TF2 Constant Critical Hits the proper way

[Xeno123]

			//-----------------------------------
			//--Crits
			if( VarManager::Get<bool>( "Crits" ) && Weapons::CanRandomCrit( Weapons::GetID( pWeapon ) ) )
			{
				
				static DWORD setprandomseed = NULL;
				if( ! setprandomseed ) setprandomseed = Utils::FindPattern( (DWORD) GetModuleHandle( _T("client.dll") ), 0x5F600, (PBYTE)"\x8B\x44\x24\x04\x85\xC0\x75\x0B\xC7", "xxxxxxxxx" );
				typedef void ( *SPRS_t )( const CUserCmd* );
				SPRS_t SPRS = (SPRS_t) setprandomseed;
				SPRS( pCmd );

				int backup = 0;
				int* sharedseed = Utils::MakePointer<int>( (DWORD) pWeapon, 0x16F4 );
				backup = *sharedseed;
				bool shotcrit = Weapons::IsShotCritical( pWeapon );
				*sharedseed = backup;
				if( pCmd->buttons & IN_ATTACK )
				{
					if( ! shotcrit )
						pCmd->buttons &= ~IN_ATTACK;
				}
			}

I'm too lazy to explain it, but if you need any help with understanding the code tell me :)

[entername]

Cool stuff - is this how wav does it.
- I don't have tf2 so I couldn't test it.
Is there a way you could make it only mini crits?

Just curious. Thanks for the post!

[Xeno123]

No way to make it only mini-crits, as they aren't random. Read the code and you'll see all it does is wait for the next crit to fire, which is really the only way of doing it. The reason I call it the proper way is because I've only seen it public one other place (Kalvin) and it was messed up with inline asm and shit like that :P. Yeah it's prolly how wav does it, I can ask him later if you really care that much lol.

[Lawgiver]

Wonder who stickied this. No stickies in here guys.

[badsta]

It's exactly the same but without the annoying shitty inline ASM and useless other things, nice job.

[aVitamin]

inline asm is serious business, okaaaaay?

[j1gs4w]

nice share, thanks

[ᵁᴻᴷᴺᴼᵂᴻ]

nice one thanks for sharing & sry to notice only now :p

[GrazzleSticks]

Re: TF2 Constant Critical Hits the proper way

does this still work? and sorry for being such a noob when it comes to coding stuff. but how would i go about using this? Thanks.

EDIT: would i use this tut? https://royalhack.com/forum/tutorial...-into-exe.html

[007boy258]

Re: TF2 Constant Critical Hits the proper way

does this still work? and sorry for being such a noob when it comes to coding stuff. but how would i go about using this? Thanks.

EDIT: would i use this tut? https://royalhack.com/forum/tutorial...-into-exe.html

no u add this code to ur ultra c+p hax

edit:
+ this is 1 year old dont try to use this if u dont know anything..

[lolwurst]

Could somebody give me a hint on how to find the sharedseed offset in olly ?

[jim123]

Could somebody give me $ 1000000 ?

Could somebody give me $ 1000000 ?

[lolwurst]

Re: Could somebody give me $ 1000000 ?

Could somebody give me $ 1000000 ?

Found it out by reversing the IsShotCritical Function. So pls Shut up. hrnsn

[jim123]

Re: TF2 Constant Critical Hits the proper way

U so mad baby yawn

Updated sigs with last update ftw :D

DWORD dwIsShotCritical  = Zeus::Utils::FindPattern( (DWORD)Client, 0xa3a000, (BYTE*)"\x8B\x16\x8B\x82\x00\x00\x00\x00\x8B\xCE\xFF\xD0\x88\x86", "xxxx????xxxxxx");			
OffsetManager::Add( "IsShotCritical", *(int *) (dwIsShotCritical  +0x4) );

DWORD dwsharedseed  = Zeus::Utils::FindPattern( (DWORD)Client, 0xa3a000, (BYTE*)"\x0B\xC7\x33\xC8\x3B\x8E\x00\x00\x00\x00\x74\x10\x51\x89\x8E\x00\x00\x00\x00\xFF\x15\x00\x00\x00\x00\x83\xC4\x04\x68\x00\x00\x00\x00\x6A\x00\xFF\x15\x00\x00\x00\x00\xF3\x0F\x10\x4C\x24\x14\xF3\x0F\x59\x0D\x00\x00\x00\x00\x83\xC4\x08\xF3\x0F\x2A\xC0\x0F\x2F\xC8\x0F\x82\x00\x00\x00\x00", "xxxxxx????xxxxx????xx????xxxx????xxxx????xxxxxxxxxx????xxxxxxxxxxxx????");
OffsetManager::Add( "sharedseed", *(int *) (dwsharedseed  +0x6) );

Thanks Xeno, Casual-Hacker