Reversing CShell

I have been reversing CShell and looking at all the asm in ollydbg for the past our and i think i have found the player pointer and the player table. Just tell me if i am correct or not. If i am not correct please don't tell me the correct address because i want this to be a learning experience.

So player pointer is: 0x109C3A5C (or Cshell + 0x9C3A5C)
Player table is: 0x109C3A60 (or CShell + 0x9C3A60)

Thanks for your help just tell me if i am correct or not. Thanks in advance.

your playerpointer is wrong....

Dangit. Well, is it close? If not what string do u suggest me to look at to look for the player pointer? Thanks for a quick reply.

this is not the player pointer, it is the basic player info.

instead, search for "WeaponReload" to find the weapon pointer.

Originally Posted by giniyat101

this is not the player pointer, it is the basic player info.

instead, search for "WeaponReload" to find the weapon pointer.

I already have the weapon pointer, i was just curious about the player pointer, what string would i have to look under?

0x32D118 <<<<<PlayerPointer

Originally Posted by Nexuz2011

0x32D118 <<<<<PlayerPointer

Wow, thanks, but honestly i wanted to figure it out myself so that i could learn. Thanks though, may i ask, under what string did you find this?

There is a string called "WeaponReload"
Double click on it and tehre should be anything with "cshell 10blabla" (on the ASCI side)
Caclculate it like: 10blabla+50 = urplayerpointer
that´s the way ***** does

Tutorial: http://www.mpgh.net/forum/242-crossf...inter-ans.html

Thanks, but why? I don't understand why you add 0x50 to some random string. The problem that i am having is that how would i know that's the player pointer? What if ***** and nice people like you weren't here to help me and tell me that it's weaponreload + 0x50? How would i find it?

Code:

MOV ECX,DWORD PTR DS:[EBX+50]

thats why.

Originally Posted by giniyat101

Code:

MOV ECX,DWORD PTR DS:[EBX+50]

thats why.

it still doesn't make sense cuz the first addie is way after ebx + 50.

Originally Posted by 258456

it still doesn't make sense cuz the first addie is way after ebx + 50.

look down you will see another string accessing ECX

logical places
generically,
"team"
"score"
"%s captured flag"
"%s planted c4"

Originally Posted by kibbles18

logical places
generically,
"team"
"score"
"%s captured flag"
"%s planted c4"

lol, it's not like assaultcube. They are never that obvious in crossfire.

Reversing CShell

Post a Reply

Similar Threads

Tags for this Thread