Player List problems

[boredsauce]

I'm having problems finding the the player lists. Or actually, I can't even get the pointer to the player count.


I've narrowed down the 2 results in CE, and the difference between the 2 addresses is 0x50 ATM.

I take the higher one and click 'Find out what writes to this', then go in-game and press T. I get 3 results total here, the first 2 came when the game got focus. The 3rd looks like this:

007A5D1C - 89 86 3C010000  - mov [esi+0000013C],eax
007A5D22 - 89 86 50010000  - mov [esi+00000150],eax
007A5D28 - 89 86 24010000  - mov [esi+00000124],eax <<
007A5D2E - 89 86 2C020000  - mov [esi+0000022C],eax
007A5D34 - 89 86 54010000  - mov [esi+00000154],eax

ESI=19F55338

So I search the value of ESI, 19F55338, and I get 0 results in CE. I also searched the same way for the other 2, same result..


.... any ideas?

[alohajepoy]

PSF Cheats NO Recoil RapidFire Superjump Still Undetected since 2/15/2012


Instruction :
Download the file
Extract to desktop
put process name specialforce.exe
click browes and choose Smrtzedit.dll
open SF ang log in then start the game

Only the ones that are ON are working!
Press Insert to Show Menu
Toggle Arrow Keys to ON/OFF the Hack

Features
Wall Chams
Crosshair
No Recoil
No Flash
Rapid Fire
Super Jump
no camera shake

Download Link PSF VIP v3 :

Credits :
cS - For Making This hack
[ me ] - For Posting and Sharing This hack

PSF Cheats NO Recoil RapidFire Superjump Still Undetected since 2/15/2012


Instruction :
Download the file
Extract to desktop
put process name specialforce.exe
click browes and choose Smrtzedit.dll
open SF ang log in then start the game

Only the ones that are ON are working!
Press Insert to Show Menu
Toggle Arrow Keys to ON/OFF the Hack

Features
Wall Chams
Crosshair
No Recoil
No Flash
Rapid Fire
Super Jump
no camera shake

Download Link PSF VIP v3 :

PSF Cheats NO Recoil RapidFire Superjump Still Undetected since 2/15/2012


Instruction :
Download the file
Extract to desktop
put process name specialforce.exe
click browes and choose Smrtzedit.dll
open SF ang log in then start the game

Only the ones that are ON are working!
Press Insert to Show Menu
Toggle Arrow Keys to ON/OFF the Hack

Features
Wall Chams
Crosshair
No Recoil
No Flash
Rapid Fire
Super Jump
no camera shake

Download Link PSF VIP v3 :





Credits :
cS - For Making This hack
[ me ] - For Posting and Sharing This hack

PSF Cheats NO Recoil RapidFire Superjump Still Undetected since 2/15/2012


Instruction :
Download the file
Extract to desktop
put process name specialforce.exe
click browes and choose Smrtzedit.dll
open SF ang log in then start the game

Only the ones that are ON are working!
Press Insert to Show Menu
Toggle Arrow Keys to ON/OFF the Hack

Features
Wall Chams
Crosshair
No Recoil
No Flash
Rapid Fire
Super Jump
no camera shake

Download Link PSF VIP v3 :





Credits :
cS - For Making This hack
[ me ] - For Posting and Sharing This hack

[boredsauce]

get that ******* spam out of my thread plz

[Interest07]

Originally Posted by boredsauce

get that ******* spam out of my thread plz

You don't want rapid fire in pwi?

[boredsauce]

Well, it does sound tempting..

[dumbfck]

Not sure what sort of process you used to get to those, but if it helps, I wrote a little tut a while ago for finding the player count (which also leads to the lists) - I would hope it's still valid although undoubtedly some of the offsets will have changed...
I wont be home for 8-9 hours or so, so I can't check anything until then, so perhaps this guide might have a little something that will poke you in the right direction...
I have found in the past that CE alone is not really suitable for this task, so I use Olly and IDA Pro also.

[boredsauce]

Yea, i checked that out too. Same result. I have no idea why it's not turning up results..

Meh. I'll try it again tomorrow (later today..).

[dumbfck]

It's a long shot, but you might be able to search for the code from the image in that post using Olly. If you're really lucky, it might take you straight to the player count offset lol.
However, it seems quite a few functions have changed within the client after the update.


Btw... don't suppose someone could upload the new elementclient.exe please? :P
Don't really fancy downloading the whole update on this computer (at work) especially as I can't log in from here anyway lol.

[boredsauce]

[dumbfck]

Thank you kindly, sir =]

Ok, player lists haven't changed, but the player struct has.

I only checked a few of the player struct entries:
ID = 0x480
Name = 0x664

ID was previously 0x460, so there's 0x20 / 4 = 8 new entries somewhere before ID.
Name was previously 0x638 so there are 0xC / 4 = 3 new entries between ID and Name offsets. I'm not particularly interested in what they are, so feel free to try to find them if you are ^^


Nearby player count is:
[[[[[baseCall]+0x1C]+0x1C]+0x20]+0x14]

Player list base is:
[[[[[baseCall]+0x1C]+0x1C]+0x20]+0x88]

So, for example, to get a list of names you would use
[[[[[[[[baseCall]+0x1C]+0x1C]+0x20]+0x88]+i*4]+0x664]+0x0]


Cheers