Help - How to find No Recoil addresses?

[mmbob]

Actually, with an unpacked CShell, no recoil is extremely trivial to find. Maybe 5 minutes of work.

[formage]

Actually, with an unpacked CShell, no recoil is extremely trivial to find. Maybe 5 minutes of work.

then why dont you make one if you know how do it so fast

[Void]

I can't find a reliable UCE yet, but I know how you would go about finding no recoil. Lets see:

Starting by getting 2 or 3 different guns with a noticeable difference in recoil. start with the high gun and then switch and search for a decreased value. You can keep doing this for a while, switching back and forth searching for higher and lower values. Then you can try switching to a weapon like knife or grenade which have no recoil. Maybe search zero... again wouldn't know for sure, I've never done it, but if I was right that would narrow down ur results really quickly!

Now when ur all said and done u should find a value. Find what references this. Now disassemble and find out how that function works. Now edit the part that causes recoil. You could also try making a signature for it so you don't have to find it again.

By NOPing that function you should have ur no recoil.

Would this be the case for every game? I'm just wondering...

[powerfear]

mmbob is right, no recoil is really easy to find, you don't even need a unpacked CShell, just a plugin to make your debugger undetected, there is a lots out there... I was using hide debugger with StrongOD but i am now using Stealth64 that allow you to debug on 64 bit machine and make OllyDBG undetected at the sametime.

The problem is that you need a bypass to make the kind of memory modification no recoil need. Making a bypass is quite harder then finding no recoil.

[Void]

Power, do you use the same method as Why to find no recoil?

[powerfear]

Power, do you use the same method as Why to find no recoil?

I just do an hex array search for the original op code of no recoil.

[CAFlames]

I just do an hex array search for the original op code of no recoil.

ahhh

Can u help me unpack chsell? ive tried many different ways ot unpack and cant get it..

[Void]

Mind sharing the op codes?

[ac1d_buRn]

Mind sharing the op codes?

[php]
byte NoRecoilOff[] = { 0xD8, 0x66, 0x54 };
byte NoRecoilOff2[] = { 0xD9, 0x46, 0x54 };
byte NoRecoilOff3[] = { 0xD9, 0x5E, 0x54, 0xD9, 0x46, 0x48 };
byte NoRecoilOff4[] = { 0xD9, 0x5E, 0x48 };
[/php]

That what you need?
Im not good at memory terms lol

[lythanhlong]

but isn't no recoil buggy since nexon practically patched it meaning it would work but not as well as it use to

[Xlilzoosk8rX]

Mind telling us how you found them?

they are console commands.
the console commands stay the same just the addresses are updated.
and i need to make a correction on my last post.
its not perturbed firing speed, its perturbedfiringincrease.