CoF Hack Using TSearch, Need Advice

[Silence13]

Hey everyone.

Alright, I've learned how to use TSearch via the thread on the forum but am having trouble with the values for rifles. One I'm working on while I type this is the gauss rifle.

Anyone have the value for the gauss for the first and second searches? Would be awesome! Thanks!

P.S. If not, at least a pointer on how to find them more efficiently.

[NCSuperman]

try with amp values r 1.5 and .75 easiest weapon to try with

[dryballs]

1.5 and .75 no longer work since they updated to support win 7.

[NCSuperman]

mhmm well y don't u just go to to vt and test the amp and use unknow value and keep testing it untill u find it

[Renegad3x]

Originally Posted by dryballs

1.5 and .75 no longer work since they updated to support win 7.

This is not true at all.... I just made my CoF hack with searching for these values in a memory searcher.

Just remember that, the 1.5 and .75 are the standing and crouching values for the AMP, each weapon has its own crouching/standing values. But if you set a BP on the value(s) found from the AMP and trace it back, you will see that its the same assembly code for ALL weapons.

[NCSuperman]

or u can just honestly just freeze the code and change weapons and it will stay the same

[Renegad3x]

that was the method I tried first... but freezing had no effect in my experiment. I had to set BP and jump around/ fire/ do whatever to make the cof do what it normally would do, and then Freeze that address...

There are 2 addresses... 6 bytes long each

[NCSuperman]

yes renegad3x thats excatly how to get it there is a tutorial some where on this forum that was done very well but, yes that how u get it and it works for every weapon and u jsut put that in a tmk with nod at 90 and ur got a working cof that will never need to be changed but the problem with that the cheat dectection can tell u changed the code but i havn't hacked since 08 so mayeb it works or not but with that u could just code cave it and have it hidden if u wanna try to no get dectected or maybe u could try to inject the code thats also a way to get around the cheat dectection we used to do everything we could back in the day, when MWx was in r prime we could do what we wanted and ever thought of cuz everything in planetside is client but a few things but thats simple to tell whats server and client just by ******** around in tshearch

[Renegad3x]

Well with PS2 around the corner no ones really monitoring the game.... the first couple days while I was learning I just nopped in Tsearch, but with detection kept in mind I didnt do this for long at all..... So I kept learning. and Finally with a little bit of help from another forum, I managed to put together a DLL that when you inject it, you get CoF hack!

Im still trying to figure out Jump n run/ teleport/ movement

[NCSuperman]

yeah i need to learn to inject it but idk how to do jump and run, u have to ask itburnz teleport is just changing ur own cood. by finding urself with /loc and movement what do u mean by speed? or what?

[Renegad3x]

I never see itburnz around here anymore so.... Im pretty sure we are on our own lol.

I understand that our positions in memory are floating point and typing /loc gives you some numbers (XYZ) rounded to the nearest whole number. but After searching for just the Z coordinates, i have only managed to decreased my found addresses to about 30 or so addresses.... and all of them show the same value so I felt like I was at a dead end ... I need to try again

and Im not sure what you are referring to about the whole "speed" thing?

[NCSuperman]

that is what i was asking u about with the speed. thing? and idk they could of changed how to change the loc but i'm not sure but u could go to cheat engine after u find the code and just change the value of it to any and it will work that how we did it and i beleive u can put hot keys for certain numbers too

[Renegad3x]

Well an account of mine got banned...... sooooo here you go guys


0x0090833b
0x0090893e

I patched those 2 addresses to get a perfect COF.

I was using DLL injection... not sure how they caught me o_0. I was pretty discreet about it

*edit here is what they look like incase you have that much trouble finding...


COF Addresses for DATE: July/2012

Function 1

0090833b 89 81 9C 01 00 00 mov [ecx+0x19C],eax
00908341 E8 BA 88 B 9FF call 0x004A0C00
00908346 5D pop ebp
00908347 C2 04 00 retn 0x4
0090834a 90 nop
0090834b 90 nop
0090834c 90 nop
0090834d 90 nop

Function 2

0090893e D9 9E 9C 01 00 00 fstp dword ptr [esi+0x19C]
00908944 5F pop edi
00908945 5E pop esi
00908946 5B pop ebx
00908947 8B E5 mov esp,ebp
00908949 5D pop ebp
0090894a C3 retn
0090894b 90 nop

[someman1234]

The trainer that I patched of Jolt's isn't working anymore?

[NCSuperman]

jolt trainer is like 2 years old thats y. and reg did your cof look like a sniper cof or a mcg?