Results 1 to 11 of 11
  1. #1
    L100664719's Avatar
    Join Date
    Jun 2018
    Gender
    male
    Posts
    22
    Reputation
    10
    Thanks
    2

    Unhappy Glow Esp , I found the memory address and didn't know how to modify it.

    I need your help. Sorry, I don't quite understand the memory address below
    ----------------------------------------------------------------------------------------------
    cshell.dll+A8C80 - 53 - push ebx

    cshell.dll+A8C81 - 8B 5C 24 08 - mov ebx,[esp+08]

    cshell.dll+A8C85 - 80 FB 01 - cmp bl,01 { 1 }

    cshell.dll+A8C88 - 55 - push ebp

    cshell.dll+A8C89 - 56 - push esi

    cshell.dll+A8C8A - 75 14 - jne cshell.dll+A8CA0

    cshell.dll+A8C8C - A1 744ACD17 - mov eax,[cshell.dll+15F4A74] { [007903E8] }

    cshell.dll+A8C91 - 8B 88 1C020000 - mov ecx,[eax+0000021C]

    cshell.dll+A8C97 - 68 449F6B17 - push cshell.dll+FD9F44 { ["PlayerOutLineRender 1"] }

    cshell.dll+A8C9C - FF D1 - call ecx

    cshell.dll+A8C9E - EB 13 - jmp cshell.dll+A8CB3

    cshell.dll+A8CA0 - 8B 15 744ACD17 - mov edx,[cshell.dll+15F4A74] { [007903E8] }

    cshell.dll+A8CA6 - 8B 82 1C020000 - mov eax,[edx+0000021C]


    cshell.dll+A8CAC - 68 2C9F6B17 - push cshell.dll+FD9F2C { ["PlayerOutLineRender 0"] }

    cshell.dll+A8CB1 - FF D0 - call eax

    cshell.dll+A8CB3 - 0FB6 CB - movzx ecx,bl

    cshell.dll+A8CB6 - 83 C4 04 - add esp,04 { 4 }

    cshell.dll+A8CB9 - 51 - push ecx

    cshell.dll+A8CBA - 68 149F6B17 - push cshell.dll+FD9F14 { ["PlayerOutLineRender %d"] }

    cshell.dll+A8CBF - FF 15 6C556A17 - call dword ptr [cshell.dll+FC556C] { ->MSVCR80.printf }

    ------------------------------------------------------------------------------------------------------------------------
    cshell.dll+A8C80 - 53 - push ebx

    How should Push be effective? If you know, please help me. Thank you for not knowing C++ assembly very well.

    - - - Updated - - -

    Maybe I can share a lot of our Chinese CF hacker functions to you.
    Last edited by L100664719; 01-29-2019 at 10:57 AM.

  2. #2
    vaisefud3's Avatar
    Join Date
    Jun 2017
    Gender
    male
    Posts
    955
    Reputation
    10
    Thanks
    150
    My Mood
    Bored
    Quote Originally Posted by L100664719 View Post
    I need your help. Sorry, I don't quite understand the memory address below
    ----------------------------------------------------------------------------------------------
    cshell.dll+A8C80 - 53 - push ebx

    cshell.dll+A8C81 - 8B 5C 24 08 - mov ebx,[esp+08]

    cshell.dll+A8C85 - 80 FB 01 - cmp bl,01 { 1 }

    cshell.dll+A8C88 - 55 - push ebp

    cshell.dll+A8C89 - 56 - push esi

    cshell.dll+A8C8A - 75 14 - jne cshell.dll+A8CA0

    cshell.dll+A8C8C - A1 744ACD17 - mov eax,[cshell.dll+15F4A74] { [007903E8] }

    cshell.dll+A8C91 - 8B 88 1C020000 - mov ecx,[eax+0000021C]

    cshell.dll+A8C97 - 68 449F6B17 - push cshell.dll+FD9F44 { ["PlayerOutLineRender 1"] }

    cshell.dll+A8C9C - FF D1 - call ecx

    cshell.dll+A8C9E - EB 13 - jmp cshell.dll+A8CB3

    cshell.dll+A8CA0 - 8B 15 744ACD17 - mov edx,[cshell.dll+15F4A74] { [007903E8] }

    cshell.dll+A8CA6 - 8B 82 1C020000 - mov eax,[edx+0000021C]


    cshell.dll+A8CAC - 68 2C9F6B17 - push cshell.dll+FD9F2C { ["PlayerOutLineRender 0"] }

    cshell.dll+A8CB1 - FF D0 - call eax

    cshell.dll+A8CB3 - 0FB6 CB - movzx ecx,bl

    cshell.dll+A8CB6 - 83 C4 04 - add esp,04 { 4 }

    cshell.dll+A8CB9 - 51 - push ecx

    cshell.dll+A8CBA - 68 149F6B17 - push cshell.dll+FD9F14 { ["PlayerOutLineRender %d"] }

    cshell.dll+A8CBF - FF 15 6C556A17 - call dword ptr [cshell.dll+FC556C] { ->MSVCR80.printf }

    ------------------------------------------------------------------------------------------------------------------------
    cshell.dll+A8C80 - 53 - push ebx

    How should Push be effective? If you know, please help me. Thank you for not knowing C++ assembly very well.

    - - - Updated - - -

    Maybe I can share a lot of our Chinese CF hacker functions to you.
    It's not the push, you can't do it from CE.
    You have to call it, parsing the GlowStatus as a parameter.
    Press thanks if I helped

    Xigncode Security:


  3. #3
    Fєηix's Avatar
    Join Date
    Apr 2013
    Gender
    male
    Location
    Brαzil
    Posts
    1,178
    Reputation
    114
    Thanks
    6,891
    My Mood
    Sleepy
    You can do this with CE yes.

    just use the Auto Assembler


  4. The Following 3 Users Say Thank You to Fєηix For This Useful Post:

    96neko (08-08-2019),DepHax (01-29-2019),L100664719 (01-31-2019)

  5. #4
    (Virus)'s Avatar
    Join Date
    Dec 2018
    Gender
    male
    Posts
    137
    Reputation
    10
    Thanks
    41
    My Mood
    Fine
    Quote Originally Posted by L100664719 View Post
    I need your help. Sorry, I don't quite understand the memory address below
    ----------------------------------------------------------------------------------------------
    cshell.dll+A8C80 - 53 - push ebx

    cshell.dll+A8C81 - 8B 5C 24 08 - mov ebx,[esp+08]

    cshell.dll+A8C85 - 80 FB 01 - cmp bl,01 { 1 }

    cshell.dll+A8C88 - 55 - push ebp

    cshell.dll+A8C89 - 56 - push esi

    cshell.dll+A8C8A - 75 14 - jne cshell.dll+A8CA0

    cshell.dll+A8C8C - A1 744ACD17 - mov eax,[cshell.dll+15F4A74] { [007903E8] }

    cshell.dll+A8C91 - 8B 88 1C020000 - mov ecx,[eax+0000021C]

    cshell.dll+A8C97 - 68 449F6B17 - push cshell.dll+FD9F44 { ["PlayerOutLineRender 1"] }

    cshell.dll+A8C9C - FF D1 - call ecx

    cshell.dll+A8C9E - EB 13 - jmp cshell.dll+A8CB3

    cshell.dll+A8CA0 - 8B 15 744ACD17 - mov edx,[cshell.dll+15F4A74] { [007903E8] }

    cshell.dll+A8CA6 - 8B 82 1C020000 - mov eax,[edx+0000021C]


    cshell.dll+A8CAC - 68 2C9F6B17 - push cshell.dll+FD9F2C { ["PlayerOutLineRender 0"] }

    cshell.dll+A8CB1 - FF D0 - call eax

    cshell.dll+A8CB3 - 0FB6 CB - movzx ecx,bl

    cshell.dll+A8CB6 - 83 C4 04 - add esp,04 { 4 }

    cshell.dll+A8CB9 - 51 - push ecx

    cshell.dll+A8CBA - 68 149F6B17 - push cshell.dll+FD9F14 { ["PlayerOutLineRender %d"] }

    cshell.dll+A8CBF - FF 15 6C556A17 - call dword ptr [cshell.dll+FC556C] { ->MSVCR80.printf }

    ------------------------------------------------------------------------------------------------------------------------
    cshell.dll+A8C80 - 53 - push ebx

    How should Push be effective? If you know, please help me. Thank you for not knowing C++ assembly very well.

    - - - Updated - - -

    Maybe I can share a lot of our Chinese CF hacker functions to you.
    ican help u
    thats my d 1 s c o r d
    Peter girgs#6098

  6. #5
    L100664719's Avatar
    Join Date
    Jun 2018
    Gender
    male
    Posts
    22
    Reputation
    10
    Thanks
    2
    Thank you, my friend. I already know how to use CE to call, but I still need some CALL assembly instructions. Because CF in China detects DLL very much, we can only use external calls. At present, it is not clear how to write this assembly CALL code, but thank you all the same.

  7. #6
    topnet5's Avatar
    Join Date
    Jan 2019
    Gender
    male
    Posts
    1
    Reputation
    10
    Thanks
    0

    Thumbs up I need to contact you

    Quote Originally Posted by Fєηix View Post
    You can do this with CE yes.

    just use the Auto Assembler

    I need to contact you just give me an social account so i can access to you bro

  8. #7
    DepHax's Avatar
    Join Date
    Jan 2019
    Gender
    female
    Posts
    7
    Reputation
    10
    Thanks
    0
    Quote Originally Posted by L100664719 View Post
    Thank you, my friend. I already know how to use CE to call, but I still need some CALL assembly instructions. Because CF in China detects DLL very much, we can only use external calls. At present, it is not clear how to write this assembly CALL code, but thank you all the same.
    What CF China AntiCheat use?
    XignCode?

  9. #8
    L100664719's Avatar
    Join Date
    Jun 2018
    Gender
    male
    Posts
    22
    Reputation
    10
    Thanks
    2
    TP{TenProtect} ,If you inject DLL into the game, it will be detected immediately, and you will be penalized for permanently blocking your account.

  10. #9
    vaisefud3's Avatar
    Join Date
    Jun 2017
    Gender
    male
    Posts
    955
    Reputation
    10
    Thanks
    150
    My Mood
    Bored
    Quote Originally Posted by L100664719 View Post
    TP{TenProtect} ,If you inject DLL into the game, it will be detected immediately, and you will be penalized for permanently blocking your account.
    Tried making a manual map injector?

  11. #10
    hkchen123's Avatar
    Join Date
    Sep 2017
    Gender
    male
    Posts
    15
    Reputation
    10
    Thanks
    0
    dll&injection deteted, using driver read memory better for TenProtect

  12. #11
    (Virus)'s Avatar
    Join Date
    Dec 2018
    Gender
    male
    Posts
    137
    Reputation
    10
    Thanks
    41
    My Mood
    Fine
    Quote Originally Posted by hkchen123 View Post
    dll&injection deteted, using driver read memory better for TenProtect
    use Hide Dll To hIde ur dll

Similar Threads

  1. [Help] Have a question about the memory address
    By plus88 in forum General Game Hacking
    Replies: 0
    Last Post: 07-20-2013, 02:33 AM
  2. [Help] Freeze the memory address value
    By ::V.I.P:: in forum Visual Basic Programming
    Replies: 3
    Last Post: 04-15-2013, 07:45 PM
  3. [Info] I can pass the memory address modification to achieve wallhack
    By cui3030 in forum Mission Against Terror Discussions
    Replies: 1
    Last Post: 11-30-2012, 09:00 AM
  4. [Release] Proof the Memory CHAMS and WALLHACK !
    By kmanev073 in forum CrossFire Hack Coding / Programming / Source Code
    Replies: 19
    Last Post: 01-28-2012, 07:31 AM
  5. [Help] Memory addresses and pointers -.- FML
    By PsychicSounds in forum General Game Hacking
    Replies: 0
    Last Post: 05-15-2011, 09:30 AM