QuestionSpread Adress

Posts 1–15 of 18 · Page 1 of 2
Spread Adress
Could someone please give me the working spread address? I have been searching for a week now and still haven't found it. Don't start yelling it has been posted many times before cause 0x8AB478 is an incorrect address. And yes, my sourcecode is correct.

If you do not know the address you can always help me by giving me the way to find it or a UCE(unlikely).

Thank you...
Hey,
Dump warrock.exe then search on google "How to find addies WarRock" then you'll find what to search.

Search method:
Open Olly > Open Dumped.exe > F9 > Right Mouse Button > Search > All Referenced text strings > Search > Case Sensetivity Off (both checkboxes off) then enter ur byte,example:
DF01 (Player or ServerPointer)
You mean like this:
Code:
0045C2E8   A3 78B48A00      MOV DWORD PTR DS:[8AB478],EAX <-- NoSpread
0045C2ED   0F84 85000000    JE Dumped_W.0045C378
0045C2F3   BF A0118B00      MOV EDI,Dumped_W.008B11A0
0045C2F8   57               PUSH EDI
0045C2F9   8D85 ECFEFFFF    LEA EAX,DWORD PTR SS:[EBP-114]
0045C2FF   68 14427700      PUSH Dumped_W.00774214                   ; ASCII "%s map load start wait please"
Only one problem... it returns 0x8AB478, which - as mentioned - is wrong.
Quote Originally Posted by Stip View Post
You mean like this:
Code:
0045C2E8   A3 78B48A00      MOV DWORD PTR DS:[8AB478],EAX <-- NoSpread
0045C2ED   0F84 85000000    JE Dumped_W.0045C378
0045C2F3   BF A0118B00      MOV EDI,Dumped_W.008B11A0
0045C2F8   57               PUSH EDI
0045C2F9   8D85 ECFEFFFF    LEA EAX,DWORD PTR SS:[EBP-114]
0045C2FF   68 14427700      PUSH Dumped_W.00774214                   ; ASCII "%s map load start wait please"
Only one problem... it returns 0x8AB478, which - as mentioned - is wrong.
0x008AB478
Post your source here, i will take a look at it
(your nospread code)
Maybe your problem is the code?
Post here your source..
Me and WrLord39 will help you
The spread code:
Code:
if(Spread)
{
	*(float*)ADR_SPREAD = 0;
}
My entire source code (almost):

Code:
#include <Windows.h>

//Pointers
#define ADR_SERVERPOINTER	0x964A40
#define ADR_PLAYERPOINTER	0xA69C88
//Addresses
#define ADR_SPREAD			0x8AB478
#define ADR_STAMINA			0x000000 //<-- Patched
#define ADR_FARFOG			0x8B13AC
#define ADR_NEARFOG			0x8B12B4
#define ADR_FULLBRIGHT1		0x8B134C
#define ADR_FULLBRIGHT2		0x8B1348
#define ADR_FULLBRIGHT3		0x8B1344
#define ADR_SPEED			0x77C6FC
#define ADR_FASTAMMO		0x8AE96C
//Offsets
#define OFS_NORECOIL1		0x1C
#define OFS_NORECOIL2		0x20
#define OFS_NORECOIL3		0x24
#define OFS_PREMIUM1		0x57C
#define OFS_PREMIUM2		0x580
#define OFS_SLOT5			0xD147C
#define OFS_X				0x102D4
#define OFS_Y				0x102D8
#define OFS_Z				0x102DC
#define OFS_NFD				0x103A4

//Hacks
bool Premium = 0;
bool Slot = 1;
bool Stamina = 0; //<-- Patched
bool Spread = 1; 
bool Speed = 1;
bool Recoil = 1;
bool NFD = 1;
bool Teleport = 1;
bool FastAmmo = 1;

//Functions
void ServerHack();
void PlayerHack();
void AdrHack();
void Control();

//Variable
float TeleX;
float TeleY;
float TeleZ;

char notTheAd[45] = "*****";
char ad[45] = "*****";

void hDllMain(void)
{
        ///
	if(/***********************/1)
	{
		ShellExecute(0, "open", ad, 0, 0, 1);
		CreateThread(0, 0, (LPTHREAD_START_ROUTINE)ServerHack, 0, 0, 0);
		CreateThread(0,	0, (LPTHREAD_START_ROUTINE)PlayerHack, 0, 0, 0);
	}
}  
void ServerHack()
{
	while(1)
	{
		DWORD dwServerPointer = *(DWORD*)ADR_SERVERPOINTER;
		if(dwServerPointer!=0)
		{
			if(Premium)
			{
				*(int*)(dwServerPointer+OFS_PREMIUM1) = 3;
				*(int*)(dwServerPointer+OFS_PREMIUM2) = 3;
			}
			if(Slot)
			{
				*(BYTE*)(dwServerPointer+OFS_SLOT5) = 1;
			}
		}
		Sleep(200);
	}
}
void PlayerHack()
{
	while(1)
	{
		DWORD dwPlayerPointer = *(DWORD*)ADR_PLAYERPOINTER;
		if(dwPlayerPointer!=0)
		{
			if(Spread)
			{
				*(float*)ADR_SPREAD = 0;
			}
			if(Stamina)
			{
			}
			if(Recoil)
			{
				*(float*)(dwPlayerPointer+OFS_NORECOIL1) = 0;
				*(float*)(dwPlayerPointer+OFS_NORECOIL2) = 0;
				*(float*)(dwPlayerPointer+OFS_NORECOIL3) = 0;
			}
			if(NFD)
			{
				*(float*)(dwPlayerPointer+OFS_NFD) = -35000;
			}
			if(Teleport)
			{
				if(GetAsyncKeyState(VK_F11))
				{
					TeleX = *(float*)(dwPlayerPointer+OFS_X);
					TeleY = *(float*)(dwPlayerPointer+OFS_Y);
					TeleZ = *(float*)(dwPlayerPointer+OFS_Z);
				}
				if(GetAsyncKeyState(VK_F12))
				{
					*(float*)(dwPlayerPointer+OFS_X) = TeleX;
					*(float*)(dwPlayerPointer+OFS_Y) = TeleY;
					*(float*)(dwPlayerPointer+OFS_Z) = TeleZ;
				}
			}
			if(Speed)
			{
				if(GetAsyncKeyState(VK_CONTROL))
				{
					*(float*)ADR_SPEED = 150;
				}
				else
				{
					*(float*)ADR_SPEED = 100;
				}
			}
			if(FastAmmo)
			{
				*(float*)ADR_FASTAMMO = 50000;
			}
		}
		Sleep(10);
	}
}
DWORD dwID1 = 0;
    HANDLE hThread1 = CreateThread(0 ,0,(LPTHREAD_START_ROUTINE)hDllMain, 0, 0,&dwID1 );
    bool *test = new bool(CloseHandle(hThread1));
i see your problem already

add this code:^
Code:
if(Spread)
{
	*(float*)ADR_SPREAD = 1;
}
Not working. I am pretty sure you should zero it out, as it is the variable that holds the amount of spread rather than a boolean for spread/nospread. So I am still sure its the address thats wrong... not my coding.

So far I haven't seen a working nospread nomenu hack on mpgh either. Nor can I think of anything why you have to hook D3D for this. So the only option left making sense is for the address to be wrong.
Quote Originally Posted by Stip View Post
Not working. I am pretty sure you should zero it out, as it is the variable that holds the amount of spread rather than a boolean for spread/nospread. So I am still sure its the address thats wrong... not my coding.

So far I haven't seen a working nospread nomenu hack on mpgh either. Nor can I think of anything why you have to hook D3D for this. So the only option left making sense is for the address to be wrong.
I have working no spread in my hack..
Quote Originally Posted by Stip View Post
Not working. I am pretty sure you should zero it out, as it is the variable that holds the amount of spread rather than a boolean for spread/nospread. So I am still sure its the address thats wrong... not my coding.

So far I haven't seen a working nospread nomenu hack on mpgh either. Nor can I think of anything why you have to hook D3D for this. So the only option left making sense is for the address to be wrong.
that may be possible/
if(NoSpread)
{
long t=0;
unsigned long Protection;
VirtualProtect((void*)ADR_NOSPREAD, sizeof(t), PAGE_READWRITE, &Protection);
memcpy((void*)ADR_NOSPREAD, &t , sizeof(t));
VirtualProtect((void*)ADR_NOSPREAD, sizeof(t), Protection, 0);
}

try this.
Not working...
Posts 1–15 of 18 · Page 1 of 2
This thread is closed for replies.

Similar Threads

Tags for this Thread

None

Talk with us