Machinegun No-Recoil (for SgtRamirez)

[martin951]

YO, martin951 here.

I found a way, how to get (dynamic) recoil address.
Unfortunately, I don't know how to find the static one, but thats what SgtRamirez probably can do.

So here I am, with a tutorial how to find this address.
It's a long procedure so you can't use this yet in a multiplayer (You can, but a game is almost over before you find the right address).

What we need ? Cheat Engine ofcourse.

1st step :
Enter a game, doesn't matter if it's a practise or battle.

2nd step :
Connect Cheat Engine to robocraft.

3th step :
You need to setup hotkeys to do this.
Go to "Edit" tab > Settings > Hotkeys.
Select New Scan - Exect Value, and set your hotkey.
Select Next Scan - Increased Value, and set your hotkey.
Select Next Scan - Decreased Value, and set your hotkey.
Hit OK.

4th step :
In a scanning options, select Value type : float.
Scan Type : Exact Value. > 1.

5th step :
Go to the game, and start shoting until your recoil will be at max possible value.
Now hit your First Scan hotkey, and wait for the Cheat Engine to completely scan the game.
Now when Cheat Engine is done, stop shooting and hit Decreased Value hotkey.
Than start shooting agin, and hit Increased value.
REPEAT THIS PROCESS UNTIL YOU GET STABLE NUMBER OF VALUES. (I got 311)

6th step :
After you get stable number of values, put all of them into your "EDITOR" thingy. (Select all and hit that red arrow)

7th step :
Search the addresses on your own now, and filter-out all the values, that are more than 0 even when you are not shooting.
Now go back to the game, and shoot. You will see that the values are changing as you shoot.
SO it's just up to you to find the right addresses (it has to be 5 - 10 values).
After you find them, simple freeze them and you are DONE. (For better effect, go to settings in CE and set freeze interval to 1)

SO, SgtRamirez, I hope you will be able to find those static addresses and make a no-recoil trainer.
Or anyone else

Leave a Thanks if this post helped you !

Good Luck everybody !
Cheers.

[adam223344]

This is for the SMGs, correct?

[martin951]

It's in a title " Machinegun No-Recoil " so yeah.

[adam223344]

Mkay, I haven't been on it for awhile so I wouldn't know the guns n stuff, gonna try it now

[martin951]

Okey, good luck.

[adam223344]

It does seem that the SMG's are a lot more accurate, nice find

[martin951]

No problem, you can always leave a thanks

[SgtRamirez]

After ill wake up XD

[ryanxheroes]

Or you could go into cheat engine and go to memory and press Ctrl + A, and then copy this code into it and execute it.

(Make sure you join a match first then run the code in cheat engine or you will get a error)

[enable]
alloc(SMGNoSpread, 128)

aobscan(SpreadEntry, D9 98 88 00 00 00 8D 65 FC 5F C9 C3)
registersymbol(SpreadEntry)

aobscan(CrossHair1, D9 18 8B 47 0C 40 8B C8 89 4F 0C 8B 4F 08 8B 49 0C 3B C1)
registersymbol(CrossHair1)

aobscan(CrossHair2, D9 18 8B 47 10 40 8B C8 89 45 F8 89 4F 10 8B 4F 08 8B 49)
registersymbol(CrossHair2)

label(NoSpread)
label(CrossHairSpread1)
label(CrossHairSpread2)

label(SpreadReturn)
label(JunkStorage)
label(CrossHair1Return)
label(CrossHair2Return)

////
////

SpreadEntry:
jmp NoSpread
nop
SpreadReturn:

////

CrossHair1:
jmp CrossHairSpread1
CrossHair1Return:

////

CrossHair2:
jmp CrossHairSpread2
CrossHair2Return:

////
////

SMGNoSpread:
nop
nop

////

NoSpread:
fstp dword ptr [JunkStorage]
mov [eax+88],00000000
jmp SpreadReturn

////

CrossHairSpread1:
mov [eax],00000000
fstp dword ptr [JunkStorage]
mov eax,[edi+0C]
jmp CrossHair1Return

////

CrossHairSpread2:
mov [eax],00000000
fstp dword ptr [JunkStorage]
mov eax,[edi+10]
jmp CrossHair2Return

////
////


JunkStorage:
db 00 00 00 00

////
////


[disable]
dealloc(SMGNoSpread)
unregistersymbol(SpreadEntry)
unregistersymbol(CrossHair1)
unregistersymbol(CrossHair2)

SpreadEntry:
fstp dword ptr [eax+00000088]

CrossHair1:
fstp dword ptr [eax]
mov eax,[edi+0C]

CrossHair2:
fstp dword ptr [eax]
mov eax,[edi+10]

[martin951]

Or you could go into cheat engine and go to memory and press Ctrl + A, and then copy this code into it and execute it.

(Make sure you join a match first then run the code in cheat engine or you will get a error)

[enable]
alloc(SMGNoSpread, 128)

aobscan(SpreadEntry, D9 98 88 00 00 00 8D 65 FC 5F C9 C3)
registersymbol(SpreadEntry)

aobscan(CrossHair1, D9 18 8B 47 0C 40 8B C8 89 4F 0C 8B 4F 08 8B 49 0C 3B C1)
registersymbol(CrossHair1)

aobscan(CrossHair2, D9 18 8B 47 10 40 8B C8 89 45 F8 89 4F 10 8B 4F 08 8B 49)
registersymbol(CrossHair2)

label(NoSpread)
label(CrossHairSpread1)
label(CrossHairSpread2)

label(SpreadReturn)
label(JunkStorage)
label(CrossHair1Return)
label(CrossHair2Return)

////
////
////
////

SpreadEntry:
jmp NoSpread
nop
SpreadReturn:

////
////

CrossHair1:
jmp CrossHairSpread1
CrossHair1Return:

////
////

CrossHair2:
jmp CrossHairSpread2
CrossHair2Return:

////
////
////
////

SMGNoSpread:
nop
nop

////
////

NoSpread:
fstp dword ptr [JunkStorage]
mov [eax+88],00000000
jmp SpreadReturn

////
////

CrossHairSpread1:
mov [eax],00000000
fstp dword ptr [JunkStorage]
mov eax,[edi+0C]
jmp CrossHair1Return

////
////

CrossHairSpread2:
mov [eax],00000000
fstp dword ptr [JunkStorage]
mov eax,[edi+10]
jmp CrossHair2Return

////
////
////
////

JunkStorage:
db 00 00 00 00

////
////
////
////

[disable]
dealloc(SMGNoSpread)
unregistersymbol(SpreadEntry)
unregistersymbol(CrossHair1)
unregistersymbol(CrossHair2)

SpreadEntry:
fstp dword ptr [eax+00000088]

CrossHair1:
fstp dword ptr [eax]
mov eax,[edi+0C]

CrossHair2:
fstp dword ptr [eax]
mov eax,[edi+10]

How did you found that ?

[ryanxheroes]

Some user on another site (Game*****) Posted some memory codes saying they worked with SMG, yet it didn't work or inject (Error after error) It had some problems so I looked into it with a friend and cleaned it up. It should be working I haven't had time to see yet, so if you may?

[martin951]

Nah I am doing my things now.

[randomfunny]

Some user on another site (Game*****) Posted some memory codes saying they worked with SMG, yet it didn't work or inject (Error after error) It had some problems so I looked into it with a friend and cleaned it up. It should be working I haven't had time to see yet, so if you may?

hey man, i managed to find a value that wrote when the crosshairs opened and closed, it access three values and each time the gun opened one was modified and when it closed another one was, so i modified the one that opened the crosshair by putting in "nop" or false code that stopped it from opening, worked perfectly, now i just need to find what the main address is.

edit:
turns out i don't know anything about what I'm doing, I'm capable of finding the spread/recoil code but I'm not capable of finding the pointer, heres the addresses i found modifying the opening of the crosshair:

233CC917 - E8 548C0DE1 - call 044A5570
233CC91C - 83 C4 10 - add esp,10
233CC91F - D9 5F 14 - fstp dword ptr [edi+14] <<
233CC922 - E9 78000000 - jmp 233CC99F
233CC927 - E8 9CAB0DE1 - call 044A74C8

EAX=0BE8DB80
EBX=0446E5E8
ECX=04020AD8
EDX=04020B30
ESI=3F460300
EDI=2A3D3460
ESP=0028F610
EBP=0028F628
EIP=233CC922

[sepon]

Or you could go into cheat engine and go to memory and press Ctrl + A, and then copy this code into it and execute it.

(Make sure you join a match first then run the code in cheat engine or you will get a error)

[enable]
alloc(SMGNoSpread, 128)

aobscan(SpreadEntry, D9 98 88 00 00 00 8D 65 FC 5F C9 C3)
registersymbol(SpreadEntry)

aobscan(CrossHair1, D9 18 8B 47 0C 40 8B C8 89 4F 0C 8B 4F 08 8B 49 0C 3B C1)
registersymbol(CrossHair1)

aobscan(CrossHair2, D9 18 8B 47 10 40 8B C8 89 45 F8 89 4F 10 8B 4F 08 8B 49)
registersymbol(CrossHair2)

label(NoSpread)
label(CrossHairSpread1)
label(CrossHairSpread2)

label(SpreadReturn)
label(JunkStorage)
label(CrossHair1Return)
label(CrossHair2Return)

////
////

SpreadEntry:
jmp NoSpread
nop
SpreadReturn:

////

CrossHair1:
jmp CrossHairSpread1
CrossHair1Return:

////

CrossHair2:
jmp CrossHairSpread2
CrossHair2Return:

////
////

SMGNoSpread:
nop
nop

////

NoSpread:
fstp dword ptr [JunkStorage]
mov [eax+88],00000000
jmp SpreadReturn

////

CrossHairSpread1:
mov [eax],00000000
fstp dword ptr [JunkStorage]
mov eax,[edi+0C]
jmp CrossHair1Return

////

CrossHairSpread2:
mov [eax],00000000
fstp dword ptr [JunkStorage]
mov eax,[edi+10]
jmp CrossHair2Return

////
////


JunkStorage:
db 00 00 00 00

////
////


[disable]
dealloc(SMGNoSpread)
unregistersymbol(SpreadEntry)
unregistersymbol(CrossHair1)
unregistersymbol(CrossHair2)

SpreadEntry:
fstp dword ptr [eax+00000088]

CrossHair1:
fstp dword ptr [eax]
mov eax,[edi+0C]

CrossHair2:
fstp dword ptr [eax]
mov eax,[edi+10]

I tried this in game and got an error code.

[sepon]

Got down to 8 addresses that were 0 when not shooting etc. but then I was thinking all the hard work was done, til I couldn't remember how to freeze them help pls.