GetBonePositionEx CALL EDX Game breakdown

[qhtbvv]

void GetBonePositionEx(cObject* obj, UINT Bone, Transform* Trans)
{
		__asm
		{
			mov ecx, aLTModel
			mov ecx, [ecx]
			MOV EDX, DWORD PTR DS : [ECX]
			MOV EDX, DWORD PTR DS : [EDX + 0x3c]
			PUSH 1
			PUSH Trans
			PUSH Bone
			PUSH obj
			CALL EDX
		}
}

[IMG]https://s1.ax1*****m/2018/12/15/FaU8JJ.png[/IMG]



Why did the game crash?

[vaisefud3]

void GetBonePositionEx(cObject* obj, UINT Bone, Transform* Trans)
{
		__asm
		{
			mov ecx, aLTModel
			mov ecx, [ecx]
			MOV EDX, DWORD PTR DS : [ECX]
			MOV EDX, DWORD PTR DS : [EDX + 0x3c]
			PUSH 1
			PUSH Trans
			PUSH Bone
			PUSH obj
			CALL EDX
		}
}

[IMG]https://s1.ax1*****m/2018/12/15/FaU8JJ.png[/IMG]



Why did the game crash?

Are you using findpattern to get the address? If not, you need to add cshell....

[qhtbvv]

Are you using findpattern to get the address? If not, you need to add cshell....

Yes, I use this. findpattern

[DEiseL]

Yes, I use this. findpattern

Use Address and try if worked i will send u mine findpattern

[qhtbvv]

Use address Neither does it work.

- - - Updated - - -

Use Address and try if worked i will send u mine findpattern

Use Address Neither does it work.

[DEiseL]

Do u have team veiwer ??

[qhtbvv]

Do u have team veiwer ??

????????????

[MemoryThePast]

void GetBonePositionEx(cObject* obj, UINT Bone, Transform* Trans)
{
		__asm
		{
			mov ecx, aLTModel
			mov ecx, [ecx]
			MOV EDX, DWORD PTR DS : [ECX]
			MOV EDX, DWORD PTR DS : [EDX + 0x3C]
			PUSH 1
			PUSH Trans
			PUSH Bone
			PUSH obj
			CALL EDX
		}
}

[IMG]https://s1.ax1*****m/2018/12/15/FaU8JJ.png[/IMG]



Why did the game crash?

void cEngine::GetBonePositionEx(cObject* obj, UINT Bone, _Transform* Trans)
{
        DWORD CShell = (DWORD)GetModuleHandleW(L"CShell.dll");
	DWORD pLTModel = *(DWORD*)(CShell  + aLTModel);

	__asm
	{
		MOV ECX, pLTModel
		MOV EDX, DWORD PTR DS : [ECX]
		MOV EDX, DWORD PTR DS : [EDX + 0x3C]
		PUSH 1
		PUSH Trans
		PUSH Bone
		PUSH obj
		CALL EDX
	}
}

8B 0D ?? ?? ?? ?? 8B 44 24 0C 8B 11

[qhtbvv]

void cEngine::GetBonePositionEx(cObject* obj, UINT Bone, _Transform* Trans)
{
        DWORD CShell = (DWORD)GetModuleHandleW(L"CShell.dll");
	DWORD pLTModel = *(DWORD*)(CShell  + aLTModel);

	__asm
	{
		MOV ECX, pLTModel
		MOV EDX, DWORD PTR DS : [ECX]
		MOV EDX, DWORD PTR DS : [EDX + 0x3C]
		PUSH 1
		PUSH Trans
		PUSH Bone
		PUSH obj
		CALL EDX
	}
}

8B 0D ?? ?? ?? ?? 8B 44 24 0C 8B 11

Yes, that's right, but the game still crashed

[MemoryThePast]

Yes, that's right, but the game still crashed

if you still getting crash ingame. the problem is in your esp code

[JB.UC]

u should use static address.

#define pLTModel 0x?? //8B 0D ?? ?? ?? ?? 8B ?? 8B 40 34 8D 54 24 18

int GetNodeTransform(pObject* Obj,UINT Node,pTrans* Trans)
{
	unsigned long g_CShell = (unsigned long)GetModuleHandleA(ecshell);

	if (g_CShell != 0)
	{
		unsigned long LTModel = *(unsigned long*)(g_CShell + pLTModel);
		__asm
		{
			mov ecx,LTModel;
			mov edx,dword ptr ds:[ecx];
			mov edx,dword ptr ds:[edx+0x3C];
			push 1;
			push Trans;
			push Node;
			push Obj;
			call edx;
		}
	}
	return false;
}

[luizimloko]

//Address updated to newest CFBR Version
#define ADDR_LTMODEL_CSHELL		0x0124909C //8B 0D ?? ?? ?? ?? 8B 11 8B 52 ?? 6A ?? 8D 7E ??

void GetBonePositionEx( __int32 *iObject, UINT iBoneID, void *pTransform )
{
	char *szCShell = "CShell.dll";

	__asm
	{
		mov edx, ADDR_LTMODEL_CSHELL
		push szCShell
		call dword ptr ds:[ GetModuleHandleA ]
		add edx, eax

		mov ecx, edx
		mov ecx, [ ecx ]
		mov edx, dword ptr ds:[ ecx ]
		mov edx, dword ptr ds:[ edx + 0x3C ]
		push 1
		push pTransform
		push iBoneID
		push iObject
		call edx
	}
}

[qhtbvv]

u should use static address.

#define pLTModel 0x?? //8B 0D ?? ?? ?? ?? 8B ?? 8B 40 34 8D 54 24 18

int GetNodeTransform(pObject* Obj,UINT Node,pTrans* Trans)
{
	unsigned long g_CShell = (unsigned long)GetModuleHandleA(ecshell);

	if (g_CShell != 0)
	{
		unsigned long LTModel = *(unsigned long*)(g_CShell + pLTModel);
		__asm
		{
			mov ecx,LTModel;
			mov edx,dword ptr ds:[ecx];
			mov edx,dword ptr ds:[edx+0x3C];
			push 1;
			push Trans;
			push Node;
			push Obj;
			call edx;
		}
	}
	return false;
}

The address is correct.

- - - Updated - - -

//Address updated to newest CFBR Version
#define ADDR_LTMODEL_CSHELL		0x0124909C //8B 0D ?? ?? ?? ?? 8B 11 8B 52 ?? 6A ?? 8D 7E ??

void GetBonePositionEx( __int32 *iObject, UINT iBoneID, void *pTransform )
{
	char *szCShell = "CShell.dll";

	__asm
	{
		mov edx, ADDR_LTMODEL_CSHELL
		push szCShell
		call dword ptr ds:[ GetModuleHandleA ]
		add edx, eax

		mov ecx, edx
		mov ecx, [ ecx ]
		mov edx, dword ptr ds:[ ecx ]
		mov edx, dword ptr ds:[ edx + 0x3C ]
		push 1
		push pTransform
		push iBoneID
		push iObject
		call edx
	}
}

The address is correct.