Red boxes and name tags

Hi guys,

I need some guidance in find some offsets. Nothing too fancy, just the chopper boxes and name tags.

I found the chopper box ESP address (barely) but the process I used was quite lengthy. The process was filtering changed addresses whenever you entered pred missile, chopper or AC130 using CE.

Then I faced the problem of players having the cold blooded perk and didn't have a red box around them. I've seen a couple of times people posting an address which you can 'patch' (NOP?) that supposedly does the cold blooded check before drawing the boxes.

Secondly the name tags. I found cg_drawThroughWalls quite interesting but it only draws your team's name through walls. The cg_enemyOverheadNamesFadeOut to be interesting which you can 'lock on' to enemies if you can see their overhead name.

I'm assuming that you have to patch the comparison OP code of cg_drawThroughWalls that checks which team players are on?

Can someone tell me where I'm wrong and also guide me on how people normally do it? I know I'm late to the hacking scene (like year's late lol) but, I'm just getting into game hacking so it's for my knowledge.

My knowledge of assembly constitutes of knowing various OP codes that's it. I also have some experience with OllyDBG. Please don't flame me, I'm trying :3

I've been working on a lot of mw2 stuff over the weekend. I got working no-recoil that works without host and got chopper esp address but I'll have to look into the cold blooded and the names through walls thing.

This is probably what you've found already:


So here the game is checking whether the target box flag (0x10) is set in the "otherFlags" in predictedPlayerState (0x8A0E60).
Nop'ing the jz will ignore the comparison and always draw the boxes ->
Now when we look at that CG_DrawFriendOrFoeTargetBoxes function we see three calls:



Some digging around in those three calls will quickly tell you that the second function called is doing the actual drawing, alive checking, perk checking and entity type checking:



I am sure you know how to do the rest, but anyways...
cg_drawThroughWalls doesn't exist in the current version of MW2 anymore. Anyways, go to the first xref of the cg_drawFriendlyNames dvar.
There you'll find the following piece of code:



Here it does some comparison, like whether the team is 0 (invalid?), 3 (spectator) or not equal to our team. We can flip that jnz to jz, so that it's only drawing enemy names (or we could write a couple of nops which would then show names for both teams).

There are a couple more checks in that function with stuff like whether you're flashbanged or not, in which case the names don't get drawn.
One important check though is the visibility check, which we want to remove.

A little further down the function we find a call to a function that checks for head visibility, we could simply nop the jump after that but for the educational purposes, let's make the function always return true (1).


All we have to do is write mov al, 1; ret to that address:


-- Xen0

These are CFG Codes but they should
Work for CFW:

cg_drawThroughWalls "1"
cg_enemyFadeOut "9999"
cg_enemyFadeIn "5"