GetBonePositionEx CALL EDX Game breakdown

Posts 1–13 of 13 · Page 1 of 1
GetBonePositionEx CALL EDX Game breakdown
Code:
void GetBonePositionEx(cObject* obj, UINT Bone, Transform* Trans)
{
		__asm
		{
			mov ecx, aLTModel
			mov ecx, [ecx]
			MOV EDX, DWORD PTR DS : [ECX]
			MOV EDX, DWORD PTR DS : [EDX + 0x3c]
			PUSH 1
			PUSH Trans
			PUSH Bone
			PUSH obj
			CALL EDX
		}
}




Why did the game crash?
Quote Originally Posted by qhtbvv View Post
Code:
void GetBonePositionEx(cObject* obj, UINT Bone, Transform* Trans)
{
		__asm
		{
			mov ecx, aLTModel
			mov ecx, [ecx]
			MOV EDX, DWORD PTR DS : [ECX]
			MOV EDX, DWORD PTR DS : [EDX + 0x3c]
			PUSH 1
			PUSH Trans
			PUSH Bone
			PUSH obj
			CALL EDX
		}
}




Why did the game crash?
Are you using findpattern to get the address? If not, you need to add cshell....
Yes, I use this. findpattern
Quote Originally Posted by vaisefud3 View Post
Are you using findpattern to get the address? If not, you need to add cshell....

Yes, I use this. findpattern
Quote Originally Posted by qhtbvv View Post
Yes, I use this. findpattern
Use Address and try if worked i will send u mine findpattern
Use address Neither does it work.

- - - Updated - - -

Quote Originally Posted by DEiseL View Post


Use Address and try if worked i will send u mine findpattern
Use Address Neither does it work.
Do u have team veiwer ??
Quote Originally Posted by DEiseL View Post
Do u have team veiwer ??
????????????
Quote Originally Posted by qhtbvv View Post
Code:
void GetBonePositionEx(cObject* obj, UINT Bone, Transform* Trans)
{
		__asm
		{
			mov ecx, aLTModel
			mov ecx, [ecx]
			MOV EDX, DWORD PTR DS : [ECX]
			MOV EDX, DWORD PTR DS : [EDX + 0x3C]
			PUSH 1
			PUSH Trans
			PUSH Bone
			PUSH obj
			CALL EDX
		}
}




Why did the game crash?
Code:
void cEngine::GetBonePositionEx(cObject* obj, UINT Bone, _Transform* Trans)
{
        DWORD CShell = (DWORD)GetModuleHandleW(L"CShell.dll");
	DWORD pLTModel = *(DWORD*)(CShell  + aLTModel);

	__asm
	{
		MOV ECX, pLTModel
		MOV EDX, DWORD PTR DS : [ECX]
		MOV EDX, DWORD PTR DS : [EDX + 0x3C]
		PUSH 1
		PUSH Trans
		PUSH Bone
		PUSH obj
		CALL EDX
	}
}
Code:
8B 0D ?? ?? ?? ?? 8B 44 24 0C 8B 11
Quote Originally Posted by MemoryThePast View Post
Code:
void cEngine::GetBonePositionEx(cObject* obj, UINT Bone, _Transform* Trans)
{
        DWORD CShell = (DWORD)GetModuleHandleW(L"CShell.dll");
	DWORD pLTModel = *(DWORD*)(CShell  + aLTModel);

	__asm
	{
		MOV ECX, pLTModel
		MOV EDX, DWORD PTR DS : [ECX]
		MOV EDX, DWORD PTR DS : [EDX + 0x3C]
		PUSH 1
		PUSH Trans
		PUSH Bone
		PUSH obj
		CALL EDX
	}
}
Code:
8B 0D ?? ?? ?? ?? 8B 44 24 0C 8B 11
Yes, that's right, but the game still crashed
Quote Originally Posted by qhtbvv View Post
Yes, that's right, but the game still crashed
if you still getting crash ingame. the problem is in your esp code
u should use static address.

Code:
#define pLTModel 0x?? //8B 0D ?? ?? ?? ?? 8B ?? 8B 40 34 8D 54 24 18

int GetNodeTransform(pObject* Obj,UINT Node,pTrans* Trans)
{
	unsigned long g_CShell = (unsigned long)GetModuleHandleA(ecshell);

	if (g_CShell != 0)
	{
		unsigned long LTModel = *(unsigned long*)(g_CShell + pLTModel);
		__asm
		{
			mov ecx,LTModel;
			mov edx,dword ptr ds:[ecx];
			mov edx,dword ptr ds:[edx+0x3C];
			push 1;
			push Trans;
			push Node;
			push Obj;
			call edx;
		}
	}
	return false;
}
Quote Originally Posted by JB.UC View Post
u should use static address.

Code:
#define pLTModel 0x?? //8B 0D ?? ?? ?? ?? 8B ?? 8B 40 34 8D 54 24 18

int GetNodeTransform(pObject* Obj,UINT Node,pTrans* Trans)
{
	unsigned long g_CShell = (unsigned long)GetModuleHandleA(ecshell);

	if (g_CShell != 0)
	{
		unsigned long LTModel = *(unsigned long*)(g_CShell + pLTModel);
		__asm
		{
			mov ecx,LTModel;
			mov edx,dword ptr ds:[ecx];
			mov edx,dword ptr ds:[edx+0x3C];
			push 1;
			push Trans;
			push Node;
			push Obj;
			call edx;
		}
	}
	return false;
}
The address is correct.

- - - Updated - - -

Quote Originally Posted by luizimloko View Post
Code:
//Address updated to newest CFBR Version
#define ADDR_LTMODEL_CSHELL		0x0124909C //8B 0D ?? ?? ?? ?? 8B 11 8B 52 ?? 6A ?? 8D 7E ??

void GetBonePositionEx( __int32 *iObject, UINT iBoneID, void *pTransform )
{
	char *szCShell = "CShell.dll";

	__asm
	{
		mov edx, ADDR_LTMODEL_CSHELL
		push szCShell
		call dword ptr ds:[ GetModuleHandleA ]
		add edx, eax

		mov ecx, edx
		mov ecx, [ ecx ]
		mov edx, dword ptr ds:[ ecx ]
		mov edx, dword ptr ds:[ edx + 0x3C ]
		push 1
		push pTransform
		push iBoneID
		push iObject
		call edx
	}
}
The address is correct.
Code:
//Address updated to newest CFBR Version
#define ADDR_LTMODEL_CSHELL		0x0124909C //8B 0D ?? ?? ?? ?? 8B 11 8B 52 ?? 6A ?? 8D 7E ??

void GetBonePositionEx( __int32 *iObject, UINT iBoneID, void *pTransform )
{
	char *szCShell = "CShell.dll";

	__asm
	{
		mov edx, ADDR_LTMODEL_CSHELL
		push szCShell
		call dword ptr ds:[ GetModuleHandleA ]
		add edx, eax

		mov ecx, edx
		mov ecx, [ ecx ]
		mov edx, dword ptr ds:[ ecx ]
		mov edx, dword ptr ds:[ edx + 0x3C ]
		push 1
		push pTransform
		push iBoneID
		push iObject
		call edx
	}
}
Posts 1–13 of 13 · Page 1 of 1

Post a Reply

Similar Threads

Tags for this Thread

None

Talk with us