is this no fall damage?

Posts 1–15 of 29 · Page 1 of 2
is this no fall damage?
NoFallDamage 0x230
wrong addies
I think:
0xD208
0x198
0x1A0
just try it to your self if its working or not......
All of you are wrong
10026C24 68 3C9A2910 PUSH CShell.10299A3C ; ASCII "FallDamage"
10026C29 E8 F2981500 CALL CShell.10180520
10026C2E E9 73740000 JMP CShell.1002E0A6
10026C33 8D8C24 3C100000 LEA ECX,DWORD PTR SS:[ESP+103C]
10026C3A E8 F161FEFF CALL CShell.1000CE30
10026C3F 56 PUSH ESI
10026C40 8D8C24 40100000 LEA ECX,DWORD PTR SS:[ESP+1040]
10026C47 E8 3462FEFF CALL CShell.1000CE80
10026C4C 33C0 XOR EAX,EAX
10026C4E 81C3 FEFC0000 ADD EBX,0FCFE
10026C54 EB 0A JMP SHORT CShell.10026C60
10026C56 8DA424 00000000 LEA ESP,DWORD PTR SS:[ESP]
10026C5D 8D49 00 LEA ECX,DWORD PTR DS:[ECX]
10026C60 66:8B8C44 501000>MOV CX,WORD PTR SS:[ESP+EAX*2+1050]
10026C68 8A9404 70100000 MOV DL,BYTE PTR SS:[ESP+EAX+1070]
10026C6F 66:894B FE MOV WORD PTR DS:[EBX-2],CX
10026C73 8813 MOV BYTE PTR DS:[EBX],DL
10026C75 83C0 01 ADD EAX,1
10026C78 81C3 C0010000 ADD EBX,1C0
10026C7E 83F8 10 CMP EAX,10
10026C81 ^7C DD JL SHORT CShell.10026C60
10026C83 E9 1E740000 JMP CShell.1002E0A6
10026C88 8D8C24 04100000 LEA ECX,DWORD PTR SS:[ESP+1004]
10026C8F E8 BC62FEFF CALL CShell.1000CF50
10026C94 56 PUSH ESI
10026C95 8D8C24 08100000 LEA ECX,DWORD PTR SS:[ESP+1008]
10026C9C E8 0F30FEFF CALL CShell.10009CB0
10026CA1 80BB 1D4B0100 00 CMP BYTE PTR DS:[EBX+14B1D],0
10026CA8 0F84 F8730000 JE CShell.1002E0A6
10026CAE 8BCB MOV ECX,EBX
10026CB0 E8 3BAEFEFF CALL CShell.10011AF0
10026CB5 84C0 TEST AL,AL
10026CB7 74 32 JE SHORT CShell.10026CEB
10026CB9 8BCB MOV ECX,EBX
10026CBB E8 600AFEFF CALL CShell.10007720
10026CC0 84C0 TEST AL,AL
10026CC2 75 0E JNZ SHORT CShell.10026CD2
10026CC4 80BC24 18100000 >CMP BYTE PTR SS:[ESP+1018],8
10026CCC 0F8D D4730000 JGE CShell.1002E0A6
10026CD2 8BCB MOV ECX,EBX
10026CD4 E8 470AFEFF CALL CShell.10007720
10026CD9 3C 01 CMP AL,1
10026CDB 75 0E JNZ SHORT CShell.10026CEB
10026CDD 80BC24 18100000 >CMP BYTE PTR SS:[ESP+1018],8
10026CE5 0F8C BB730000 JL CShell.1002E0A6
10026CEB 0FBE8424 1810000>MOVSX EAX,BYTE PTR SS:[ESP+1018]
10026CF3 69C0 C0010000 IMUL EAX,EAX,1C0
10026CF9 8D0C18 LEA ECX,DWORD PTR DS:[EAX+EBX]
10026CFC C683 1D4B0100 00 MOV BYTE PTR DS:[EBX+14B1D],0
10026D03 8B81 DCFC0000 MOV EAX,DWORD PTR DS:[ECX+FCDC]
10026D09 85C0 TEST EAX,EAX
10026D0B 0F84 95730000 JE CShell.1002E0A6
10026D11 83B8 A0010000 00 CMP DWORD PTR DS:[EAX+1A0],0
10026D18 0F85 88730000 JNZ CShell.1002E0A6
10026D1E 83B9 C8FC0000 00 CMP DWORD PTR DS:[ECX+FCC8],0
10026D25 0F84 7B730000 JE CShell.1002E0A6
10026D2B C683 154B0100 01 MOV BYTE PTR DS:[EBX+14B15],1
10026D32 8B4B 04 MOV ECX,DWORD PTR DS:[EBX+4]
10026D35 6A 06 PUSH 6
10026D37 E8 F4121500 CALL CShell.10178030
10026D3C 8B8C24 18100000 MOV ECX,DWORD PTR SS:[ESP+1018]
10026D43 51 PUSH ECX
10026D44 8BCB MOV ECX,EBX
10026D46 E8 8514FFFF CALL CShell.100181D0
10026D4B 6A 00 PUSH 0
10026D4D 8BCB MOV ECX,EBX
10026D4F E8 ACABFEFF CALL CShell.10011900
10026D54 8BCB MOV ECX,EBX
10026D56 E8 95ADFEFF CALL CShell.10011AF0
10026D5B 84C0 TEST AL,AL
10026D5D 0F84 43730000 JE CShell.1002E0A6
10026D63 6A 00 PUSH 0
10026D65 8BCB MOV ECX,EBX
10026D67 E8 F4ACFEFF CALL CShell.10011A60
10026D6C E9 35730000 JMP CShell.1002E0A6
10026D71 8D8C24 3C130000 LEA ECX,DWORD PTR SS:[ESP+133C]
10026D78 E8 4328FEFF CALL CShell.100095C0
10026D7D 56 PUSH ESI
10026D7E 8D8C24 40130000 LEA ECX,DWORD PTR SS:[ESP+1340]
10026D85 E8 E628FEFF CALL CShell.10009670
10026D8A 8B8C24 54130000 MOV ECX,DWORD PTR SS:[ESP+1354]
10026D91 8A9424 51130000 MOV DL,BYTE PTR SS:[ESP+1351]
10026D98 8B8424 50130000 MOV EAX,DWORD PTR SS:[ESP+1350]
10026D9F 894C24 2C MOV DWORD PTR SS:[ESP+2C],ECX
10026DA3 8B0D 60963010 MOV ECX,DWORD PTR DS:[10309660]
10026DA9 885424 1B MOV BYTE PTR SS:[ESP+1B],DL
10026DAD 8B11 MOV EDX,DWORD PTR DS:[ECX]
10026DAF 884424 3C MOV BYTE PTR SS:[ESP+3C],AL
10026DB3 50 PUSH EAX
10026DB4 8B82 C8010000 MOV EAX,DWORD PTR DS:[EDX+1C8]
10026DBA FFD0 CALL EAX
10026DBC 0FB67424 3C MOVZX ESI,BYTE PTR SS:[ESP+3C]
10026DC1 8B8B F81A0100 MOV ECX,DWORD PTR DS:[EBX+11AF8]
10026DC7 56 PUSH ESI
10026DC8 897424 34 MOV DWORD PTR SS:[ESP+34],ESI
10026DCC E8 5F681F00 CALL CShell.1021D630
10026DD1 33C0 XOR EAX,EAX
10026DD3 6A 0D PUSH 0D
10026DD5 8D8C24 5C130000 LEA ECX,DWORD PTR SS:[ESP+135C]
10026DDC 51 PUSH ECX
10026DDD 8D9424 8CC60000 LEA EDX,DWORD PTR SS:[ESP+C68C]
10026DE4 52 PUSH EDX
10026DE5 C68424 90C60000 >MOV BYTE PTR SS:[ESP+C690],0
10026DED 898424 91C60000 MOV DWORD PTR SS:[ESP+C691],EAX
10026DF4 898424 95C60000 MOV DWORD PTR SS:[ESP+C695],EAX
10026DFB 898424 99C60000 MOV DWORD PTR SS:[ESP+C699],EAX
10026E02 888424 9DC60000 MOV BYTE PTR SS:[ESP+C69D],AL
10026E09 90 NOP
10026E0A E8 4199BE61 CALL MSVCR80.strncpy
10026E0F 8A8424 72130000 MOV AL,BYTE PTR SS:[ESP+1372]
10026E16 83C4 0C ADD ESP,0C
10026E19 68 A0860010 PUSH CShell.100086A0
10026E1E 6A 06 PUSH 6
10026E20 6A 0C PUSH 0C
10026E22 8D8C24 68010000 LEA ECX,DWORD PTR SS:[ESP+168]
10026E29 51 PUSH ECX
10026E2A 884424 38 MOV BYTE PTR SS:[ESP+38],AL
10026E2E E8 DDA2FDFF CALL CShell.10001110
10026E33 8B9424 90130000 MOV EDX,DWORD PTR SS:[ESP+1390]
10026E3A 33FF XOR EDI,EDI
10026E3C 52 PUSH EDX
10026E3D 897C24 28 MOV DWORD PTR SS:[ESP+28],EDI
10026E41 E8 9A2B1C00 CALL CShell.101E99E0
10026E46 83C4 04 ADD ESP,4
10026E49 85C0 TEST EAX,EAX
10026E4B 74 0F JE SHORT CShell.10026E5C
10026E4D 50 PUSH EAX
10026E4E E8 BD311C00 CALL CShell.101EA010
10026E53 83C4 04 ADD ESP,4
10026E56 8BF8 MOV EDI,EAX
10026E58 894424 24 MOV DWORD PTR SS:[ESP+24],EAX
10026E5C 833D 4C963010 03 CMP DWORD PTR DS:[1030964C],3
10026E63 75 21 JNZ SHORT CShell.10026E86
10026E65 807C24 1B 00 CMP BYTE PTR SS:[ESP+1B],0
10026E6A 75 1A JNZ SHORT CShell.10026E86
10026E6C 57 PUSH EDI
10026E6D E8 2E3B0E00 CALL CShell.1010A9A0
10026E72 83C4 04 ADD ESP,4
10026E75 85C0 TEST EAX,EAX
10026E77 74 0D JE SHORT CShell.10026E86
10026E79 C74424 24 000000>MOV DWORD PTR SS:[ESP+24],0
10026E81 E9 F8010000 JMP CShell.1002707E
10026E86 8B8424 68130000 MOV EAX,DWORD PTR SS:[ESP+1368]
10026E8D 83F8 FF CMP EAX,-1
10026E90 74 48 JE SHORT CShell.10026EDA
10026E92 50 PUSH EAX
10026E93 E8 482B1C00 CALL CShell.101E99E0
10026E98 8BF8 MOV EDI,EAX
10026E9A 83C4 04 ADD ESP,4
10026E9D 85FF TEST EDI,EDI
10026E9F 74 39 JE SHORT CShell.10026EDA
10026EA1 57 PUSH EDI
10026EA2 E8 69311C00 CALL CShell.101EA010
10026EA7 898424 60010000 MOV DWORD PTR SS:[ESP+160],EAX
10026EAE 8B8F A0070000 MOV ECX,DWORD PTR DS:[EDI+7A0]
10026EB4 898C24 64010000 MOV DWORD PTR SS:[ESP+164],ECX
10026EBB 8B97 A4070000 MOV EDX,DWORD PTR DS:[EDI+7A4]
10026EC1 83C4 04 ADD ESP,4
10026EC4 85C0 TEST EAX,EAX
10026EC6 899424 64010000 MOV DWORD PTR SS:[ESP+164],EDX
10026ECD 75 0B JNZ SHORT CShell.10026EDA
10026ECF 8B4424 24 MOV EAX,DWORD PTR SS:[ESP+24]
10026ED3 898424 5C010000 MOV DWORD PTR SS:[ESP+15C],EAX
10026EDA 8B8424 70130000 MOV EAX,DWORD PTR SS:[ESP+1370]
10026EE1 83F8 FF CMP EAX,-1
10026EE4 74 48 JE SHORT CShell.10026F2E
10026EE6 50 PUSH EAX
10026EE7 E8 F42A1C00 CALL CShell.101E99E0
10026EEC 8BF8 MOV EDI,EAX
10026EEE 83C4 04 ADD ESP,4
10026EF1 85FF TEST EDI,EDI
10026EF3 74 39 JE SHORT CShell.10026F2E
10026EF5 57 PUSH EDI
10026EF6 E8 15311C00 CALL CShell.101EA010
10026EFB 898424 6C010000 MOV DWORD PTR SS:[ESP+16C],EAX
10026F02 8B8F A0070000 MOV ECX,DWORD PTR DS:[EDI+7A0]
10026F08 898C24 70010000 MOV DWORD PTR SS:[ESP+170],ECX
10026F0F 8B97 A4070000 MOV EDX,DWORD PTR DS:[EDI+7A4]
10026F15 83C4 04 ADD ESP,4
10026F18 85C0 TEST EAX,EAX
10026F1A 899424 70010000 MOV DWORD PTR SS:[ESP+170],EDX
10026F21 75 0B JNZ SHORT CShell.10026F2E
10026F23 8B4424 24 MOV EAX,DWORD PTR SS:[ESP+24]
10026F27 898424 68010000 MOV DWORD PTR SS:[ESP+168],EAX
10026F2E 8B8424 74130000 MOV EAX,DWORD PTR SS:[ESP+1374]
10026F35 83F8 FF CMP EAX,-1
10026F38 74 48 JE SHORT CShell.10026F82
10026F3A 50 PUSH EAX
10026F3B E8 A02A1C00 CALL CShell.101E99E0
10026F40 8BF8 MOV EDI,EAX
10026F42 83C4 04 ADD ESP,4
10026F45 85FF TEST EDI,EDI
10026F47 74 39 JE SHORT CShell.10026F82
10026F49 57 PUSH EDI
10026F4A E8 C1301C00 CALL CShell.101EA010
10026F4F 898424 78010000 MOV DWORD PTR SS:[ESP+178],EAX
10026F56 8B8F A0070000 MOV ECX,DWORD PTR DS:[EDI+7A0]
10026F5C 898C24 7C010000 MOV DWORD PTR SS:[ESP+17C],ECX
10026F63 8B97 A4070000 MOV EDX,DWORD PTR DS:[EDI+7A4]
10026F69 83C4 04 ADD ESP,4
10026F6C 85C0 TEST EAX,EAX
10026F6E 899424 7C010000 MOV DWORD PTR SS:[ESP+17C],EDX
10026F75 75 0B JNZ SHORT CShell.10026F82
10026F77 8B4424 24 MOV EAX,DWORD PTR SS:[ESP+24]
10026F7B 898424 74010000 MOV DWORD PTR SS:[ESP+174],EAX
10026F82 8B8424 78130000 MOV EAX,DWORD PTR SS:[ESP+1378]
10026F89 83F8 FF CMP EAX,-1
10026F8C 74 48 JE SHORT CShell.10026FD6
10026F8E 50 PUSH EAX
10026F8F E8 4C2A1C00 CALL CShell.101E99E0
10026F94 8BF8 MOV EDI,EAX
10026F96 83C4 04 ADD ESP,4
10026F99 85FF TEST EDI,EDI
10026F9B 74 39 JE SHORT CShell.10026FD6
10026F9D 57 PUSH EDI
10026F9E E8 6D301C00 CALL CShell.101EA010
10026FA3 898424 84010000 MOV DWORD PTR SS:[ESP+184],EAX
10026FAA 8B8F A0070000 MOV ECX,DWORD PTR DS:[EDI+7A0]
10026FB0 898C24 88010000 MOV DWORD PTR SS:[ESP+188],ECX
10026FB7 8B97 A4070000 MOV EDX,DWORD PTR DS:[EDI+7A4]
10026FBD 83C4 04 ADD ESP,4
10026FC0 85C0 TEST EAX,EAX
10026FC2 899424 88010000 MOV DWORD PTR SS:[ESP+188],EDX
10026FC9 75 0B JNZ SHORT CShell.10026FD6
10026FCB 8B4424 24 MOV EAX,DWORD PTR SS:[ESP+24]
10026FCF 898424 80010000 MOV DWORD PTR SS:[ESP+180],EAX
10026FD6 8B8424 7C130000 MOV EAX,DWORD PTR SS:[ESP+137C]
10026FDD 83F8 FF CMP EAX,-1
10026FE0 74 48 JE SHORT CShell.1002702A
10026FE2 50 PUSH EAX
10026FE3 E8 F8291C00 CALL CShell.101E99E0
10026FE8 8BF8 MOV EDI,EAX
10026FEA 83C4 04 ADD ESP,4
10026FED 85FF TEST EDI,EDI
10026FEF 74 39 JE SHORT CShell.1002702A
10026FF1 57 PUSH EDI
10026FF2 E8 19301C00 CALL CShell.101EA010
10026FF7 898424 90010000 MOV DWORD PTR SS:[ESP+190],EAX
10026FFE 8B8F A0070000 MOV ECX,DWORD PTR DS:[EDI+7A0]
10027004 898C24 94010000 MOV DWORD PTR SS:[ESP+194],ECX
1002700B 8B97 A4070000 MOV EDX,DWORD PTR DS:[EDI+7A4]
10027011 83C4 04 ADD ESP,4
10027014 85C0 TEST EAX,EAX
10027016 899424 94010000 MOV DWORD PTR SS:[ESP+194],EDX
1002701D 75 0B JNZ SHORT CShell.1002702A
1002701F 8B4424 24 MOV EAX,DWORD PTR SS:[ESP+24]
10027023 898424 8C010000 MOV DWORD PTR SS:[ESP+18C],EAX
1002702A 8B8424 80130000 MOV EAX,DWORD PTR SS:[ESP+1380]
10027031 83F8 FF CMP EAX,-1
10027034 74 48 JE SHORT CShell.1002707E
10027036 50 PUSH EAX
10027037 E8 A4291C00 CALL CShell.101E99E0
1002703C 8BF8 MOV EDI,EAX
1002703E 83C4 04 ADD ESP,4
10027041 85FF TEST EDI,EDI
10027043 74 39 JE SHORT CShell.1002707E
10027045 57 PUSH EDI
10027046 E8 C52F1C00 CALL CShell.101EA010
1002704B 898424 9C010000 MOV DWORD PTR SS:[ESP+19C],EAX
10027052 8B8F A0070000 MOV ECX,DWORD PTR DS:[EDI+7A0]
10027058 898C24 A0010000 MOV DWORD PTR SS:[ESP+1A0],ECX
1002705F 8B97 A4070000 MOV EDX,DWORD PTR DS:[EDI+7A4]
10027065 83C4 04 ADD ESP,4
10027068 85C0 TEST EAX,EAX
1002706A 899424 A0010000 MOV DWORD PTR SS:[ESP+1A0],EDX
10027071 75 0B JNZ SHORT CShell.1002707E
10027073 8B4424 24 MOV EAX,DWORD PTR SS:[ESP+24]
10027077 898424 98010000 MOV DWORD PTR SS:[ESP+198],EAX
1002707E 8B7C24 2C MOV EDI,DWORD PTR SS:[ESP+2C]
10027082 85FF TEST EDI,EDI
10027084 0F85 09010000 JNZ CShell.10027193
1002708A 8A5C24 28 MOV BL,BYTE PTR SS:[ESP+28]
1002708E 0FB65424 1B MOVZX EDX,BYTE PTR SS:[ESP+1B]
10027093 0FB6CB MOVZX ECX,BL
10027096 51 PUSH ECX
10027097 52 PUSH EDX
10027098 56 PUSH ESI
10027099 8D8424 08D20000 LEA EAX,DWORD PTR SS:[ESP+D208]


Much addies in it.
and whats the Falldamage Addie? xD so much addies, whats the corect?
Quote Originally Posted by CheatCreatorzz View Post
and whats the Falldamage Addie? xD so much addies, whats the corect?
I see it lol
Quote Originally Posted by A$IAN View Post

I see it lol
Where must i search?, wait sec, i will edit this post (Hope i add the corect addie )

edit: 0x1C8
or 0x86A0
wtff, idk there are so many number combinations(Addies) Push EAX.. EDI.. all can?
ASM knowledge mah friend /me
@A$IAN, we know you are expert, but there aren't good tuts for ollybg or "to find addies" yeah or yeah?
Quote Originally Posted by CheatCreatorzz View Post
@A$IAN, we know you are expert, but there aren't good tuts for ollybg or "to find addies" yeah or yeah?
Ther eis no tut for finding addies.
You can find them by urself with asm
so u have to know what eax or push ebx or jmp do
i get problems with Open CShell, i do everything right i guess, i open ollybg (running loadlib in Crossfire map) and i attach loadlib.. and i search for references strings, and i searched for text, but i dont find anything :S whats prob?
a hint =
Code:
10117D80   68 E0C52B10      PUSH CShell.102BC5E0                     ; ASCII "DistFallDamageStartFrom"
Quote Originally Posted by OverDrivejt View Post
a hint =
Code:
10117D80   68 E0C52B10      PUSH CShell.102BC5E0                     ; ASCII "DistFallDamageStartFrom"
@OverDrivejt is this where we will find the addy ?
Posts 1–15 of 29 · Page 1 of 2

Post a Reply

Tags for this Thread

None

Talk with us