******************************************************** * | Buscar Endereços Combat Arms | * * | *****.Dias V3.0 | * * arun823, Ch40zz-C0d3r, xCyniu, pDevice, TokolocoSK * * kssiobr , gellin, _Debug_ * ******************************************************** [ Engine.exe ] #define DeviceGame 0x87F0D0 #define LTClientEXE 0x48FE80 #define WorldToScreen 0x49BE60 #define S2S 0x47A7A0 #define Start3DEngine 0x53D76F #define Endscene 0x576963 #define DipEngine 0x626F0D #define DrawPrimitive 0x772F70 #define IntersectSegment 0x4775C7 [ CShell.dll ] #define LTClientDLL 0x379336B4 #define EspName1 0x37123C7C #define EspName2 0x37123CAA #define WeaponMgr 0x3799DAFC #define GCS 0x379740C4 #define PlayerByIndex 0x3719EE90 #define PlayerMgr 0x37974128 #define PlayerStatus 0x37952690 #define ClientInfoMgr 0x37933490 #define LocalPlyer 0x3719F930 #define SuperBullets 0x37452226 #define NoReload 0x37457D39 #define NoRecoil 0x3735B068 #define RemoteKill1 0x374580E1 #define RemoteKill2 0x374580E2 #define RemoteKill3 0x37458461 #define RemoteKill4 0x37458462 #define WeaponRange1 0x37273E2F #define WeaponRange2 0x372741AF #define RapidFire 0x37458ABA #define UnlAmmo 0x3744E8A7 #define CameraUpdate 0x3735E2CF #define LTCommon 0x379A5FE8 #define GetFontHandle 0x37373850 #define GetConsoleInt 0x373CBCB0 #define BuildFont 0x375983B0 #define FillFont 0x37599071 #define FontECX 0x3799D9E0 #define Damage 0x371178B3 #define DeathDamage 0x376EC43C [ PushToConsole Adress ] #define AdressJump 0x379203FC #define AdressBaseMoveAccel 0x379202DC #define AdressStartAccel 0x37920300 #define AdressMaxAccel 0x37920324 #define AdressAccelInc 0x37920348 #define AdressWalkVel 0x3792036C #define AdressFRunVel 0x37920390 #define AdressBRunVel 0x379203B4 #define AdressSRunVel 0x379203D8 #define AdressDuckVel 0x37920420 #define AdressGravity 0x3791FFA0 #define AdressFPS 0x3791EED4 #define AdressTracers 0x37928580 - Modulos carregados e scaneados... - - Aguardar - - Ok! Todas funções foram inicializadas! - Busca feita em 1610ms.
#include <windows.h>
DWORD SearchGameStatus( VOID )
{
DWORD dwGameStatus = ( DWORD )GetModuleHandleA( "CShell.dll" );
INT iADD;
for( DWORD dwSGS = 0; dwSGS < 0xCA7000; dwSGS++ )
{
if( ( *( DWORD * )( dwGameStatus + dwSGS + 0 ) ) == 0x00000005 ) iADD++;
if( ( *( BYTE * )( dwGameStatus + dwSGS + 7 ) ) == 0x37 ) iADD++;
if( ( *( DWORD * )( dwGameStatus + dwSGS + 8 ) ) == 0x00000000 ) iADD++;
if( ( *( DWORD * )( dwGameStatus + dwSGS + 12 ) ) == 0xFFFFFFFF ) iADD++;
if( ( *( DWORD * )( dwGameStatus + dwSGS + 16 ) ) == 0x00000000 ) iADD++;
if( iADD == 5 )
return ( DWORD )( dwGameStatus + dwSGS );
iADD = 0;
}
return NULL;
}
DWORD WINAPI dwThread( LPVOID )
{
while( !GetModuleHandleA( "ClientFX.fxd" ) )
Sleep( 100 );
DWORD GameStatus;
do {
GameStatus = SearchGameStatus( );
Sleep( 100 );
} while( !GameStatus );
CHAR chGameStatus[50];
wsprintfA( chGameStatus, "0x%X", GameStatus );
MessageBoxA( 0, chGameStatus, "Scan Address", 0 );
ExitProcess( EXIT_SUCCESS );
return 0;
}
BOOL WINAPI DllMain( HMODULE hModule, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls( hModule );
if( dwReason == DLL_PROCESS_ATTACH )
CreateThread( 0, 0, ( LPTHREAD_START_ROUTINE )dwThread, 0, 0, 0 );
return TRUE;
}
