ESP AOB

Posts 1–15 of 15 · Page 1 of 1
Quote Originally Posted by VRXX View Post
hello guys, do you know if this still works for the CF X64?
https://www.mpgh.net/forum/showthread.php?t=1425540

Can anyone share the addresses or AOB to update?


thanks.
This is very old, I suggest you do a new one.
The only pointer you need is CLTClientShell, which can be found all over cshell, so I'm not gonna teach how to get it.
Then you put it on reclass and get the structures you need.
Here is some reference for you:

Code:
// Your id
auto my_id = g_ltclientshell->m_LocalPlayerID;

// Your player
auto me = g_ltclientshell->m_Players[ my_id ];

// Loop
for ( int i = 0; i < g_ltclientshell->m_PlayerCount->m_Count; i++ )
{
	if ( i == my_id )
		continue;

	auto player = g_ltclientshell->m_Players[ i ];
}
Won't work
Quote Originally Posted by VRXX View Post
hello guys, do you know if this still works for the CF X64?
https://www.mpgh.net/forum/showthread.php?t=1425540

Can anyone share the addresses or AOB to update?


thanks.
It won't work because GetBonePosition uses asm and asm can't be used in x64 (It can but in a weird way). If you have a replacement for asm and the newest offsets/classes then you can get that esp working.
Quote Originally Posted by SpiderEater420 View Post
It won't work because GetBonePosition uses asm and asm can't be used in x64 (It can but in a weird way). If you have a replacement for asm and the newest offsets/classes then you can get that esp working.
bruhh, why not use getbonposvt from ltmodel?
Quote Originally Posted by MemoryThePast View Post
bruhh, why not use getbonposvt from ltmodel?
can you share the AOB to update the ESP?
Quote Originally Posted by VRXX View Post
can you share the AOB to update the ESP?
Maybe gonna share more later xd

Code:
0F B6 87 ?? ?? ?? ?? 48 69 C8 ?? ?? ?? ?? 0F B6 BC 39 ?? ?? ?? ?? 48 8B 35 ?? ?? ?? ?? 40 0F BE CF E8 ?? ?? ?? ?? 84 C0

cshell_x64.WebView::CFWebView::operator=+91E860 - EB 16                 - jmp cshell_x64.WebView::CFWebView::operator=+91E878
cshell_x64.WebView::CFWebView::operator=+91E862 - 0FB6 87 88020000      - movzx eax,byte ptr [rdi+00000288] => OFFSET_PLAYERSTART
cshell_x64.WebView::CFWebView::operator=+91E869 - 48 69 C8 980D0000     - imul rcx,rax,00000D98 { 3480 } => OFFSET_PLAYERSIZE
cshell_x64.WebView::CFWebView::operator=+91E870 - 0FB6 BC 39 98020000   - movzx edi,byte ptr [rcx+rdi+00000298] => OFFSET_ME
cshell_x64.WebView::CFWebView::operator=+91E878 - 48 8B 35 D17EBE00     - mov rsi,[cshell_x64.dll+1AFE0B0] { [7FFC50E97710] }
cshell_x64.WebView::CFWebView::operator=+91E87F - 40 0FBE CF            - movsx ecx,dil
cshell_x64.WebView::CFWebView::operator=+91E883 - E8 4805EDFF           - call cshell_x64.WebView::CFWebView::operator=+7EEDD0
cshell_x64.WebView::CFWebView::operator=+91E888 - 84 C0                 - test al,al
Quote Originally Posted by mamo007 View Post


Maybe gonna share more later xd

Code:
0F B6 87 ?? ?? ?? ?? 48 69 C8 ?? ?? ?? ?? 0F B6 BC 39 ?? ?? ?? ?? 48 8B 35 ?? ?? ?? ?? 40 0F BE CF E8 ?? ?? ?? ?? 84 C0

cshell_x64.WebView::CFWebView::operator=+91E860 - EB 16                 - jmp cshell_x64.WebView::CFWebView::operator=+91E878
cshell_x64.WebView::CFWebView::operator=+91E862 - 0FB6 87 88020000      - movzx eax,byte ptr [rdi+00000288] => OFFSET_PLAYERSTART
cshell_x64.WebView::CFWebView::operator=+91E869 - 48 69 C8 980D0000     - imul rcx,rax,00000D98 { 3480 } => OFFSET_PLAYERSIZE
cshell_x64.WebView::CFWebView::operator=+91E870 - 0FB6 BC 39 98020000   - movzx edi,byte ptr [rcx+rdi+00000298] => OFFSET_ME
cshell_x64.WebView::CFWebView::operator=+91E878 - 48 8B 35 D17EBE00     - mov rsi,[cshell_x64.dll+1AFE0B0] { [7FFC50E97710] }
cshell_x64.WebView::CFWebView::operator=+91E87F - 40 0FBE CF            - movsx ecx,dil
cshell_x64.WebView::CFWebView::operator=+91E883 - E8 4805EDFF           - call cshell_x64.WebView::CFWebView::operator=+7EEDD0
cshell_x64.WebView::CFWebView::operator=+91E888 - 84 C0                 - test al,al


thanks, how can i get LT Client Shell & LTModel Address?

btw would be a great share
Quote Originally Posted by VRXX View Post
thanks, how can i get LT Client Shell & LTModel Address?

btw would be a great share
LTClientShell is easy to find. xd


Code:
LTModel: 48 8B 0D ?? ?? ?? ?? 4C 8D 4C 24 ?? 48 8B 57 ?? 4C 8D 05 ?? ?? ?? ?? 48 8B 01 FF 50 ?? 85 C0
Quote Originally Posted by VRXX View Post
thanks, how can i get LT Client Shell & LTModel Address?

btw would be a great share
String: IClientShell.Default


----
Quote Originally Posted by TheGe2k View Post
String: IClientShell.Default


----

can you send me the updated classes? searched and did not find :/
Quote Originally Posted by SpiderEater420 View Post
It won't work because GetBonePosition uses asm and asm can't be used in x64 (It can but in a weird way). If you have a replacement for asm and the newest offsets/classes then you can get that esp working.
I didn't knew asm was just x86. I guess we can't use shellcode in x64 then lmao
It isn't
Quote Originally Posted by vaisefud3 View Post
I didn't knew asm was just x86. I guess we can't use shellcode in x64 then lmao
It isn't. It's just much harder to implement asm in x64 than in x86.

- - - Updated - - -

Quote Originally Posted by MemoryThePast View Post
bruhh, why not use getbonposvt from ltmodel?
Well yeah, you probably could but the source code he mentioned used asm so thats why I just mentioned asm.
Quote Originally Posted by SpiderEater420 View Post
It isn't. It's just much harder to implement asm in x64 than in x86.

- - - Updated - - -



Well yeah, you probably could but the source code he mentioned used asm so thats why I just mentioned asm.
I was being sarcastic. It's exactly the same thing.
Posts 1–15 of 15 · Page 1 of 1

Post a Reply

Similar Threads

Tags for this Thread

None

Talk with us