| View previous topic :: View next topic |
| Author |
Message |
lolOkayBailolOkayBailolOk Master Cheater
Reputation: 1
Joined: 23 Jun 2007 Posts: 307
|
Posted: Sun Jan 11, 2009 1:03 pm Post subject: [Help]How to write a cave in trainers? + Other Ques. |
|
|
Well I just downloaded a game called Red Faction. It is fairly easy to hack and pretty fun. So far I've completed Ammo, armor, speed, and no-clip hack (and was getting into a cham hack for enemies, but eventually Visual C++ Express edition stepped me over the face).
I was wondering how to write a code-cave in a Visual Basic trainer. Is it the same as just poking hex values at addresses but instead writing the bytes that jump to a cave (and/if there were any uneven bytes left to nop).
Here is what I have for ammo (no cave, just direct changing the value)
| Code: | | WriteCBMemory(&H102F40, 1000, 4) |
When I nop values for armor I basically do:
| Code: | ColdBlade(&hADDRESS, &h90)
Coldblade(&hADDRESS, &h90) |
With basically armor address (Coldblade is what I named the NOP function in the module).
My other questions
I found the address for health, a typical float value. However when I nop the debugged address it gives the enemies unlimited health too. My basic thought is that the debugged address controls the function that decreases health for any object in the game.
How would I come to find the address that only controls the player's health?
Thanks to those who help.
|
|
| Back to top |
|
 |
blackmorpheus Expert Cheater
Reputation: 0
Joined: 05 Apr 2008 Posts: 159
|
Posted: Mon Jan 12, 2009 3:55 pm Post subject: |
|
|
You did a cham hack, but dont know how to code cave in VB??
You can just WriteProcessMemory the bytes cant you?
Still think hacking in C++ is much better.
For the health question, the code you nopped is probably the code that writes the health to a player. You'll have to look a bit in the code to see how it handle's the player ID's, and only turn this hack on when the function's ID is your ID.
By the way, gonna download the game too looks nice..(to hack)
EDIT 1.
Is there a way to run this game windowed? [SOLVED]
EDIT 2.
How did you find armor/health ?
|
|
| Back to top |
|
 |
lolOkayBailolOkayBailolOk Master Cheater
Reputation: 1
Joined: 23 Jun 2007 Posts: 307
|
Posted: Wed Jan 14, 2009 9:58 am Post subject: |
|
|
First of all thanks for the reply it helped.
Cham hack is over exaggerated by many people. It is simple as hooking model numbers and vertexes from a certain stride to reply a color. I never do chams with 2 colors because it never works out. Wireframe + chams is basically awesome to use.
Recently like mentioned Visual C++ Express 2008 stopped working and I wanted to create a trainer in a different programming language. I got Visual Basic express edition and made armor and no clip hack. However when I nopped health it also gave infinite life to everything in the game (including enemies).
Yes hacking in C++ has more functions, and I actually wouldn't even download VB if it hadn't been for horrible errors. Now I understand that you write bytes that jump to the codecave and jump back with WPM. Thanks for that info
Health and ammo are on float values. Just search the value you have on float.
|
|
| Back to top |
|
 |
blackmorpheus Expert Cheater
Reputation: 0
Joined: 05 Apr 2008 Posts: 159
|
Posted: Wed Jan 14, 2009 12:52 pm Post subject: |
|
|
I think HP + Armor are serverside..
How did you find the offsets/ addresses for players/walls etc?
I've never really studied D3D.. only OpenGL.
There seems to be some kind of Player Struct..
pointer [005CAF94]+34 for example is Health
Also what version are you using?
If i have all this, i could code a nice multihack for it
|
|
| Back to top |
|
 |
lolOkayBailolOkayBailolOk Master Cheater
Reputation: 1
Joined: 23 Jun 2007 Posts: 307
|
Posted: Wed Jan 14, 2009 1:21 pm Post subject: |
|
|
</end>
Last edited by lolOkayBailolOkayBailolOk on Sat Apr 03, 2010 10:41 pm; edited 1 time in total |
|
| Back to top |
|
 |
blackmorpheus Expert Cheater
Reputation: 0
Joined: 05 Apr 2008 Posts: 159
|
Posted: Wed Jan 14, 2009 3:53 pm Post subject: |
|
|
Do u have the address for the heehoo and noclip functions?
I found some kind of gameloop which is nice to execute your own code in.
0x004B23DD
And i found some kind of drawing function, messing a bit with it gave me a buggy wallhack: 0x00559F90
|
|
| Back to top |
|
 |
lolOkayBailolOkayBailolOk Master Cheater
Reputation: 1
Joined: 23 Jun 2007 Posts: 307
|
Posted: Thu Jan 15, 2009 2:40 pm Post subject: |
|
|
The address slipped away from me (can't find log). You can quickly find in ollydbg by searching the function and taking a look at the jmp opcode to see what address is triggered to the effect.
Edit:
I quickly got some addresses.
coldblade. 110mb .com/files/RedFaction.txt
|
|
| Back to top |
|
 |
|