About Shearcing Strings

[rabir007]

So finally, i have a Bypass for Cf Eu, and can find the Strings with CE but
when i shearch a string, like "CharcterHiddenWalkAlpha" in the CE string finder, i got a value for about "0066456C" (not excatly this)
So i was curious, if it works, added into code list, and Pointer scanned, but i didnt got the BasicPlayerInfo + CharacterWalkAlpha...

I reversed the correct pointer + offset and got a "00754156" (about, not excatly), the essence, that not the same...

So if i find the "0066456C", how can i find the correct pointer and offset for BasicPlayerInfo + CharacterWalkAlpha...

Dont give me the right pointer and offset, i have them too i want to know, how to find them...

[Biesi]

Where the hell do you find 0066456C

[rabir007]

Where the hell do you find 0066456C

Here:

[sobasoba13]

It's More Easy To Find Pointer And Addys With Olly

[rabir007]

It's More Easy To Find Pointer And Addys With Olly

I know, i learnt how to find the strings.. But...
So i shearched a string "JumpVelocity"

I got this:

MOV ECX,DWORD PTR SS:[ESP+30]
MOV EDX,DWORD PTR DS:[ECX+EDI*4]
PUSH CShell_U.103E7B6C                   ;  ASCII "JumpVelocity"

I looked before, and the ECX is the BasicPlayerInfo:

MOV ECX,DWORD PTR DS:[10CE1710]

So the Jump Velocity is: BasicPlayerInfo + 30 ?

I'm new with Olly :/

Or the JumpVelocity is:

(BasicPlayerInfo+30) + (i * 4 )

I ran the Process, and there was a Compare EDI, EAX (or EAX,EDI)
And the EAX was 18, so the loop is 18, right ?

[sobasoba13]

I Will Find For You But To Know the addy you have to learn assembly lang

[Biesi]

Something like this

[rabir007]

Something like this

Its the Ghost Hack
There is tons of Numbers... Where do i know, wich is the pointer, and wich is the offset i need ?

I watched over offsets i already know, and detected that the Offset's form every time is [Register + Register + Offset]

---------- Post added at 02:52 PM ---------- Previous post was at 02:51 PM ----------

I Will Find For You But To Know the addy you have to learn assembly lang

Please dont, i want to learn how to find myself... Thats the point of this thread..:

Or maybe, i found something like BasicPlayerInfo + 64 but Cf exit when i want to juon into a match...
when i use: BasicPlayerInfo + 64 = 0;

[sobasoba13]

Okay i will tell you
but i will eat now

[Biesi]

Where do i know, wich is the pointer, and wich is the offset i need ?

Have a look on what and how they calculate

[rabir007]

Have a look on what and how they calculate

So if i'm Right

MOV ECX,DWORD PTR DS:[10CE1710] //Basic player Info
ADD ESP,4
IMUL EAX,EAX,0A8
FSTP DWORD PTR DS:[EAX+ECX+2C] //Possible JumpVelocity

*(float*)(pBasicPlayerInfo + 0x2C) = 9999;

And jump the same height, maybe this value dont have effect in-game...

[dakr54]

In memory you were supposed to go to 0051C95e

if u did it correctly it would've looked like this:

[rabir007]

In memory you were supposed to go to 0051C95e

if u did it correctly it would've looked like this:

Is started using OllyDbg... a bit easier....

[DarkPladin]

@dakr54
@rabir007
how can u open the CE Without Detected !!

[rabir007]

@dakr54
@rabir007
how can u open the CE Without Detected !!

Detected Xtrap Bypass -> Start Cf, dont Login -> Start CE...