View previous topic :: View next topic |
Author |
Message |
Freakfrash Newbie cheater
Reputation: 0
Joined: 18 Nov 2013 Posts: 11
|
Posted: Mon Nov 18, 2013 11:35 am Post subject: How can I find the Spread and Recoil? |
|
|
Hey Guys I searched for the value from Recoil and Spread but I can't find it x.x.
My question is what way are you using for finding Spread, Recoil in Games like WarZ, War Inc, Warface, or other Shooter?
Btw: I tried with a Sniper. I shoot and searched for a increased value (used float). But I couldn't find it
-- Greets
-- Freakfrash
|
|
Back to top |
|
 |
Csimbi I post too much
Reputation: 97
Joined: 14 Jul 2007 Posts: 3321
|
Posted: Mon Nov 18, 2013 1:11 pm Post subject: |
|
|
Select the weapon in the game (do not fire it yet).
Set up hotkey for changed and unchanged scans in CE and do a scan for 0 (4byte int). Note that the initial value might not be 0, so if you don't find anything with 0, you'd need to start with an unknown value scan instead (and ignore the 0 value comments below).
Loop:
Go back to the game and put something on the fire button (so the weapon keeps shooting continuously).
Keep tapping the hotkey for change addresses at every shot (more/less frequently depending on the kind of the weapon and the number of results). Make sure you don't hit the hotkey when the weapon is idle.
Release the fire button and wait until the weapon goes back to its original state. Do one more changed scan and then do a few unchanged scans.
ALT+TAb back to CE and do a next scan for 0 again.
Keep doing the 'Loop' above until you have only a 100 or so addresses.
Try eliminating false positives by ALT+TABing forth and back to the game and scanning for 0 (or unchanged if your previous value was 0).
You should end up with max. a dozen values, ammo count will be probably one of them (as it changes at every shot fired, too). Possibly other counters like shots fired, accuracy, etc.
If the game can be paused, try pausing it in the middle of a shot and remove all addresses that are 0 in the list. Try flipping the value's type to float or maybe 2-byte and remove all addresses what do not seems to be making sense (they're most likely pointers). Back in the game, let the weapon cool down, and when you're back in CE freeze all remaining values. Back to the game and see if there's any change. If there's no change, you did not get the right address. If you see a change, start a binary search in the table (unfreeze half of the values, try again, etc.) to figure out which among the addresses you found is/are the right one(s). Yes, there might be one or multiple values. You'll need to debug which one's the right one.
Be creative and good luck!
|
|
Back to top |
|
 |
Freakfrash Newbie cheater
Reputation: 0
Joined: 18 Nov 2013 Posts: 11
|
Posted: Mon Nov 18, 2013 2:50 pm Post subject: |
|
|
Thank you for your answer I will try it
Another question is it possible to fix it? Better said is it possible that the developers of the game can fix it?
|
|
Back to top |
|
 |
Csimbi I post too much
Reputation: 97
Joined: 14 Jul 2007 Posts: 3321
|
Posted: Mon Nov 18, 2013 4:43 pm Post subject: |
|
|
Fix what?
|
|
Back to top |
|
 |
zm0d Master Cheater
Reputation: 7
Joined: 06 Nov 2013 Posts: 423
|
Posted: Tue Nov 19, 2013 3:07 am Post subject: |
|
|
Yes, they can fix it.
Hint: If you're quite familiar with reverse engineering, then you could use Ultimap, too It's an awesome tool that comes with CE
|
|
Back to top |
|
 |
Csimbi I post too much
Reputation: 97
Joined: 14 Jul 2007 Posts: 3321
|
Posted: Tue Nov 19, 2013 3:45 pm Post subject: |
|
|
DBVM is not for the faint-hearted...
|
|
Back to top |
|
 |
zm0d Master Cheater
Reputation: 7
Joined: 06 Nov 2013 Posts: 423
|
Posted: Tue Nov 19, 2013 4:37 pm Post subject: |
|
|
For me it runs very stable
|
|
Back to top |
|
 |
Csimbi I post too much
Reputation: 97
Joined: 14 Jul 2007 Posts: 3321
|
Posted: Tue Nov 19, 2013 4:56 pm Post subject: |
|
|
Runs stable, yes, but getting it working might be a problem...
|
|
Back to top |
|
 |
|