FLY HACK !
Define Offset:
How to Get BASEPLAYER?
BONUS FOR YOU !
Weapon Recoil without error
Code:
FLY = 0x5F0; NORECOIL1 = 0x22E; NORECOIL2 = 0xC; NORECOIL3 = 0x234;
Code:
if(flyhack == 1)
{
if(GetAsyncKeyState(VK_SHIFT))
{
*(float*)(*(DWORD *)(BASEPLAYER) + FLY) = -2.125f;
}
else
{
*(float*)(*(DWORD *)(BASEPLAYER) + FLY) = 1;
}
}
if(flyhack == 2)
{
if(GetAsyncKeyState(VK_MENU))
{
*(float*)(*(DWORD *)(BASEPLAYER) + FLY) = -2.125f;
}
else
{
*(float*)(*(DWORD *)(BASEPLAYER) + FLY) = 1;
}
}
if(flyhack == 3)
{
if(GetAsyncKeyState(VK_CONTROL))
{
*(float*)(*(DWORD *)(BASEPLAYER) + FLY) = -2.125f;
}
else
{
*(float*)(*(DWORD *)(BASEPLAYER) + FLY) = 1;
}
}
if(!flyhack)
{
*(float*)(*(DWORD *)(BASEPLAYER) + FLY) = 1;
}
How to Get BASEPLAYER?
Code:
03F4F8F0 8B15 188F3804 MOV EDX,DWORD PTR DS:[4388F18] ; cshell.04397130 03F4F8F6 0FB682 58610000 MOVZX EAX,BYTE PTR DS:[EDX+6158] 03F4F8FD 3D FF000000 CMP EAX,0FF 03F4F902 74 3D JE SHORT cshell.03F4F941 03F4F904 69C0 C8040000 IMUL EAX,EAX,4C8 03F4F90A 8B8410 74610000 MOV EAX,DWORD PTR DS:[EAX+EDX+6174] 03F4F911 85C0 TEST EAX,EAX 03F4F913 74 2C JE SHORT cshell.03F4F941 03F4F915 80B8 6D170100 01 CMP BYTE PTR DS:[EAX+1176D],1 03F4F91C 74 23 JE SHORT cshell.03F4F941 03F4F91E 8A4424 04 MOV AL,BYTE PTR SS:[ESP+4] 03F4F922 84C0 TEST AL,AL 03F4F924 8841 68 MOV BYTE PTR DS:[ECX+68],AL 03F4F927 74 18 JE SHORT cshell.03F4F941 03F4F929 8B0D F0C6C104 MOV ECX,DWORD PTR DS:[4C1C6F0] 03F4F92F 6A 00 PUSH 0 03F4F931 6A 00 PUSH 0 03F4F933 6A 00 PUSH 0 03F4F935 6A 00 PUSH 0 03F4F937 68 843F2E04 PUSH cshell.042E3F84 ; ASCII "rez/Snd2/Ghost/Etc/EscapeAirplane.wav"
Code:
BASEPLAYER = *(DWORD *)(0x4388F18) + 0x54
BONUS FOR YOU !
Weapon Recoil without error

Code:
*(DWORD *)(*(DWORD *)(BASEPLAYER) + NORECOIL1) = - 1; *(DWORD *)(*(DWORD *)(BASEPLAYER) + NORECOIL2) = 10000000; *(DWORD *)(*(DWORD *)(BASEPLAYER) + NORECOIL3) = 10000000;


