[thryebac]

hi i try to mmake WTW fo my hack fo EU but dont i try to do it for na and work
now i thin thet is error in addys
PlayerPtr = CShell + ??????
i tr BasicPlayerInfo ponter + Adding so C3CAA8+54 and i get C3CAFC idk if it correct ( fon NA i have from earlier)
and i use
wtw1 -5;
wtw2 140;
wtw3 -5;
and this work great for NA idk fif work for eu to but somethink si wrong i jst cant WTW
tnx for help and sry for bad eng.

[Ryzz BackUp]

get your answer from here https://www.mpgh.net/forum/242-crossf...og-scynix.html

[thryebac]

still cant make it work

[V I]

So hard ?

#define WTW1                  0x1BC
#define WTW2                   0x1C0
#define WTW3                  0x1C4
#define WTW4             0xCB2F2C
#define WTW5             0xCB2F30
#define PlayerPointer				0x471948 + 0x64

if (GetAsyncKeyState(VK_LSHIFT)&1)
	{
		DWORD CShell = (DWORD)GetModuleHandleW ( L"CShell.dll");
	DWORD dw_PlayerPointer      = *(DWORD*)(CShell + PlayerPointer);	


		PFLOAT wtw1 = (PFLOAT)( dw_PlayerPointer + WTW1 );
		PFLOAT wtw2 = (PFLOAT)( dw_PlayerPointer + WTW2 );
		PFLOAT wtw3 = (PFLOAT)( dw_PlayerPointer + WTW3 );
		PFLOAT wtw4 = (PFLOAT)( CShell + WTW4);
		PFLOAT wtw5 = (PFLOAT)( CShell + WTW5);
				if (*wtw1) *wtw1 = -5;
				if (*wtw2) *wtw2 = 140;
				if (*wtw3) *wtw3 = -5;
				if (*wtw4) *wtw4 = -5;
				if (*wtw5) *wtw5 = 0;
	}

[thryebac]

lol i have this code for WTW
see problem is in your "_PlayerPointer2" i need this for eu not na v.
so i try this one 0x5233DB0+0x54 ---> i get it hire

04E216B4   BE 803C1805      MOV ESI,cshell.05183C80                  ; ASCII "WeaponReload"
04E216B9   B9 0D000000      MOV ECX,0D
04E216BE   33D2             XOR EDX,EDX
04E216C0   F3:A6            REPE CMPS BYTE PTR ES:[EDI],BYTE PTR DS:>
04E216C2   0F85 A8000000    JNZ cshell.04E21770
04E216C8   807C24 24 01     CMP BYTE PTR SS:[ESP+24],1
04E216CD   75 2F            JNZ SHORT cshell.04E216FE
04E216CF   8B4424 18        MOV EAX,DWORD PTR SS:[ESP+18]
04E216D3   8B48 54          MOV ECX,DWORD PTR DS:[EAX+54]
04E216D6   85C9             TEST ECX,ECX
04E216D8   74 24            JE SHORT cshell.04E216FE
04E216DA   E8 21F31B00      CALL cshell.04FE0A00
04E216DF   50               PUSH EAX
04E216E0   E8 BB171600      CALL cshell.04F82EA0
04E216E5   83C4 04          ADD ESP,4
04E216E8   85C0             TEST EAX,EAX
04E216EA   894424 20        MOV DWORD PTR SS:[ESP+20],EAX
04E216EE   0F84 64170000    JE cshell.04E22E58
04E216F4   05 6C040000      ADD EAX,46C
04E216F9  ^E9 77FDFFFF      JMP cshell.04E21475
04E216FE   80BC24 B8040000 >CMP BYTE PTR SS:[ESP+4B8],1
04E21706   0F85 4C170000    JNZ cshell.04E22E58
04E2170C   8B15 20642205    MOV EDX,DWORD PTR DS:[5226420]           ; cshell.05233DB0
04E21712   8BCA             MOV ECX,EDX
04E21714   E8 E798FEFF      CALL cshell.04E0B000
04E21719   8B7C24 1C        MOV EDI,DWORD PTR SS:[ESP+1C]
04E2171D   3BC7             CMP EAX,EDI
04E2171F   0F84 33170000    JE cshell.04E22E58
04E21725   8BCA             MOV ECX,EDX
04E21727   E8 E498FEFF      CALL cshell.04E0B010
04E2172C   3BC7             CMP EAX,EDI
04E2172E   0F84 24170000    JE cshell.04E22E58
04E21734   8B4424 3C        MOV EAX,DWORD PTR SS:[ESP+3C]
04E21738   85C0             TEST EAX,EAX
04E2173A   0F84 18170000    JE cshell.04E22E58
04E21740   0FB780 40170100  MOVZX EAX,WORD PTR DS:[EAX+11740]
04E21747   66:3D FFFF       CMP AX,0FFFF
04E2174B   0F84 07170000    JE cshell.04E22E58
04E21751   50               PUSH EAX
04E21752   E8 49171600      CALL cshell.04F82EA0
04E21757   83C4 04          ADD ESP,4
04E2175A   85C0             TEST EAX,EAX
04E2175C   894424 20        MOV DWORD PTR SS:[ESP+20],EAX
04E21760   0F84 F2160000    JE cshell.04E22E58
04E21766   05 6C040000      ADD EAX,46C
04E2176B  ^E9 A4FDFFFF      JMP cshell.04E21514
04E21770   8BF8             MOV EDI,EAX

but the game keep crashes when i start it
so idk what to do i think the problem is hire 0x5233DB0+0x54

[V I]

0x5233DB0 ? You are using xtrap bypass ? lol

[derh.acker]

So hard ?

#define WTW1                  0x1BC
#define WTW2                   0x1C0
#define WTW3                  0x1C4
#define WTW4             0xCB2F2C
#define WTW5             0xCB2F30
#define PlayerPointer				0x471948 + 0x64

if (GetAsyncKeyState(VK_LSHIFT)&1)
	{
		DWORD CShell = (DWORD)GetModuleHandleW ( L"CShell.dll");
	DWORD dw_PlayerPointer      = *(DWORD*)(CShell + PlayerPointer);	


		PFLOAT wtw1 = (PFLOAT)( dw_PlayerPointer + WTW1 );
		PFLOAT wtw2 = (PFLOAT)( dw_PlayerPointer + WTW2 );
		PFLOAT wtw3 = (PFLOAT)( dw_PlayerPointer + WTW3 );
		PFLOAT wtw4 = (PFLOAT)( CShell + WTW4);
		PFLOAT wtw5 = (PFLOAT)( CShell + WTW5);
				if (*wtw1) *wtw1 = -5;
				if (*wtw2) *wtw2 = 140;
				if (*wtw3) *wtw3 = -5;
				if (*wtw4) *wtw4 = -5;
				if (*wtw5) *wtw5 = 0;
	}

Why did you just change WTW_offs to WTW?

[thryebac]

yes i use it i need bypass to use odbg110
but how can i find if its wrong
do i need to Dumped CShell and then look for it ???

[V I]

yes i use it i need bypass to use odbg110
but how can i find if its wrong
do i need to Dumped CShell and then look for it ???

Yeah, you have to unpack / load cshell and don't use xtrap bypass because it given you wrong addresses.

---------- Post added at 12:15 PM ---------- Previous post was at 12:14 PM ----------

Why did you just change WTW_offs to WTW?

Don't worry , it's not Edi's code rofl.

HL Bot already posted it also & ~fallen~ if you are old enough on forum you can remember his thread .

[3D]

Playerptr = 0x4719AC

Works fine for me

---------- Post added at 12:10 PM ---------- Previous post was at 12:08 PM ----------

So hard ?

#define WTW1                  0x1BC
#define WTW2                   0x1C0
#define WTW3                  0x1C4
#define WTW4             0xCB2F2C
#define WTW5             0xCB2F30
#define PlayerPointer				0x471948 + 0x64

if (GetAsyncKeyState(VK_LSHIFT)&1)
	{
		DWORD CShell = (DWORD)GetModuleHandleW ( L"CShell.dll");
	DWORD dw_PlayerPointer      = *(DWORD*)(CShell + PlayerPointer);	


		PFLOAT wtw1 = (PFLOAT)( dw_PlayerPointer + WTW1 );
		PFLOAT wtw2 = (PFLOAT)( dw_PlayerPointer + WTW2 );
		PFLOAT wtw3 = (PFLOAT)( dw_PlayerPointer + WTW3 );
		PFLOAT wtw4 = (PFLOAT)( CShell + WTW4);
		PFLOAT wtw5 = (PFLOAT)( CShell + WTW5);
				if (*wtw1) *wtw1 = -5;
				if (*wtw2) *wtw2 = 140;
				if (*wtw3) *wtw3 = -5;
				if (*wtw4) *wtw4 = -5;
				if (*wtw5) *wtw5 = 0;
	}

I have more two ways for wtw
So easy than this

[V I]

Playerptr = 0x4719AC

Works fine for me

---------- Post added at 12:10 PM ---------- Previous post was at 12:08 PM ----------



I have more two ways for wtw
So easy than this

!!!! Dude what does DWORD means ?

[thryebac]

lol cant dump CShell i get error
can someone plss find this adres or dump CShell??? pls tnx for help

[V I]

lol cant dump CShell i get error
can someone plss find this adres or dump CShell??? pls tnx for help

Use a loadlibrary ?

[thryebac]

Use a loadlibrary ?

how cant load is detectet they have protected file

[sobasoba13]

how cant load is detectet they have protected file

there is one in crossfire spammers and injectors section