inmate (08-25-2012),rawr im a tiger (08-24-2012),rileyjstrickland (08-26-2012),stevonator (08-30-2012)
I guess this address is useless for u if you are working with classes/structs, but anyway, here is what i've just found.
Host required?
-No
Private or Public Match?
-Both
Address:
What does it return as Integer?Code:iw5mp.exe+64C918 (0x00A4C918)
-> The PlayerID of the Player you are aiming at (Enemy & Friend)
-> 0 if you are flashed
-> 0 if you are dead
What can i do with that address?
As example, you could parse which ID is returned to read the PlayerName, Health, Ammo ... for an overlay.
Hint: Every PlayerName, Health has it's own Address.
(Example: PlayerName for Player 6: 0x01D1606C + 0x1600 (Old address (1.9.433) + updatevalue (1.9.441))
Have Fun,
~ hoschi111
Aaaand: Please apologize my english. I'm not a native english speaker
Last edited by hoschi111; 08-23-2012 at 05:33 PM.
inmate (08-25-2012),rawr im a tiger (08-24-2012),rileyjstrickland (08-26-2012),stevonator (08-30-2012)
Might use this for a name stealing aimbot :3
Yeah you are right. This is a wonderful idea. Maybe someone will release an external hack with that.
Don't know how you're doing.. but you can steal the name when the aimbot choose the best target... like
Code:for(int i = 0; i < PlayerMax; i++){ //Loop the players //Get Best Player to shoot here... SendCommandToConsole("userinfo \"\\name\\%s\"", Clients[i]->Name); //Where Clients[i] is the best entity }
CoD Minion from 09/19/2012 to 01/10/2013
I just created an example tool which uses this address. (Attachment)
Features:
- Force Host
- Return PlayerID
- Return PlayerName
- Return Health
https://virusscan.jotti.org/en/scanre...b303970b47890f
https://www.virustotal.com/file/c416...is/1345927166/
I also found an address which returns the distance to a wall/aim/where ever your crosshair points to (centerscreen / crosshair) in (i guess) centimeters as integer (4 Byte)
~ hoschi111Code:iw5mp.exe+64C91C (0x00A4C91C)
Last edited by Nachos; 08-25-2012 at 03:42 PM.
inmate (08-30-2012),stevonator (08-30-2012)
stevonator (08-29-2012)
Hey,
nice to see that someone uses my sharing
Some people here on MPGH use a certain module of a selected process to calculate the "real" address, but you don't need the "calculation". I already did that for you.
To read that value behind this address "iw5mp.exe+64C918 (0x00A4C918)", you need the address in "()".
Due to the fact, the address returns an integer, you have to use it like this:
ReadInteger(0x00A4C918, 4);
Ah no, i'll explain it (with VB.Net) how i did it.
(You've to port it in C# if needed)
Here is my VB.Net Code:
- Label1 is the PlayerID
- Label2 is my CURRENT Player
- Label3 is the LAST (if you missed the focus) Player
- Label7 gets the Health of the LAST Player (and updates untill new Player is in your crosshair)
- If Label2 contains a PlayerName, it changes the PlayerName of Player #1 with the name from the player you are aiming on
Hope you can learn from itCode:ublic Class Form1 Dim PID As String Dim updateaddy As Integer = &H1600 Dim TimerID As Integer Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load Timer1.Start() End Sub Public Function ByteArrayToTextString(ByRef Barr() As Byte) As String Dim enc As System.Text.Encoding = System.Text.Encoding.Default Return enc.GetString(Barr) End Function Private Sub Timer1_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer1.Tick Try Label1.Text = ReadMemory(Of Integer)(&HA4C918) Select Case Label1.Text Case 1 getplayerdata(1) Case 2 getplayerdata(2) Case 3 getplayerdata(3) Case 4 getplayerdata(4) Case 5 getplayerdata(5) Case 6 getplayerdata(6) Case 7 getplayerdata(7) Case 8 getplayerdata(8) Case 9 getplayerdata(9) Case 10 getplayerdata(10) Case 11 getplayerdata(11) Case 12 getplayerdata(12) Case 13 getplayerdata(13) Case 14 getplayerdata(14) Case 15 getplayerdata(15) Case 16 getplayerdata(16) Case 17 getplayerdata(17) Case 18 getplayerdata(18) Case Else Label2.Text = "None" End Select Catch ex As Exception End Try End Sub Private Sub Label2_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Label2.Click End Sub Private Sub Label2_TextChanged(ByVal sender As Object, ByVal e As System.EventArgs) Handles Label2.TextChanged If Not Label2.Tex*****ntains("None") Then If CheckBox1.Checked = True Then WriteMemory2(&H1D043D0 + &H1600, Label3.Text, False) End If End If End Sub Private Sub getplayerdata(ByVal pid As Integer) Try Dim dif As Integer = &H274 * pid Dim dif2 As Integer = &H38EC * pid TimerID = dif Label2.Text = ByteArrayToTextString(ReadMemory(&H1D043D0 + dif2 + updateaddy, 116)) Timer2.Start() Catch ex As Exception End Try End Sub Private Sub Timer2_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer2.Tick Try Label7.Text = ReadMemory(Of Integer)(&H1B3C144 + TimerID) Catch ex As Exception End Try End Sub Private Sub forcehost_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles forcehost.Tick Try WriteMemory(&H5AB20BC + updateaddy, 0) WriteMemory(&H5AB2070 + updateaddy, 0) WriteMemory(&H5AB2080 + updateaddy, 0) WriteMemory(&H5AB36BC, 0) WriteMemory(&H5AB36CC, 0) WriteMemory(&H5AB3708, 0) WriteMemory(&H5AB3718, 0) Catch ex As Exception End Try End Sub End Class
If there are still any questions, ask me
Btw: Used master131's memory module with some "modifications" by me.
~ hoschi111
Last edited by hoschi111; 08-30-2012 at 11:46 AM.
stevonator (08-30-2012)
thanks, but if i understand it well, the address displays the player# you're aiming at...
for example if it returns 1 then you're aiming at player1...?
ok thx
Yes exactly!
With this address you can loop through the ingame players and get the selected player like my program does.
Calculation is in "getplayerdata".
It's really simple if you understand the playermanagement in mw3.
If you like my posts, i'm thankful for every Rep or Thanks.
Yes i understand them all, the player names, hp, ammo (you can even know when they need to reload look at there clip), etc etc
Thanks