Offsets , Addresses, Pointers - CF/PH

**kelvinprosv** · 10-07-2020

Code:

//================[ Client ] ================//
#define aGAME_STATUS 0x15552D0
#define RoomInfo 0x1502CD4
#define BASIC_PLAYER_INFO 0x1363340
#define aCLTPlayerClient 0x19B83C0
#define CLTPlayerClientOffset 0x78
#define aPLAYER_VIEW 0x30
#define aPLAYER_RESPAWN 0x70
#define GameType 0x794
//=====================[ ESP ] ================//
#define aLTClientShell 0x19779FC
#define aLTModel 0x1506088
#define dwPlayerStart 0x1FC
#define dwPlayerSize 0xD80 
#define MEOffset 0x204
//=====================[ Zoombie ] ================//
#define ADDR_OPEN_MUTANT_SCREEN 0x8C89AE
#define ADDR_GAME_UI 0x1E4
#define OFFS_PV_NANO_SCREEN 0x72CC
#define OFFS_ZOMBIE_MODE 0x174
#define SCYTHE_1 0x9D8
#define SCYTHE_2 0x9C0
//================[ Glow ] ================//
#define GLOWESP 0xA530C0
#define GLOWTHICKESP 0x3F2CB8
#define TEXTURE_TYPE 0x0
//================[ Weapon ] ================//
#define WeaponMgr 0x1501620
#define ReloadAnimRatio 0x129C
#define ChangeWeaponAnimRatio 0x12A0
#define WeaponSize 0x5958
#define WeaponAmount 0x4000
#define Rapidfire_Rife_1 0x9451A2
#define Rapidfire_Rife_2 0x345D56
#define Rapidfire_Semi 0x120A8C4
#define Rapidfire_Sniper_1 0x798
#define Rapidfire_Sniper_2 0x6A8
#define m_WeaponCheckOld 0x780
#define m_WeaponCheckNew 0x690
#define m_WeaponStateNew 0x1A80
#define m_WeaponStateOld 0x6A8
#define WeaponCheckType 0x2D4
#define WeapomAmmo 0x2C4
#define WeaponViewCheck_1 0x2DC
#define WeaponViewCheck_2 x2BC
//================[ Memory] ================//
#define aBugDamage 0x0x15037D0
#define NoFallDamage 0x1501604
#define SemiRecoil 0x120A8F0
#define SemiReload 0x93F6DB
#define INVISIBLE_1 0x95C
#define INVISIBLE_2 0x86C
#define OFF_SPEED_SHIFT_1 0xAB4
#define OFF_SPEED_SHIFT_2 0x9D4
#define OFF_SPEED_SHIFT_3 0x964
#define OFF_SPEED_SHIFT_4 0x874
#define OFF_SPEED_MOVE_1 0xAB0
#define OFF_SPEED_MOVE_2 0xAC0
#define OFF_SPEED_NEW 0x9D0
#define OFF_SPEED_OLD 0x9E0
#define OFF_Fly_1 0x6C8
#define OFF_Fly_2 0x6D4
#define OFF_Fly_3 0xC92
#define OFFS_FLY_NEW_1 0x5EC
#define OFFS_FLY_NEW_2 0xD60  
#define OFFS_FLY_NEW_3 0xC90
#define oBalo 0x2B5D4
#define AntiTime 0x2D908E
#define ANTI_BOOM_1 0x7DF35A
#define ANTI_BOOM_2 0x264A68
#define StopallBoom 0x7DF424
#define AntiFlash 0x872843
#define SHOW_NAME 0x8D5BE0
#define BunnyHop 0x19B842C
#define BlockAllChat 0x19BC6E4
#define SpamSpray 0x33F54
#define RadioBlock 0x15538D2
#define OFF_BugDamage 0x298
#define Messboxkick 0x87438F
#define EFFECT 0x2C728C
//================[ Player Check ] ================//
#define OFFS_PLAYER_POS_1       0x574 
#define OFFS_PLAYER_POS_2       0xDCC
//================[ DC - CSHELL ] ================//
#define Bypass31_0_1 0x2A365E //LTB
#define Bypass31_0_2  0x2A31EA //DTX
#define Bypass 28_3 0x2A51F5
#define Bypass 28_5 0x2A5196
#define Bypass20_0 0x957F8A
#define Bypass20_1 0x35F90F
#define Bypass_19_3 0x150402C
#define Bypass14_3 0x15049AC
#define Bypass14_1 0x0x15049B0
#define Bypass1_2_1 0x35F80C
#define Bypass1_2_2 0x957E87
#define Bypass1_7 0x120A8C4
#define AntiDCBand 0x2CF031
#define DIPHook 0x2A5B25
//================[ SuperKill ] ================//
#define aModelNode 0x1501214
#define Head_1 0x38
#define MB_HEAD_1	0x38
#define MB_HEAD_2	0xD4
#define MB_NECK 0x170
#define MB_L_Clavicle 0x20C
#define MB_R_Clavicle 0x2A8
#define MB_SPINE1_1 0x344
#define MB_SPINE1_1_0 0x344 + 0x8
#define MB_SPINE1_2 0x3E0
#define MB_SPINE1_2_0 0x3E0 + 0x8
#define MB_SPINE_1	0x47C
#define MB_SPINE_1_0 0x47C + 0x8
#define MB_SPINE_2	0x518
#define MB_SPINE_2_0 0x518 + 0x8
#define MB_L_UPPERARM 0x5B4
#define MB_L_UPPERARM_0 0x5B4 + 0x8
#define MB_R_UPPERARM 0x650
#define MB_R_UPPERARM_0 0x650 + 0x8
#define MB_L_FOREARM_1	0x6EC
#define MB_L_FOREARM_1_0 0x6EC + 0x8
#define MB_R_FOREARM_1 0x788
#define MB_R_FOREARM_1_0 0x788 + 0x8
#define MB_L_FOREARM_2	0x824
#define MB_L_FOREARM_2_0 0x824 + 0x8
#define MB_R_FOREARM_2 0x8C0
#define MB_R_FOREARM_2_0 0x8C0 + 0x8
#define MB_L_HAND	0x95C
#define MB_L_HAND_0 0x95C + 0x8
#define MB_R_HAND 0x9F8
#define MB_R_HAND_0 0x9F8 + 0x8
#define MB_PELVIS 0xA94
#define MB_PELVIS_0 0xA94 + 0x8
#define MB_L_THIGH	 0xB30
#define MB_L_THIGH_0 0xB30 + 0x8
#define MB_L_CALF_1 0xBCC
#define MB_L_CALF_1_0 0xBCC + 0x8
#define MB_L_CALF_2 0xC68
#define MB_L_CALF_2_0 0xC68 + 0x8
#define MB_L_CALF_3 0xD04
#define MB_L_CALF_3_0 0xD04 + 0x8
#define MB_L_FOOT 0xDA0
#define MB_L_FOOT_0 0xDA0 + 0x8
#define MB_L_TOE 0xE3C
#define MB_L_TOE0_0 0xE3C + 0x8
#define MB_R_THIGH	 0xED8
#define MB_R_THIGH_0 0xED8 + 0x8
#define MB_R_CALF_1 0xF74
#define MB_R_CALF_1_0 0xF74 + 0x8
#define MB_R_CALF_2 0x1010
#define MB_R_CALF_2_0 0x1010 + 0x8
#define MB_R_CALF_3 0x10AC
#define MB_R_CALF_3_0 0x10AC + 0x8
#define MB_R_FOOT 0x1148
#define MB_R_FOOT_0 0x1148 + 0x8
#define MB_R_TOE0 0x11E4 + 0x8
#define MB_R_TOE0_0 0x11E4 + 0x8
//================[ Message ] ================//
#define ADDR_ADD_ESI 0x45E500
#define OFFS_PUSH_1 0x77
#define OFFS_PUSH_2 0x31
#define OFFS_ADD_ESP 0x14
//================[ Crossfire.exe ] ================//
#define WallArray 0xEACA24
#define ESC_ADDS 0xE65E54
#define SMOKE_CLIENT 0x3F177C
#define POSITION 0x104
#define POSITION_YEN 0x164
#define POSITION_WALL 0x88
#define WEAPON_CLIENT 0x1544

**PassT** · 10-07-2020

Gentlemen, is this practical for x64? If I remember correctly, pH Server changed to x64? Am I right?

**kelvinprosv** · 10-07-2020

Originally Posted by PassT

Gentlemen, is this practical for x64? If I remember correctly, pH Server changed to x64? Am I right?

Copy crossfire.exe change crossfire.dat or any name
Code autoit easy :

Code:

Run ("crossfire.dat -HGWSK 5D1F6BCE57B00BFFE783F7253C9ABD033C457EF37474CF7854 310C9FDF0FB8621598A7B4821A7521D3FDA19145C55789E733 68FA6B2D5AF459F88B85820C26222425175CFE3961C4290AB4 37C48BD246FCB405710E6BE650B2E8F6572F9D80A423D30F96 969C000F3E2B4EF5B11A48A9")

**PassT** · 10-07-2020

Originally Posted by kelvinprosv

Copy crossfire.exe change crossfire.dat or any name
Code autoit easy :

Code:

Run ("crossfire.dat -HGWSK 5D1F6BCE57B00BFFE783F7253C9ABD033C457EF37474CF7854 310C9FDF0FB8621598A7B4821A7521D3FDA19145C55789E733 68FA6B2D5AF459F88B85820C26222425175CFE3961C4290AB4 37C48BD246FCB405710E6BE650B2E8F6572F9D80A423D30F96 969C000F3E2B4EF5B11A48A9")

I'm sorry, I didn't understand you. Do you mean that pH server can continue to run x86 in the way you give it? (I see that x86 and x64 are reserved in the game catalog) maybe my understanding is wrong, and I'm sorry for that

**kelvinprosv** · 10-07-2020

Originally Posted by PassT

I'm sorry, I didn't understand you. Do you mean that pH server can continue to run x86 in the way you give it? (I see that x86 and x64 are reserved in the game catalog) maybe my understanding is wrong, and I'm sorry for that

download autoit to install and open a new .au3.

set the run command as above and compile it finished opening you will have Crossfire.exe, you can also change crossfire.exe to crossfire.dat. good luck

**Anger5K** · 10-08-2020

Originally Posted by kelvinprosv

Code:

//================[ Client ] ================//
#define aGAME_STATUS 0x15552D0
#define RoomInfo 0x1502CD4
#define BASIC_PLAYER_INFO 0x1363340
#define aCLTPlayerClient 0x19B83C0
#define CLTPlayerClientOffset 0x78
#define aPLAYER_VIEW 0x30
#define aPLAYER_RESPAWN 0x70
#define GameType 0x794
//=====================[ ESP ] ================//
#define aLTClientShell 0x19779FC
#define aLTModel 0x1506088
#define dwPlayerStart 0x1FC
#define dwPlayerSize 0xD80 
#define MEOffset 0x204
//=====================[ Zoombie ] ================//
#define ADDR_OPEN_MUTANT_SCREEN 0x8C89AE
#define ADDR_GAME_UI 0x1E4
#define OFFS_PV_NANO_SCREEN 0x72CC
#define OFFS_ZOMBIE_MODE 0x174
#define SCYTHE_1 0x9D8
#define SCYTHE_2 0x9C0
//================[ Glow ] ================//
#define GLOWESP 0xA530C0
#define GLOWTHICKESP 0x3F2CB8
#define TEXTURE_TYPE 0x0
//================[ Weapon ] ================//
#define WeaponMgr 0x1501620
#define ReloadAnimRatio 0x129C
#define ChangeWeaponAnimRatio 0x12A0
#define WeaponSize 0x5958
#define WeaponAmount 0x4000
#define Rapidfire_Rife_1 0x9451A2
#define Rapidfire_Rife_2 0x345D56
#define Rapidfire_Semi 0x120A8C4
#define Rapidfire_Sniper_1 0x798
#define Rapidfire_Sniper_2 0x6A8
#define m_WeaponCheckOld 0x780
#define m_WeaponCheckNew 0x690
#define m_WeaponStateNew 0x1A80
#define m_WeaponStateOld 0x6A8
#define WeaponCheckType 0x2D4
#define WeapomAmmo 0x2C4
#define WeaponViewCheck_1 0x2DC
#define WeaponViewCheck_2 x2BC
//================[ Memory] ================//
#define aBugDamage 0x0x15037D0
#define NoFallDamage 0x1501604
#define SemiRecoil 0x120A8F0
#define SemiReload 0x93F6DB
#define INVISIBLE_1 0x95C
#define INVISIBLE_2 0x86C
#define OFF_SPEED_SHIFT_1 0xAB4
#define OFF_SPEED_SHIFT_2 0x9D4
#define OFF_SPEED_SHIFT_3 0x964
#define OFF_SPEED_SHIFT_4 0x874
#define OFF_SPEED_MOVE_1 0xAB0
#define OFF_SPEED_MOVE_2 0xAC0
#define OFF_SPEED_NEW 0x9D0
#define OFF_SPEED_OLD 0x9E0
#define OFF_Fly_1 0x6C8
#define OFF_Fly_2 0x6D4
#define OFF_Fly_3 0xC92
#define OFFS_FLY_NEW_1 0x5EC
#define OFFS_FLY_NEW_2 0xD60  
#define OFFS_FLY_NEW_3 0xC90
#define oBalo 0x2B5D4
#define AntiTime 0x2D908E
#define ANTI_BOOM_1 0x7DF35A
#define ANTI_BOOM_2 0x264A68
#define StopallBoom 0x7DF424
#define AntiFlash 0x872843
#define SHOW_NAME 0x8D5BE0
#define BunnyHop 0x19B842C
#define BlockAllChat 0x19BC6E4
#define SpamSpray 0x33F54
#define RadioBlock 0x15538D2
#define OFF_BugDamage 0x298
#define Messboxkick 0x87438F
#define EFFECT 0x2C728C
//================[ Player Check ] ================//
#define OFFS_PLAYER_POS_1       0x574 
#define OFFS_PLAYER_POS_2       0xDCC
//================[ DC - CSHELL ] ================//
#define Bypass31_0_1 0x2A365E //LTB
#define Bypass31_0_2  0x2A31EA //DTX
#define Bypass 28_3 0x2A51F5
#define Bypass 28_5 0x2A5196
#define Bypass20_0 0x957F8A
#define Bypass20_1 0x35F90F
#define Bypass_19_3 0x150402C
#define Bypass14_3 0x15049AC
#define Bypass14_1 0x0x15049B0
#define Bypass1_2_1 0x35F80C
#define Bypass1_2_2 0x957E87
#define Bypass1_7 0x120A8C4
#define AntiDCBand 0x2CF031
#define DIPHook 0x2A5B25
//================[ SuperKill ] ================//
#define aModelNode 0x1501214
#define Head_1 0x38
#define MB_HEAD_1    0x38
#define MB_HEAD_2    0xD4
#define MB_NECK 0x170
#define MB_L_Clavicle 0x20C
#define MB_R_Clavicle 0x2A8
#define MB_SPINE1_1 0x344
#define MB_SPINE1_1_0 0x344 + 0x8
#define MB_SPINE1_2 0x3E0
#define MB_SPINE1_2_0 0x3E0 + 0x8
#define MB_SPINE_1    0x47C
#define MB_SPINE_1_0 0x47C + 0x8
#define MB_SPINE_2    0x518
#define MB_SPINE_2_0 0x518 + 0x8
#define MB_L_UPPERARM 0x5B4
#define MB_L_UPPERARM_0 0x5B4 + 0x8
#define MB_R_UPPERARM 0x650
#define MB_R_UPPERARM_0 0x650 + 0x8
#define MB_L_FOREARM_1    0x6EC
#define MB_L_FOREARM_1_0 0x6EC + 0x8
#define MB_R_FOREARM_1 0x788
#define MB_R_FOREARM_1_0 0x788 + 0x8
#define MB_L_FOREARM_2    0x824
#define MB_L_FOREARM_2_0 0x824 + 0x8
#define MB_R_FOREARM_2 0x8C0
#define MB_R_FOREARM_2_0 0x8C0 + 0x8
#define MB_L_HAND    0x95C
#define MB_L_HAND_0 0x95C + 0x8
#define MB_R_HAND 0x9F8
#define MB_R_HAND_0 0x9F8 + 0x8
#define MB_PELVIS 0xA94
#define MB_PELVIS_0 0xA94 + 0x8
#define MB_L_THIGH     0xB30
#define MB_L_THIGH_0 0xB30 + 0x8
#define MB_L_CALF_1 0xBCC
#define MB_L_CALF_1_0 0xBCC + 0x8
#define MB_L_CALF_2 0xC68
#define MB_L_CALF_2_0 0xC68 + 0x8
#define MB_L_CALF_3 0xD04
#define MB_L_CALF_3_0 0xD04 + 0x8
#define MB_L_FOOT 0xDA0
#define MB_L_FOOT_0 0xDA0 + 0x8
#define MB_L_TOE 0xE3C
#define MB_L_TOE0_0 0xE3C + 0x8
#define MB_R_THIGH     0xED8
#define MB_R_THIGH_0 0xED8 + 0x8
#define MB_R_CALF_1 0xF74
#define MB_R_CALF_1_0 0xF74 + 0x8
#define MB_R_CALF_2 0x1010
#define MB_R_CALF_2_0 0x1010 + 0x8
#define MB_R_CALF_3 0x10AC
#define MB_R_CALF_3_0 0x10AC + 0x8
#define MB_R_FOOT 0x1148
#define MB_R_FOOT_0 0x1148 + 0x8
#define MB_R_TOE0 0x11E4 + 0x8
#define MB_R_TOE0_0 0x11E4 + 0x8
//================[ Message ] ================//
#define ADDR_ADD_ESI 0x45E500
#define OFFS_PUSH_1 0x77
#define OFFS_PUSH_2 0x31
#define OFFS_ADD_ESP 0x14
//================[ Crossfire.exe ] ================//
#define WallArray 0xEACA24
#define ESC_ADDS 0xE65E54
#define SMOKE_CLIENT 0x3F177C
#define POSITION 0x104
#define POSITION_YEN 0x164
#define POSITION_WALL 0x88
#define WEAPON_CLIENT 0x1544

#define aCLTPlayerClient 0x197AEA8
Not 0x19B83C0 Wrong

String: IInstanceHandleClient.Default

**loney57** · 10-08-2020

tutorial please

- - - Updated - - -

HOW TO USE THIS PLEASE!

**kelvinprosv** · 10-08-2020

Originally Posted by Anger5K

#define aCLTPlayerClient 0x197AEA8
Not 0x19B83C0 Wrong

String: IInstanceHandleClient.Default

IDA Search ?

**Anger5K** · 10-08-2020

use x64dbg and Search : IInstanceHandleClient.Default

**aS1an1Sm** · 10-08-2020

Bypass_19_3 ? Wrong ?

**Anger5K** · 10-09-2020

Correct

Pattern = 8B 0D 2C 40 D7 57

Thread: Offsets , Addresses, Pointers - CF/PH

Thread Tools

Display

Offsets , Addresses, Pointers - CF/PH

Change Crossfire_64

The Following User Says Thank You to Anger5K For This Useful Post:

Similar Threads

[Release] Offsets , Addresses, Pointers - September Update - CFWest/NA

Offsets , Addresses, Pointers - July Update - CFWest/NA

How to get a Pointer and Offset Address.

Offset addresses

[Tutorial] Finding addresses/pointers for warrock in CE