MPGHThe Dark Arts
RegisterLog in

About No Recoil in Olly+ Generating addys with Cheat engine

Posts 1–15 of 21 · Page 1 of 2
About No Recoil in Olly+ Generating addys with Cheat engine
Guys can some one make a tut on how to get addys with Cheat Engine cuz i have been searching for one day one the no Recoil hack and it wont Work.........
Code:

#include "stdafx.h"

#define WeaponMgr 0xA68F90
#define NoRecoil 0x258C
#define NoRecoil2 0x1928
#define NoRecoil3 0x192C
#define NoRecoil4 0x1930
#define NoRecoil5 0x2520
#define NoRecoil6 0x2594
#define NoRecoil7 0x2590

DWORD WINAPI Hacks(LPVOID)
{
bool norecoil1 = true;

while(1)
{
DWORD CShell = (DWORD)GetModuleHandleA("CShell.dll");
DWORD pWeaponMgr = *(DWORD*)(CShell+WeaponMgr);

if(NoRecoil)
{
if (WeaponMgr)
{
for(int i = 0; i < 63; i++)
{


if((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr))+(4*i)) ) != NULL)

*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil2) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil3) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil4) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil5) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil6) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil7) = 0.0f;
}

}
}
Sleep(100);
}

}

bool Ready2Hook()
{
if(GetModuleHandleA("CShell.dll") != NULL
&& GetModuleHandleA("ClientFx.fxd") != NULL)
return 1;
return 0;
}

DWORD WINAPI Wait(LPVOID)
{
while(!Ready2Hook()) Sleep(200);
CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)Hacks, NULL, NULL, NULL);
return 0;
}

BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls(hDll);

if ( dwReason == DLL_PROCESS_ATTACH )
{

MessageBoxA(0, "Credits- moathebest","Beta Hack", 0);


CreateThread(0,0,(LPTHREAD_START_ROUTINE)Wait,0,0, 0);
}
return 1;
}

Takari is the one who got me the no Recoil addys

Another thing is that when i search for BulletPosOffset or LowerAnimRate i get this:


http://www.mypicx.com/11252011/need_help/




And when i make follow in disambeller i get this:


http://www.mypicx.com/11252011/need_help/

(2nd picture next to it)
So i was hoping that some 1 would make a nice tut for CE....

PS: Dont spam saying "Learn C++" "Learn Assembler" ........cough......@DaRk.......cough.......@Brimir......cough
#1 · edited ·
if(NoRecoil)
{
if (WeaponMgr)
{
for(int i = 0; i < 63; i++)
{


if((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr))+(4*i)) ) != NULL)
{
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil2) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil3) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil4) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil5) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil6) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil7) = 0.0f;
}
}
}
}
#2 ·
Quote Originally Posted by kmanev073 View Post
if(NoRecoil)
{
if (WeaponMgr)
{
for(int i = 0; i < 63; i++)
{


if((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr))+(4*i)) ) != NULL)
{
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil2) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil3) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil4) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil5) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil6) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoRecoil7) = 0.0f;
}
}
}
}
why did u loop through only 63 weapons?
to make norecoil work you need to add a loop again
[HTML]for(int y=9; y<9; y++)[/HTML]
#3 ·
Quote Originally Posted by DaRk View Post
why did u loop through only 63 weapons?
to make norecoil work you need to add a loop again
[HTML]for(int y=9; y<9; y++)[/HTML]
thx for sharing finally u helped... <3 and why its only 9 shouldnt it be 560??
#4 ·
still doesnt work;
Code:


#include "stdafx.h"

#define WeaponMgr 0xA68F90
#define NoRecoil 0x258C
#define NoRecoil2 0x1928
#define NoRecoil3 0x192C
#define NoRecoil4 0x1930
#define NoRecoil5 0x2520
#define NoRecoil6 0x2594
#define NoRecoil7 0x2590

DWORD WINAPI Hacks(LPVOID)
{
bool norecoil1 = true;

while(1)
{
DWORD CShell = (DWORD)GetModuleHandleA("CShell.dll");
DWORD pWeaponMgr = *(DWORD*)(CShell+WeaponMgr);

if(NoRecoil)
{
if (WeaponMgr)
{
for(int y=9; y<9; y++)
{

if((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr))+(4*y)) ) != NULL)
{
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil2) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil3) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil4) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil5) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil6) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil7) = 0.0f;
}
}
}
}
Sleep(100);
}

}

bool Ready2Hook()
{
if(GetModuleHandleA("CShell.dll") != NULL
&& GetModuleHandleA("ClientFx.fxd") != NULL)
return 1;
return 0;
}

DWORD WINAPI Wait(LPVOID)
{
while(!Ready2Hook()) Sleep(200);
CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)Hacks, NULL, NULL, NULL);
return 0;
}

BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls(hDll);

if ( dwReason == DLL_PROCESS_ATTACH )
{

MessageBoxA(0, "Credits- moathebest","Beta Hack", 0);


CreateThread(0,0,(LPTHREAD_START_ROUTINE)Wait,0,0, 0);
}
return 1;
}
#5 ·
Quote Originally Posted by moathebest View Post
still doesnt work;
Code:


#include "stdafx.h"

#define WeaponMgr 0xA68F90
#define NoRecoil 0x258C
#define NoRecoil2 0x1928
#define NoRecoil3 0x192C
#define NoRecoil4 0x1930
#define NoRecoil5 0x2520
#define NoRecoil6 0x2594
#define NoRecoil7 0x2590

DWORD WINAPI Hacks(LPVOID)
{
bool norecoil1 = true;

while(1)
{
DWORD CShell = (DWORD)GetModuleHandleA("CShell.dll");
DWORD pWeaponMgr = *(DWORD*)(CShell+WeaponMgr);

if(NoRecoil)
{
if (WeaponMgr)
{
for(int y=9; y<9; y++)
{

if((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr))+(4*y)) ) != NULL)
{
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil2) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil3) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil4) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil5) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil6) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil7) = 0.0f;
}
}
}
}
Sleep(100);
}

}

bool Ready2Hook()
{
if(GetModuleHandleA("CShell.dll") != NULL
&& GetModuleHandleA("ClientFx.fxd") != NULL)
return 1;
return 0;
}

DWORD WINAPI Wait(LPVOID)
{
while(!Ready2Hook()) Sleep(200);
CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)Hacks, NULL, NULL, NULL);
return 0;
}

BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls(hDll);

if ( dwReason == DLL_PROCESS_ATTACH )
{

MessageBoxA(0, "Credits- moathebest","Beta Hack", 0);


CreateThread(0,0,(LPTHREAD_START_ROUTINE)Wait,0,0, 0);
}
return 1;
}
u have to add 2 loops
[HTML]for(int i=0; i<560; i++)[/HTML]
and this [HTML]for(int y=0; i<9; y++)[/HTML]
GL with that
#8 ·
i dont know how did you find these BuletPostionOffcet or what was there something like that bcs lower anim rate is 3 xD ?
#6 ·
Quote Originally Posted by kmanev073 View Post
i dont know how did you find these BuletPostionOffcet or what was there something like that bcs lower anim rate is 3 xD ?
Takari is the one who told me them...
#7 ·
still doesnt work..
code again:..........I think the addys are patched:





#include "stdafx.h"

#define WeaponMgr 0xA68F90
#define NoRecoil 0x258C
#define NoRecoil2 0x1928
#define NoRecoil3 0x192C
#define NoRecoil4 0x1930
#define NoRecoil5 0x2520
#define NoRecoil6 0x2594
#define NoRecoil7 0x2590

DWORD WINAPI Hacks(LPVOID)
{
bool norecoil1 = true;

while(1)
{
DWORD CShell = (DWORD)GetModuleHandleA("CShell.dll");
DWORD pWeaponMgr = *(DWORD*)(CShell+WeaponMgr);

if (NoRecoil)
for (int i=0; i<560; i++)
{

if (pWeaponMgr)
{
for (int y=0; i<9; y++)
{
if((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr))+(4*y)) ) != NULL)
{
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil2) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil3) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil4) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil5) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil6) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil7) = 0.0f;
}
}
}
}
Sleep(100);
}

}

bool Ready2Hook()
{
if(GetModuleHandleA("CShell.dll") != NULL
&& GetModuleHandleA("ClientFx.fxd") != NULL)
return 1;
return 0;
}

DWORD WINAPI Wait(LPVOID)
{
while(!Ready2Hook()) Sleep(200);
CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)Hacks, NULL, NULL, NULL);
return 0;
}

BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls(hDll);

if ( dwReason == DLL_PROCESS_ATTACH )
{

MessageBoxA(0, "Credits- moathebest","Beta Hack", 0);


CreateThread(0,0,(LPTHREAD_START_ROUTINE)Wait,0,0, 0);
}
return 1;
}
#9 ·
come on guys come 1 help me am a new C++
#10 ·
1. You cant use Cheat Engine to find them cause CE is detected by XTrap.
2. The string to find the offsets is "BulletPosOffset"
#11 ·
Quote Originally Posted by Fly3r View Post
1. You cant use Cheat Engine to find them cause CE is detected by XTrap.
2. The string to find the offsets is "BulletPosOffset"
when i search in olly for BulletPosOffset all the addys i can find is:
[ECX+6A8B8D1E] = 0x6A8B8D1E
[EDX+6064D8E] = 0x6064D8E

Are they true?
#12 ·
Its obviously wrong + you dont know how to find Offsets
Here they are :
Code:
1013270D   68 40502F10      PUSH CShell.102F5040                     ; ASCII "BulletPosOffset"
10132712   55               PUSH EBP
10132713   E8 08F31700      CALL CShell.102B1A20
10132718   8BF8             MOV EDI,EAX
1013271A   83C4 08          ADD ESP,8
1013271D   85FF             TEST EDI,EDI
1013271F   0F84 EB000000    JE CShell.10132810
10132725   833F 04          CMP DWORD PTR DS:[EDI],4
10132728   0F85 E2000000    JNZ CShell.10132810
1013272E   8B47 04          MOV EAX,DWORD PTR DS:[EDI+4]
10132731   8B48 04          MOV ECX,DWORD PTR DS:[EAX+4]
10132734   A1 908FA610      MOV EAX,DWORD PTR DS:[10A68F90]
10132739   85C0             TEST EAX,EAX
1013273B   8B69 04          MOV EBP,DWORD PTR DS:[ECX+4]
1013273E   0FBFF3           MOVSX ESI,BX
10132741   74 0F            JE SHORT CShell.10132752
10132743   8B0D 948FA610    MOV ECX,DWORD PTR DS:[10A68F94]
10132749   2BC8             SUB ECX,EAX
1013274B   C1F9 02          SAR ECX,2
1013274E   3BF1             CMP ESI,ECX
10132750   72 0B            JB SHORT CShell.1013275D
10132752   90               NOP
10132753   E8 3C63F260      CALL MSVCR80._invalid_parameter_noinfo
10132758   A1 908FA610      MOV EAX,DWORD PTR DS:[10A68F90]
1013275D   55               PUSH EBP
1013275E   8D1CB0           LEA EBX,DWORD PTR DS:[EAX+ESI*4]
10132761   90               NOP
10132762   E8 0EF6F360      CALL MSVCR80.atof
10132767   D95C24 1C        FSTP DWORD PTR SS:[ESP+1C]
1013276B   D94424 1C        FLD DWORD PTR SS:[ESP+1C]
1013276F   8B13             MOV EDX,DWORD PTR DS:[EBX]
10132771   D99A 28190000    FSTP DWORD PTR DS:[EDX+1928] << 1
10132777   8B47 04          MOV EAX,DWORD PTR DS:[EDI+4]
1013277A   8B48 08          MOV ECX,DWORD PTR DS:[EAX+8]
1013277D   A1 908FA610      MOV EAX,DWORD PTR DS:[10A68F90]
10132782   8B69 04          MOV EBP,DWORD PTR DS:[ECX+4]
10132785   83C4 04          ADD ESP,4
10132788   85C0             TEST EAX,EAX
1013278A   74 0F            JE SHORT CShell.1013279B
1013278C   8B0D 948FA610    MOV ECX,DWORD PTR DS:[10A68F94]
10132792   2BC8             SUB ECX,EAX
10132794   C1F9 02          SAR ECX,2
10132797   3BF1             CMP ESI,ECX
10132799   72 0B            JB SHORT CShell.101327A6
1013279B   90               NOP
1013279C   E8 F362F260      CALL MSVCR80._invalid_parameter_noinfo
101327A1   A1 908FA610      MOV EAX,DWORD PTR DS:[10A68F90]
101327A6   55               PUSH EBP
101327A7   8D1CB0           LEA EBX,DWORD PTR DS:[EAX+ESI*4]
101327AA   90               NOP
101327AB   E8 C5F5F360      CALL MSVCR80.atof
101327B0   D95C24 1C        FSTP DWORD PTR SS:[ESP+1C]
101327B4   D94424 1C        FLD DWORD PTR SS:[ESP+1C]
101327B8   8B13             MOV EDX,DWORD PTR DS:[EBX]
101327BA   D99A 2C190000    FSTP DWORD PTR DS:[EDX+192C] << 2
101327C0   8B47 04          MOV EAX,DWORD PTR DS:[EDI+4]
101327C3   8B48 0C          MOV ECX,DWORD PTR DS:[EAX+C]
101327C6   A1 908FA610      MOV EAX,DWORD PTR DS:[10A68F90]
101327CB   8B79 04          MOV EDI,DWORD PTR DS:[ECX+4]
101327CE   83C4 04          ADD ESP,4
101327D1   85C0             TEST EAX,EAX
101327D3   74 0F            JE SHORT CShell.101327E4
101327D5   8B0D 948FA610    MOV ECX,DWORD PTR DS:[10A68F94]
101327DB   2BC8             SUB ECX,EAX
101327DD   C1F9 02          SAR ECX,2
101327E0   3BF1             CMP ESI,ECX
101327E2   72 0B            JB SHORT CShell.101327EF
101327E4   90               NOP
101327E5   E8 AA62F260      CALL MSVCR80._invalid_parameter_noinfo
101327EA   A1 908FA610      MOV EAX,DWORD PTR DS:[10A68F90]
101327EF   57               PUSH EDI
101327F0   8D34B0           LEA ESI,DWORD PTR DS:[EAX+ESI*4]
101327F3   90               NOP
101327F4   E8 7CF5F360      CALL MSVCR80.atof
101327F9   D95C24 1C        FSTP DWORD PTR SS:[ESP+1C]
101327FD   D94424 1C        FLD DWORD PTR SS:[ESP+1C]
10132801   8B16             MOV EDX,DWORD PTR DS:[ESI]
10132803   8B6C24 18        MOV EBP,DWORD PTR SS:[ESP+18]
10132807   D99A 30190000    FSTP DWORD PTR DS:[EDX+1930] << 3
1013280D   83C4 04          ADD ESP,4
10132810   33F6             XOR ESI,ESI
10132812   897424 28        MOV DWORD PTR SS:[ESP+28],ESI
10132816   EB 08            JMP SHORT CShell.10132820
10132818   8DA424 00000000  LEA ESP,DWORD PTR SS:[ESP]
1013281F   90               NOP
10132820   8B5C24 28        MOV EBX,DWORD PTR SS:[ESP+28]
10132824   83C6 01          ADD ESI,1
10132827   897424 20        MOV DWORD PTR SS:[ESP+20],ESI
1013282B   C74424 1C 010000>MOV DWORD PTR SS:[ESP+1C],1
10132833   C74424 24 030000>MOV DWORD PTR SS:[ESP+24],3
1013283B   EB 03            JMP SHORT CShell.10132840
1013283D   8D49 00          LEA ECX,DWORD PTR DS:[ECX]
10132840   33C0             XOR EAX,EAX
10132842   894424 31        MOV DWORD PTR SS:[ESP+31],EAX
10132846   894424 35        MOV DWORD PTR SS:[ESP+35],EAX
1013284A   894424 39        MOV DWORD PTR SS:[ESP+39],EAX
1013284E   894424 3D        MOV DWORD PTR SS:[ESP+3D],EAX
10132852   894424 41        MOV DWORD PTR SS:[ESP+41],EAX
10132856   894424 45        MOV DWORD PTR SS:[ESP+45],EAX
1013285A   894424 49        MOV DWORD PTR SS:[ESP+49],EAX
1013285E   66:894424 4D     MOV WORD PTR SS:[ESP+4D],AX
10132863   884424 4F        MOV BYTE PTR SS:[ESP+4F],AL
10132867   8B4424 1C        MOV EAX,DWORD PTR SS:[ESP+1C]
1013286B   56               PUSH ESI
1013286C   50               PUSH EAX
1013286D   8D4C24 38        LEA ECX,DWORD PTR SS:[ESP+38]
Thank Me , Enjoy
#13 · edited ·
Quote Originally Posted by Fly3r View Post
Its obviously wrong + you dont know how to find Offsets
Here they are :
Code:
1013270D   68 40502F10      PUSH CShell.102F5040                     ; ASCII "BulletPosOffset"
10132712   55               PUSH EBP
10132713   E8 08F31700      CALL CShell.102B1A20
10132718   8BF8             MOV EDI,EAX
1013271A   83C4 08          ADD ESP,8
1013271D   85FF             TEST EDI,EDI
1013271F   0F84 EB000000    JE CShell.10132810
10132725   833F 04          CMP DWORD PTR DS:[EDI],4
10132728   0F85 E2000000    JNZ CShell.10132810
1013272E   8B47 04          MOV EAX,DWORD PTR DS:[EDI+4]
10132731   8B48 04          MOV ECX,DWORD PTR DS:[EAX+4]
10132734   A1 908FA610      MOV EAX,DWORD PTR DS:[10A68F90]
10132739   85C0             TEST EAX,EAX
1013273B   8B69 04          MOV EBP,DWORD PTR DS:[ECX+4]
1013273E   0FBFF3           MOVSX ESI,BX
10132741   74 0F            JE SHORT CShell.10132752
10132743   8B0D 948FA610    MOV ECX,DWORD PTR DS:[10A68F94]
10132749   2BC8             SUB ECX,EAX
1013274B   C1F9 02          SAR ECX,2
1013274E   3BF1             CMP ESI,ECX
10132750   72 0B            JB SHORT CShell.1013275D
10132752   90               NOP
10132753   E8 3C63F260      CALL MSVCR80._invalid_parameter_noinfo
10132758   A1 908FA610      MOV EAX,DWORD PTR DS:[10A68F90]
1013275D   55               PUSH EBP
1013275E   8D1CB0           LEA EBX,DWORD PTR DS:[EAX+ESI*4]
10132761   90               NOP
10132762   E8 0EF6F360      CALL MSVCR80.atof
10132767   D95C24 1C        FSTP DWORD PTR SS:[ESP+1C]
1013276B   D94424 1C        FLD DWORD PTR SS:[ESP+1C]
1013276F   8B13             MOV EDX,DWORD PTR DS:[EBX]
10132771   D99A 28190000    FSTP DWORD PTR DS:[EDX+1928] << 1
10132777   8B47 04          MOV EAX,DWORD PTR DS:[EDI+4]
1013277A   8B48 08          MOV ECX,DWORD PTR DS:[EAX+8]
1013277D   A1 908FA610      MOV EAX,DWORD PTR DS:[10A68F90]
10132782   8B69 04          MOV EBP,DWORD PTR DS:[ECX+4]
10132785   83C4 04          ADD ESP,4
10132788   85C0             TEST EAX,EAX
1013278A   74 0F            JE SHORT CShell.1013279B
1013278C   8B0D 948FA610    MOV ECX,DWORD PTR DS:[10A68F94]
10132792   2BC8             SUB ECX,EAX
10132794   C1F9 02          SAR ECX,2
10132797   3BF1             CMP ESI,ECX
10132799   72 0B            JB SHORT CShell.101327A6
1013279B   90               NOP
1013279C   E8 F362F260      CALL MSVCR80._invalid_parameter_noinfo
101327A1   A1 908FA610      MOV EAX,DWORD PTR DS:[10A68F90]
101327A6   55               PUSH EBP
101327A7   8D1CB0           LEA EBX,DWORD PTR DS:[EAX+ESI*4]
101327AA   90               NOP
101327AB   E8 C5F5F360      CALL MSVCR80.atof
101327B0   D95C24 1C        FSTP DWORD PTR SS:[ESP+1C]
101327B4   D94424 1C        FLD DWORD PTR SS:[ESP+1C]
101327B8   8B13             MOV EDX,DWORD PTR DS:[EBX]
101327BA   D99A 2C190000    FSTP DWORD PTR DS:[EDX+192C] << 2
101327C0   8B47 04          MOV EAX,DWORD PTR DS:[EDI+4]
101327C3   8B48 0C          MOV ECX,DWORD PTR DS:[EAX+C]
101327C6   A1 908FA610      MOV EAX,DWORD PTR DS:[10A68F90]
101327CB   8B79 04          MOV EDI,DWORD PTR DS:[ECX+4]
101327CE   83C4 04          ADD ESP,4
101327D1   85C0             TEST EAX,EAX
101327D3   74 0F            JE SHORT CShell.101327E4
101327D5   8B0D 948FA610    MOV ECX,DWORD PTR DS:[10A68F94]
101327DB   2BC8             SUB ECX,EAX
101327DD   C1F9 02          SAR ECX,2
101327E0   3BF1             CMP ESI,ECX
101327E2   72 0B            JB SHORT CShell.101327EF
101327E4   90               NOP
101327E5   E8 AA62F260      CALL MSVCR80._invalid_parameter_noinfo
101327EA   A1 908FA610      MOV EAX,DWORD PTR DS:[10A68F90]
101327EF   57               PUSH EDI
101327F0   8D34B0           LEA ESI,DWORD PTR DS:[EAX+ESI*4]
101327F3   90               NOP
101327F4   E8 7CF5F360      CALL MSVCR80.atof
101327F9   D95C24 1C        FSTP DWORD PTR SS:[ESP+1C]
101327FD   D94424 1C        FLD DWORD PTR SS:[ESP+1C]
10132801   8B16             MOV EDX,DWORD PTR DS:[ESI]
10132803   8B6C24 18        MOV EBP,DWORD PTR SS:[ESP+18]
10132807   D99A 30190000    FSTP DWORD PTR DS:[EDX+1930] << 3
1013280D   83C4 04          ADD ESP,4
10132810   33F6             XOR ESI,ESI
10132812   897424 28        MOV DWORD PTR SS:[ESP+28],ESI
10132816   EB 08            JMP SHORT CShell.10132820
10132818   8DA424 00000000  LEA ESP,DWORD PTR SS:[ESP]
1013281F   90               NOP
10132820   8B5C24 28        MOV EBX,DWORD PTR SS:[ESP+28]
10132824   83C6 01          ADD ESI,1
10132827   897424 20        MOV DWORD PTR SS:[ESP+20],ESI
1013282B   C74424 1C 010000>MOV DWORD PTR SS:[ESP+1C],1
10132833   C74424 24 030000>MOV DWORD PTR SS:[ESP+24],3
1013283B   EB 03            JMP SHORT CShell.10132840
1013283D   8D49 00          LEA ECX,DWORD PTR DS:[ECX]
10132840   33C0             XOR EAX,EAX
10132842   894424 31        MOV DWORD PTR SS:[ESP+31],EAX
10132846   894424 35        MOV DWORD PTR SS:[ESP+35],EAX
1013284A   894424 39        MOV DWORD PTR SS:[ESP+39],EAX
1013284E   894424 3D        MOV DWORD PTR SS:[ESP+3D],EAX
10132852   894424 41        MOV DWORD PTR SS:[ESP+41],EAX
10132856   894424 45        MOV DWORD PTR SS:[ESP+45],EAX
1013285A   894424 49        MOV DWORD PTR SS:[ESP+49],EAX
1013285E   66:894424 4D     MOV WORD PTR SS:[ESP+4D],AX
10132863   884424 4F        MOV BYTE PTR SS:[ESP+4F],AL
10132867   8B4424 1C        MOV EAX,DWORD PTR SS:[ESP+1C]
1013286B   56               PUSH ESI
1013286C   50               PUSH EAX
1013286D   8D4C24 38        LEA ECX,DWORD PTR SS:[ESP+38]
Thank Me , Enjoy
thx but why when i follow in disambeller when searching in olly for BulletPosOffset i get this:

need_help - MyPicx.com
#14 ·
and then what is wrong with this code?
Code:




#include "stdafx.h"

#define WeaponMgr 0xA68F90

#define NoRecoil1 0x1928
#define NoRecoil2 0x192C
#define NoRecoil3 0x1930


DWORD WINAPI Hacks(LPVOID)
{
bool norecoil1 = true;

while(1)
{
DWORD CShell = (DWORD)GetModuleHandleA("CShell.dll");
DWORD pWeaponMgr = *(DWORD*)(CShell+WeaponMgr);

if (NoRecoil1)
for (int i=0; i<560; i++)
{

if (pWeaponMgr)
{
for (int y=0; i<9; y++)
{
if((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr))+(4*y)) ) != NULL)
{

*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil1) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil2) = 0.0f;
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*y))) + NoRecoil3) = 0.0f;

}
}
}
}
Sleep(100);
}

}

bool Ready2Hook()
{
if(GetModuleHandleA("CShell.dll") != NULL
&& GetModuleHandleA("ClientFx.fxd") != NULL)
return 1;
return 0;
}

DWORD WINAPI Wait(LPVOID)
{
while(!Ready2Hook()) Sleep(200);
CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)Hacks, NULL, NULL, NULL);
return 0;
}

BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls(hDll);

if ( dwReason == DLL_PROCESS_ATTACH )
{

MessageBoxA(0, "Credits- moathebest","Beta Hack", 0);


CreateThread(0,0,(LPTHREAD_START_ROUTINE)Wait,0,0, 0);
}
return 1;
}
#15 ·
Posts 1–15 of 21 · Page 1 of 2

Post a Reply

Similar Threads

WarRock - International HacksHow To Get Hacks With Cheat Engine 5.3?naomelembro14naomelembro14 1 WarRock - International Hacksneed help with cheat engine hacks for u to tell me including amazing bypasserGEgeorge567 5 GeneralpROBLEM WITH CHeAT ENGINEW0w00t? 8 WarRock - International HacksHelp with cheat engine 5.3!!!!BoricuaGaaraBoricuaGaara 7 WarRock - International Hacksi need help with cheat engineaprill27aprill27 3

Tags for this Thread

None

Need help?