Download Urban Terror Offset Dumper

Hexui Undetected CSGO Cheats Sinkicheat PUBG Cheat

Liduen

Hacker
Dank Tier VIP
May 19, 2013
702
8,478
33
Hi all,

as I was asked several times for the latest urban terror offsets and addresses, I decided to share my offset dumper with you.
It's handy because the game gets updated quite often :/
It's not perfect and I don't know if the byte patterns are still working with the latest version of the game but you can try it yourself ^^


Dump of version 4.2.022
C++:
Offsets for this version of Urban Terror:

[alternative base]: fb8fac // this one or the one below is correct

Base: fb9084 // most likely this base is the correct one
Positions: ecd0c0
Slotnumber: 9ee244
Attack: (?) b9acb0 // ignore the "(?)"
WriteRotationY: ce7798
WriteRotationX: ce779c
ViewAccelY: ce1ebc
ViewAccelX: b9e290
Offset-RotationY: 0 // this will always be 0 (this one and ones below are located in some weird module I'm not able to find the patterns in)
Offset-RotationX: 0 //  (probably I'll post the patterns later and you can try it yourself ^^ )
Offset-Crosshair: 0  //
Offset-Recoil: 0  //
Offset-ViewAccel: 1c
Offset-Entity: 0  //
Cvar: 43dc83 // OllyDebug, change jmp instruction :)
Function-PlusAttack: 0  // (I was too lazy to do a byte pattern here) OllyDebug, search for string, "+attack" there you go
Function-MinusAttack: 0  // (same here) OllyDebug, search for string, "-attack" there you go
More Patterns
RotationY:
C++:
"\xD9\x44\x24\x00\xD9\x44\x24\x00\xE9\x00\x00\x00\x00\x8B\x35\x00\x00\x00\x00\xD8\x4E\x00\xD8\x05\x00\x00\x00\x00\xD9\x1D",
"xxx?xxx?x????xx????xx?xx????xx"
+ 0xF + 0x6 // those are no pointer offsets, just add them to the final address (fine tuning for the last few bytes)
RotationX:
C++:
"\x0F\x85\x00\x00\x00\x00\xD9\xC9\x8B\x15\x00\x00\x00\x00\xD8\x4A\x00\xD8\x2D\x00\x00\x00\x00\xD9\x1D\x00\x00\x00\x00\xA1",
"xx????xxxx????xx?xx????xx????x"
+ 0xA + 0x6
Crosshair:
C++:
"\x89\x83\x00\x00\x00\x00\x83\xEF\x00\xBB\x00\x00\x00\x00\xB8\x00\x00\x00\x00\x89\x83\x00\x00\x00\x00\x8D\x86",
"xx????xx?x????x????xx????xx"
+ 0xA
How to use:
1. Start Quake3-UrT.exe.
2. Join a server.
3. Inject the dll into the Quake3-UrT.exe.
4. Close the game.
5. Check out the dump created in the urban terror directory.


Virusscans:
0/57 Virustotal

https://guidedhacking.com/threads/urban-terror-hacking-guide.14279/

Have fun ;)
Liduen
 

Attachments

Last edited by a moderator:

Homitichat

Newbie
Silenced
Apr 2, 2015
1
61
0
Hi, i need help, what do I do after i inject it,
use cheat engine to find the offsets or what ?
I once tried to find offsets on urban terror, found like 20 and CE wouldn't decrease the number
 

Liduen

Hacker
Dank Tier VIP
May 19, 2013
702
8,478
33
Hi, i need help, what do I do after i inject it,
use cheat engine to find the offsets or what ?
I once tried to find offsets on urban terror, found like 20 and CE wouldn't decrease the number
Maybe look a little bit closer at the starting post...
 

CDinexpose

Newbie
Silenced
Apr 2, 2015
2
61
0
my bad ^^, can i use it for urt 4.2.023 ? also which one is the offset address i need to use for ESP :p
 
Last edited:

Liduen

Hacker
Dank Tier VIP
May 19, 2013
702
8,478
33
my bad ^^, can i use it for urt 4.2.023 ? also which one is the offset address i need to use for ESP :p
I didn't test it for 4.2.023 but yeah why not, maybe the byte patterns match there too. Just try it.

Offset for ESP? There is no such thing. For an ESP you need your 3D position and the ones of the enemies. You'll also need a w2s function and your vmatrix. It's a bit more complicated. ;)
 

CDinexpose

Newbie
Silenced
Apr 2, 2015
2
61
0
so, in which case ( of making a wallhack ) should i use offsets, i followed by fleep tutorials on how to make an ESP and not sure if it is :p
 

Liduen

Hacker
Dank Tier VIP
May 19, 2013
702
8,478
33
so, in which case ( of making a wallhack ) should i use offsets, i followed by fleep tutorials on how to make an ESP and not sure if it is :p
I don't know if I understood you correctly.
If you want to make wallhack such as chams (to see player models through walls) you won't need any offsets, you just need to find a way to clearly identify a texture used in the game and disable the depth check for it.
Hooking the right functions is the key, so you can make some sort of model logger and find out which of the textures get used for the models you want to see through the walls.

If you want to make an ESP you certainly need the entity positions, your view matrix and view angles so you can calculate and finally draw a box where a player is.
For this task you'll most likely need offsets, yes.
 

roxzito

Newbie
Full Member
Apr 10, 2015
6
274
0
Liduen ive got a problem , i start urt , on hack injector i put quake 3 process i do autoinject , i close urban terror but nothing happens i w8 for u answer thx
 

Liduen

Hacker
Dank Tier VIP
May 19, 2013
702
8,478
33
yes dat's right
Just tested the dumper with the latest version of UrbanTerror. All was fine.

1. What system are you on?
2. Does the console show up after injecting?
3. What does it say?
 

roxzito

Newbie
Full Member
Apr 10, 2015
6
274
0
I use windows 7 , after i do inject don't happen nothing , injector close , i close urban terror but nothing happen can u help me please ?
 

Liduen

Hacker
Dank Tier VIP
May 19, 2013
702
8,478
33
Thank you!,that cant find Crosshair pattern :O
It'll never find this address because of the weird module it's located in here are the patterns though:

RotationY:
C++:
"\xD9\x44\x24\x00\xD9\x44\x24\x00\xE9\x00\x00\x00\x00\x8B\x35\x00\x00\x00\x00\xD8\x4E\x00\xD8\x05\x00\x00\x00\x00\xD9\x1D",
"xxx?xxx?x????xx????xx?xx????xx"
+ 0xF + 0x6 // those are no pointer offsets, just add them to the final address (fine tuning for the last few bytes)
RotationX:
C++:
"\x0F\x85\x00\x00\x00\x00\xD9\xC9\x8B\x15\x00\x00\x00\x00\xD8\x4A\x00\xD8\x2D\x00\x00\x00\x00\xD9\x1D\x00\x00\x00\x00\xA1",
"xx????xxxx????xx?xx????xx????x"
+ 0xA + 0x6
Crosshair:
C++:
"\x89\x83\x00\x00\x00\x00\x83\xEF\x00\xBB\x00\x00\x00\x00\xB8\x00\x00\x00\x00\x89\x83\x00\x00\x00\x00\x8D\x86",
"xx????xx?x????x????xx????xx"
+ 0xA
I made no patterns for the recoil and baseentity because I noticed I wasn't able to find those because of the module.
Maybe you're more lucky than me ;)
 
Last edited:

roxzito

Newbie
Full Member
Apr 10, 2015
6
274
0
As i said too u before , windows 7 , after i did auto inject , the injector close's but nothing happen
 
Attention! Before you post:

Read the How to Ask Questions Guide
99% of questions are answered in the Beginner's Guide, do it before asking a question.

No Hack Requests. Post in the correct section.  Search the forum first. Read the rules.

How to make a good post:

  • Fill out the form correctly
  • Tell us the game name & coding language
  • Post everything we need to know to help you
  • Ask specific questions, be descriptive
  • Post errors, line numbers & screenshots
  • Post code snippets using code tags
  • If it's a large project, zip it up and attach it

If you do not comply, your post may be deleted.  We want to help, please make a good post and we will do our best to help you.

Community Mods