HelpPlease Fix it Source FlyHack

Posts 115 of 30 · Page 1 of 2
Please Fix it Source FlyHack
10044651 BE 507B5110 MOV ESI,CShell.10517B50 ; ASCII "WeaponReload"
10044656 B9 0D000000 MOV ECX,0D
1004465B 33ED XOR EBP,EBP
1004465D F3:A6 REPE CMPS BYTE PTR ES:[EDI],BYTE PTR DS:>
1004465F 0F85 A5000000 JNZ CShell.1004470A
10044665 807C24 24 01 CMP BYTE PTR SS:[ESP+24],1
1004466A 75 32 JNZ SHORT CShell.1004469E
1004466C 8B4424 1C MOV EAX,DWORD PTR SS:[ESP+1C]
10044670 8B48 54 MOV ECX,DWORD PTR DS:[EAX+54]
10044673 85C9 TEST ECX,ECX
10044675 74 27 JE SHORT CShell.1004469E
10044677 E8 24BF2600 CALL CShell.102B05A0
1004467C 50 PUSH EAX
1004467D E8 8E8D1F00 CALL CShell.1023D410
10044682 83C4 04 ADD ESP,4
10044685 85C0 TEST EAX,EAX
10044687 894424 20 MOV DWORD PTR SS:[ESP+20],EAX
1004468B 0F84 99250000 JE CShell.10046C2A
10044691 8BD0 MOV EDX,EAX
10044693 81C2 6C040000 ADD EDX,46C
10044699 ^E9 7DFDFFFF JMP CShell.1004441B
1004469E 80FA 01 CMP DL,1
100446A1 0F85 83250000 JNZ CShell.10046C2A
100446A7 8B15 007A5F10 MOV EDX,DWORD PTR DS:[105F7A00] ; CShell.106068C0



105F7A00 = 0x5F7A00 <=== this is Right or not CShell_Pointer ???

#define CShell_Pointer 0x5F7A00 //
#define Fly 0x5F0 <=== im find use logger
bool flyhack;

DWORD CShell = (DWORD)GetModuleHandleA("CShell.dll");
DWORD BASEPLAYER = *(DWORD*)(CShell + CShell_Pointer + 0x54);

if(flyhack)
{
if(GetAsyncKeyState(VK_SHIFT))
{
*(float*)(*(DWORD *)(BASEPLAYER) + Fly) = -2.125f;
}
else
{
*(float*)(*(DWORD *)(BASEPLAYER) + Fly) = 1;
}
}

FlyHack Not Work n crash Client MFC
What wrong.
Someone help me?
1. You can`t find 5F0 with a normal Logger cuz the PlayerPointer Offsets change`s InGame!
2. Try this:

Code:
if(GetAsyncKeyState(VK_LSHIFT))
    *(float*)(pPlayerPointer + 0x64C) = -1.9; //-2.125 is patched
else
    *(float*)(pPlayerPointer + 0x64C) = 1;
PlayerPointer:

Code:
CShell_Pointer = (FindPattern(CShell, 0xFFFFFF, (PBYTE)"\xc6\x01\x01\x8b\x15\x00\x00\x00\x00\x8b\x82\x00\x00\x00\x00\x8B" ,(char*)"xxxxx????xx????x"));
CShell_Pointer =  (*(DWORD*)(CShell_Pointer + 5)) - CShell;

DWORD pPlayerPointer = *(DWORD*)(CShell + CShell_Pointer + 0x54);
If that work, give Creditz
Quote Originally Posted by CFHackerExtreme View Post
1. You can`t find 5F0 with a normal Logger cuz the PlayerPointer Offsets change`s InGame!
2. Try this:

Code:
if(GetAsyncKeyState(VK_LSHIFT))
    *(float*)(pPlayerPointer + 0x64C) = -1.9; //-2.125 is patched
else
    *(float*)(pPlayerPointer + 0x64C) = 1;
PlayerPointer:

Code:
CShell_Pointer = (FindPattern(CShell, 0xFFFFFF, (PBYTE)"\xc6\x01\x01\x8b\x15\x00\x00\x00\x00\x8b\x82\x00\x00\x00\x00\x8B" ,(char*)"xxxxx????xx????x"));
CShell_Pointer =  (*(DWORD*)(CShell_Pointer + 5)) - CShell;

DWORD pPlayerPointer = *(DWORD*)(CShell + CShell_Pointer + 0x54);
If that work, give Creditz
You can make a patterns for PlayerPTR offsets .. And it didn't change for me ..
i try this patren clientshell

CShell_Pointer = (FindPattern(CShell, 0xFFFFFF, (PBYTE)"\xc6\x01\x01\x8b\x15\x00\x00\x00\x00\x8b\x 82\x00\x00\x00\x00\x8B" ,(char*)"xxxxx????xx????x"));
CShell_Pointer = (*(DWORD*)(CShell_Pointer + 5)) - CShell;

and i have 5F7A00 <=== CF indonesia

n flyhack use Binary scane
"8B 8C 24 ?? ?? ?? ?? 85 C9 0F 86 ?? ?? ?? ??"

and i have
10481B6F 8B8C24 F0050000 MOV ECX,DWORD PTR SS:[ESP+5F0] <===== This is my offset fly hack.
10481B76 85C9 TEST ECX,ECX
10481B78 0F86 EC000000 JBE CShell.10481C6A
10481B7E 8BBC24 F8050000 MOV EDI,DWORD PTR SS:[ESP+5F8]
10481B85 33C0 XOR EAX,EAX


right or not pointer clientshell and fly offset?
Quote Originally Posted by ramo View Post

You can make a patterns for PlayerPTR offsets .. And it didn't change for me ..
I Know, but you can only Log InGame!
@Astr3Lune
The Offset 5F0 existrs 500000 times in the CShell -.-
Quote Originally Posted by CFHackerExtreme View Post
I Know, but you can only Log InGame!
@Astr3Lune
The Offset 5F0 existrs 500000 times in the CShell -.-
ollydbg find 5F0 use binary
and than palyerptr CF indo i think wrong.
look this

100446A7 8B15 007A5F10 MOV EDX,DWORD PTR DS:[105F7A00] ; CShell.106068C0

i'm use this palyerptr 0x5F7A00 but client Error i think wrong addres
i try this playerptr 0x6068C0 but stay Error.

hhmmm
i can't make hack playerptr or clietnshell.
because i don't know wich addres palyerptr

This
105F7A00

or this
CShell.106068C0
Quote Originally Posted by Astr3Lune View Post
ollydbg find 5F0 use binary
and than palyerptr CF indo i think wrong.
look this

100446A7 8B15 007A5F10 MOV EDX,DWORD PTR DS:[105F7A00] ; CShell.106068C0

i'm use this palyerptr 0x5F7A00 but client Error i think wrong addres
i try this playerptr 0x6068C0 but stay Error.

hhmmm
i can't make hack playerptr or clietnshell.
because i don't know wich addres palyerptr

This
105F7A00

or this
CShell.106068C0
Are you kidding me?
THE FLY OFFSET CAN ONLY FOUND INGAME!!!!!!!!!!!!!!

I can give you 50000 Binary Scans that log the Offset 0x5F0, but it is not the Fly Offset
I need 50000 Binary Scans.

and i need Walk thurogh walls Source code and patren or Binary Scans.

any 50000 Binary Scans CFHackerExtreme?

and i will give credit your name in my hack if you give me hook d3d9.ll Undetect

can u Help me?
Quote Originally Posted by Astr3Lune View Post
I need 50000 Binary Scans.

and i need Walk thurogh walls Source code and patren or Binary Scans.

any 50000 Binary Scans CFHackerExtreme?

and i will give credit your name in my hack if you give me hook d3d9.ll Undetect

can u Help me?
Oh my God, are you kidding me?
Nobody will give you a Undetected DIP / EndScene Hook!
And please learn a little bit about Memory Hacking
And for WTW, i have posted a FULL WTW Source

C&P this in your Projekt!
It works too 100 %!

Code:
if (GetAsyncKeyState(VK_RSHIFT))
            for (int i=0; i<0x1FF; ++i)
                if (*(float*)(pPlayerPointer + 4*i) == 56)
                            *(float*)(pPlayerPointer + 4*i) = -56;
And i call pPlayerPointer as DWORD pPlayerPointer = *(DWORD*)(CShell + PlayerPointer + 0x54);

If that don`t work, you are too stupid for that
And give Creditz
Quote Originally Posted by CFHackerExtreme View Post
Oh my God, are you kidding me?
Nobody will give you a Undetected DIP / EndScene Hook!
And please learn a little bit about Memory Hacking
And for WTW, i have posted a FULL WTW Source

C&P this in your Projekt!
It works too 100 %!

Code:
if (GetAsyncKeyState(VK_RSHIFT))
            for (int i=0; i<0x1FF; ++i)
                if (*(float*)(pPlayerPointer + 4*i) == 56)
                            *(float*)(pPlayerPointer + 4*i) = -56;
And i call pPlayerPointer as DWORD pPlayerPointer = *(DWORD*)(CShell + PlayerPointer + 0x54);

If that don`t work, you are too stupid for that
And give Creditz

hahah kiding brother

0x1FF <== this pointer Wtw?

i can't put source Wtw in my project.
because wtw source not full
n must Update the addy wtw.

i dont know how to update wtw addy


can you give me full source wtw no error if to build + Dll main?
You`re stupid? This Source is Full ^^
And 0x1FF is in CF EU he right Offset

And it`s simple to find the New Offset:

Attach CShell to OllyDG
Search the String "StaticMisionName"
Use the second String in CShell cuz "StaticMissionName" exists 2 times
Search for
Code:
PUSH "Offset"
That is the new Offset for my WTW Source
Quote Originally Posted by CFHackerExtreme View Post
You`re stupid? This Source is Full ^^
And 0x1FF is in CF EU he right Offset

And it`s simple to find the New Offset:

Attach CShell to OllyDG
Search the String "StaticMisionName"
Use the second String in CShell cuz "StaticMissionName" exists 2 times
Search for
Code:
PUSH "Offset"
That is the new Offset for my WTW Source
100AA125 |. 68 DC735210 PUSH CSHELLDU.105273DC ; ASCII "StaticMissionName"
100AA12A |. 8BCE MOV ECX,ESI
100AA12C |. E8 CFC33100 CALL CSHELLDU.103C6500
100AA131 |. 8BC8 MOV ECX,EAX
100AA133 |. E8 28AD3300 CALL CSHELLDU.103E4E60
100AA138 |. 8B0D F4795F10 MOV ECX,DWORD PTR DS:[0x105F79F4]
100AA13E |. 8B11 MOV EDX,DWORD PTR DS:[ECX]
100AA140 |. 8B82 14020000 MOV EAX,DWORD PTR DS:[EDX+0x214]
100AA146 |. 68 98735210 PUSH CSHELLDU.10527398
100AA14B |. 6A 00 PUSH 0x0
100AA14D |. 68 455A0000 PUSH 0x5A45 << this offset wtw ?
100AA152 |. FFD0 CALL EAX
100AA154 |. 50 PUSH EAX
Quote Originally Posted by sabatbatu View Post
100AA125 |. 68 DC735210 PUSH CSHELLDU.105273DC ; ASCII "StaticMissionName"
100AA12A |. 8BCE MOV ECX,ESI
100AA12C |. E8 CFC33100 CALL CSHELLDU.103C6500
100AA131 |. 8BC8 MOV ECX,EAX
100AA133 |. E8 28AD3300 CALL CSHELLDU.103E4E60
100AA138 |. 8B0D F4795F10 MOV ECX,DWORD PTR DS:[0x105F79F4]
100AA13E |. 8B11 MOV EDX,DWORD PTR DS:[ECX]
100AA140 |. 8B82 14020000 MOV EAX,DWORD PTR DS:[EDX+0x214]
100AA146 |. 68 98735210 PUSH CSHELLDU.10527398
100AA14B |. 6A 00 PUSH 0x0
100AA14D |. 68 455A0000 PUSH 0x5A45 << this offset wtw ?
100AA152 |. FFD0 CALL EAX
100AA154 |. 50 PUSH EAX
No

/msgtooshort
Quote Originally Posted by CFHackerExtreme View Post
No

/msgtooshort
which offset ?
Send me your CShell, i will make a Pattern
Posts 115 of 30 · Page 1 of 2
This thread is closed for replies.

Similar Threads

Tags for this Thread

None

Need help?