cant get playerpointer

Posts 1–6 of 6 · Page 1 of 1
cant get playerpointer
http://img81.imageshack.us/img81/737/op7eu.jpg



so C09888+33C0 = playerpointer?


HowTo:

To get the BFCC70

go to this offset 0x4B644F mov esi,ecx+0x3394

find ecx then add 0x3390

so offset = ecx+0x3390

I heard vista and xp offset are diffrent idk im on vista but here goes a dump of the area.
Code:
004B642A   68 A4726900      PUSH OPERATIO.006972A4                   ; ASCII "GamePlayer Queue is NULL 
"
004B642F   E8 7CDD1400      CALL OPERATIO.006041B0
004B6434   83C4 04          ADD ESP,4
004B6437   33C0             XOR EAX,EAX
004B6439   C3               RETN
004B643A   8B91 98330000    MOV EDX,DWORD PTR DS:[ECX+3398]
004B6440   8BC2             MOV EAX,EDX
004B6442   C1E8 02          SHR EAX,2
004B6445   56               PUSH ESI
004B6446   8D3485 00000000  LEA ESI,DWORD PTR DS:[EAX*4]
004B644D   2BD6             SUB EDX,ESI
004B644F   8BB1 94330000    MOV ESI,DWORD PTR DS:[ECX+3394]
004B6455   3BF0             CMP ESI,EAX
004B6457   77 02            JA SHORT OPERATIO.004B645B
004B6459   2BC6             SUB EAX,ESI
004B645B   8BB1 90330000    MOV ESI,DWORD PTR DS:[ECX+3390]
004B6461   8B0486           MOV EAX,DWORD PTR DS:[ESI+EAX*4]
004B6464   8B0490           MOV EAX,DWORD PTR DS:[EAX+EDX*4]
004B6467   8B91 9C330000    MOV EDX,DWORD PTR DS:[ECX+339C]
hahah i saw ur post on this game sux
Quote Originally Posted by silent1990 View Post
haha dont spam -.-
well publicity is good
just try with an esp source....

but i think that method now is patched, becauz the player struct size change every player and without the same lenght....
can you clear this up?
Posts 1–6 of 6 · Page 1 of 1
This thread is closed for replies.

Similar Threads

Tags for this Thread

Need help?