SpawnSheild

How do guys scan for SpawnSheild offset ?
is that possible to be scanned with C.E ? and how ?

Thanks in advice

Yes and no, Cheatengine will require a high level of process manipulating including hooking many functions that involve the detection of specific HWND's such as cheatengines...

For the SpawnShield scan you will need to find the pointer toward the CharacterFX class which contains the Spawnshield offset.

Originally Posted by PeachCreame

I have the Character FX pointer but it has a bunch of offsets how should I know the spawn shield offset ?

Originally Posted by OneCa

I have the Character FX pointer but it has a bunch of offsets how should I know the spawn shield offset ?

IF you can attach a debugger or memory reader, kill yourself and see if any of the code changes, if it moves between 2 values it may be a boolean value which may be your spawnshield

What exactly do you need it for? Why not just use characterFX class and check to see if its enabled?

If I remember correctly. Don't quote me if I'm wrong.

Even if you have the class and pointers to the spawn shield.
Example like making the spawn shield never ending. thus godmode.
It would only be a client side change. Spawn Shield is server sided.

Originally Posted by neononxxx

You are exactly correct, this has been patched long ago. The only thing the spawn shield pointer is good for is aimbot or telekill now.

Code:

\x74\x0A\x3B\x74\x24\x18\x73\x04\xC6\x06\x20\x46\x83\x44\x24\x14\x08 xxxxxxxxxxxxxxxxx

Code:

374BB7E3 . 74 0A JE SHORT Dumped.374BB7EF 374BB7E5 . 3B7424 18 CMP ESI,DWORD PTR SS:[ESP+18] 374BB7E9 . 73 04 JNB SHORT Dumped.374BB7EF 374BB7EB . C606 20 MOV BYTE PTR DS:[ESI],20 374BB7EE . 46 INC ESI 374BB7EF > 834424 14 08 ADD DWORD PTR SS:[ESP+14],8 374BB7F4 . 8B5424 18 MOV EDX,DWORD PTR SS:[ESP+18] 374BB7F8 . 40 INC EAX 374BB7F9 . 894424 1C MOV DWORD PTR SS:[ESP+1C],EAX 374BB7FD . 3B03 CMP EAX,DWORD PTR DS:[EBX] 374BB7FF .^72 AF JB SHORT Dumped.374BB7B0 374BB801 > 3BF2 CMP ESI,EDX 374BB803 . 72 04 JB SHORT Dumped.374BB809 374BB805 > C642 FF 00 MOV BYTE PTR DS:[EDX-1],0 374BB809 > 5F POP EDI 374BB80A . 5E POP ESI 374BB80B . 5D POP EBP 374BB80C . 5B POP EBX 374BB80D . C2 0C00 RETN 0C 374BB810 . 8B41 5C MOV EAX,DWORD PTR DS:[ECX+5C] 374BB813 . C3 RETN 374BB814 CC INT3 374BB815 CC INT3 374BB816 CC INT3 374BB817 CC INT3 374BB818 CC INT3 374BB819 CC INT3 374BB81A CC INT3 374BB81B CC INT3 374BB81C CC INT3 374BB81D CC INT3 374BB81E CC INT3 374BB81F CC INT3 374BB820 . 8A81 5A050000 MOV AL,BYTE PTR DS:[ECX+55A] //bool bSpawnSheild; (byte) //0x055A 374BB826 . C3 RETN

SpawnSheild

Post a Reply

Tags for this Thread