Tom Clancy's Ghost Recon Wildlands - AnvilNEXT64 Cheats and more..

Upload your cheat tables here (No requests)
User avatar
SunBeam
Trouble Makers
Trouble Makers
Posts: 353
Joined: Thu Mar 02, 2017 10:15 pm
Reputation: 95

Re: Tom Clancy's Ghost Recon Wildlands - AnvilNEXT64 Cheats and more..

Post by SunBeam » Wed Sep 06, 2017 12:16 pm

Works for me:



Also fixed Vehicle God. No more exploding from SAMs now :) Will post table later.

BR,
Sun

sky170111
Novice Cheater
Novice Cheater
Posts: 23
Joined: Fri Aug 18, 2017 9:47 am
Reputation: 3

Re: Tom Clancy's Ghost Recon Wildlands - AnvilNEXT64 Cheats and more..

Post by sky170111 » Wed Sep 06, 2017 12:58 pm

SunBeam,

Johngiri
Noobzor
Noobzor
Posts: 6
Joined: Sun Sep 03, 2017 6:07 pm
Reputation: 1

Re: Tom Clancy's Ghost Recon Wildlands - AnvilNEXT64 Cheats and more..

Post by Johngiri » Wed Sep 06, 2017 3:00 pm

will you post a way to bypass eac my friend ?

sky170111
Novice Cheater
Novice Cheater
Posts: 23
Joined: Fri Aug 18, 2017 9:47 am
Reputation: 3

Re: Tom Clancy's Ghost Recon Wildlands - AnvilNEXT64 Cheats and more..

Post by sky170111 » Wed Sep 06, 2017 3:26 pm

Johngiri ,
maybe -eac_launcher?

User avatar
SunBeam
Trouble Makers
Trouble Makers
Posts: 353
Joined: Thu Mar 02, 2017 10:15 pm
Reputation: 95

Re: Tom Clancy's Ghost Recon Wildlands - AnvilNEXT64 Cheats and more..

Post by SunBeam » Wed Sep 06, 2017 3:56 pm

@sky170111: Do me a favor and add to your list o as address. Tell me if it's valid:

Image

Cuz of this:

Code: Select all

...
movups xmm0,[rax+80]                // get object's coordinates
movups xmm2,xmm0
mov rbx,[o]                         <-- here!!
test rbx,rbx
je short Teleport_do_exit           // check if player object is valid
...
Else, wait till I post the updated table.

BR,
Sun

Johngiri
Noobzor
Noobzor
Posts: 6
Joined: Sun Sep 03, 2017 6:07 pm
Reputation: 1

Re: Tom Clancy's Ghost Recon Wildlands - AnvilNEXT64 Cheats and more..

Post by Johngiri » Wed Sep 06, 2017 4:17 pm

@sky170111: If I do that,then the multiplayer part of the game will stop working and I actually want the cheats to work in online mode and not just in the offline single-player mode only.

User avatar
SunBeam
Trouble Makers
Trouble Makers
Posts: 353
Joined: Thu Mar 02, 2017 10:15 pm
Reputation: 95

Re: Tom Clancy's Ghost Recon Wildlands - AnvilNEXT64 Cheats and more..

Post by SunBeam » Wed Sep 06, 2017 5:35 pm

@Johngiri: I/we are not supporting online cheating, just so you know. Besides, these do not work in multiplayer mode, you're just seeing a visual which will kinda confuse you. I know from testing. Unless you are the host.. and that happens randomly.

UncleFestor
What is cheating?
What is cheating?
Posts: 3
Joined: Fri Sep 01, 2017 7:08 pm
Reputation: 0

Re: Tom Clancy's Ghost Recon Wildlands - AnvilNEXT64 Cheats and more..

Post by UncleFestor » Wed Sep 06, 2017 7:11 pm

@SunBeam
I also have the CPY version of this game, yet I can't consistently get this table to load without crashing. I keep trying different things but none of them work. As soon as I enable an option, like No Recoil, and shoot my weapon the game crashes.

Any idea why this keeps happening? I can run the CH trainer all day, but their trainer sux. It doesn't have the options I actually want to use.

User avatar
SunBeam
Trouble Makers
Trouble Makers
Posts: 353
Joined: Thu Mar 02, 2017 10:15 pm
Reputation: 95

Re: Tom Clancy's Ghost Recon Wildlands - AnvilNEXT64 Cheats and more..

Post by SunBeam » Wed Sep 06, 2017 9:18 pm

Unfortunately I don't have any other OS or PC to test this on (a Windows 7 would've helped). The paths I am using in the table work fine where I am, I even check up on them for NULLs. No idea what's going on with some PCs/OSes, it's been reported like 4-5 times now; out of hundreds (close to 1000) of downloads where people haven't complained. Unlucky you, what can I say.

Could probably do with a TeamViewer session and check what's up on your PC? Let me know if you're willing to do this. You can find me on our Discord for a better response time (rather than PMing me).

On another note, with the help of djdrulotus, here's the fixed Teleporter:

Code: Select all

[ENABLE]

aobscanmodule( PBYTE_MapMarkerBool, GRW.exe, C683??00000001488B7C24404883C4305BC3 )
registersymbol( PBYTE_MapMarkerBool )
alloc( TeleportHandlerThread, 0x1000, GRW.exe )
registersymbol( TeleportHandlerThread )
CreateThread( TeleportHandlerThread )
label( TeleportHandlerOff )
registersymbol( TeleportHandlerOff )
label( ExitTeleportHandler )
label( TeleportHandlerThread_loop )

label( Teleport_do )
label( Teleport_do_exit )
label( pHook )

TeleportHandlerThread:
sub rsp,28

TeleportHandlerThread_loop:
mov rcx,A
call Sleep

cmp [TeleportHandlerOff],1
je ExitTeleportHandler

  mov rcx,60 // VK_NUMPAD0
  call GetAsyncKeyState
  test ax,ax
  jne Teleport_do

jmp short TeleportHandlerThread_loop

Teleport_do:
mov rax,[pMarker]
test rax,rax                            // if pointer to object was initialized
je short Teleport_do_exit
  cmp byte ptr [rax+90],1               // and marker was set
  jne short Teleport_do_exit
    movups xmm0,[rax+80]                // get object's coordinates
    movups xmm2,xmm0
    mov rbx,[o]
    test rbx,rbx
    je short Teleport_do_exit           // check if player object is valid
      mov rbx,[rbx+10]
      test rbx,rbx
      je short Teleport_do_exit
        movups [rbx+50],xmm0            // update them to marker's coordinates
Teleport_do_exit:
mov rcx,C8
call Sleep
jmp TeleportHandlerThread_loop

ExitTeleportHandler:
add rsp,28
mov [TeleportHandlerOff],2
ret

pHook:
mov [pMarker],rbx
mov byte ptr [rbx+90],1                 // original code
jmp PBYTE_MapMarkerBool+7

TeleportHandlerOff:
dd 0
pMarker:
dq 0

PBYTE_MapMarkerBool:
jmp pHook
db 90 90

[DISABLE]

PBYTE_MapMarkerBool:
db C6 83 90 00 00 00 01

unregistersymbol( PBYTE_MapMarkerBool )

{$lua}

if( syntaxcheck == false ) then --actual execution
  local starttime = getTickCount()

if readInteger( "TeleportHandlerOff" ) == 0 then --could be 2 already
  writeInteger( "TeleportHandlerOff", 1 ) --tell the thread to kill itself
end

while( getTickCount() < starttime + 1000 ) and ( readInteger( "TeleportHandlerOff" ) ~= 2 ) do --wait till it has finished
  sleep( 20 )
end

if( getTickCount() > starttime + 1000 ) then --could happen when the window is shown
  showMessage( 'Disabling the thread failed!' )
  error( 'Thread disabling failed!' )
end
  sleep( 1 )
end

{$asm}

unregistersymbol( TeleportHandlerOff )
unregistersymbol( TeleportHandlerThread )
dealloc( TeleportHandlerThread )
And here's the updated Vehicle God:

Code: Select all

[ENABLE]

alloc( pHook, 0x1000, GRW.exe )

label( SkipVehicleDamage )
label( SkipMissileDamage )
label( SkipMobilePartsDamage )

aobscanmodule( PBYTE_SkipVehicleDamage, GRW.exe, 48895C240848896C24104889742418574883EC20498B40384889CF4C89C34C63480C )
registersymbol( PBYTE_SkipVehicleDamage )
aobscanmodule( PBYTE_SkipMissileDamage, GRW.exe, 53565741564883EC58488B41304889CB4589CE4C63500C )
registersymbol( PBYTE_SkipMissileDamage )
aobscanmodule( PBYTE_SkipMobilePartsDamage, GRW.exe, 55574154415541564883EC60488B41304D89C64589CD4C63500C )
registersymbol( PBYTE_SkipMobilePartsDamage )

pHook:

SkipVehicleDamage:
push rax
mov rax,[o]
test rax,rax
je short @f
  mov rax,[rax+398]
  test rax,rax
  je short @f
    mov rax,[rax+38]
    test rax,rax
    je short @f
      mov rax,[rax]
      test rax,rax
      je short @f
        cmp rax,rcx
        jne short @f
          pop rax
          ret
@@:
pop rax
mov [rsp+08],rbx
jmp PBYTE_SkipVehicleDamage+5

SkipMissileDamage:
push rax
mov rax,[o]
test rax,rax
je short @f
  mov rax,[rax+398]
  test rax,rax
  je short @f
    mov rax,[rax+38]
    test rax,rax
    je short @f
      mov rax,[rax]
      test rax,rax
      je short @f
        cmp [rax+88],rcx
        jne short @f
          pop rax
          ret
@@:
pop rax
push rbx
push rsi
push rdi
push r14
jmp PBYTE_SkipMissileDamage+5

SkipMobilePartsDamage:
push rax
mov rax,[o]
test rax,rax
je short @f
  mov rax,[rax+398]
  test rax,rax
  je short @f
    mov rax,[rax+38]
    test rax,rax
    je short @f
      mov rax,[rax]
      test rax,rax
      je short @f
        cmp [rax+88],rcx
        jne short @f
          pop rax
          ret
@@:
pop rax
push rbp
push rdi
push r12
push r13
jmp PBYTE_SkipMobilePartsDamage+6

PBYTE_SkipVehicleDamage:
jmp SkipVehicleDamage

PBYTE_SkipMissileDamage:
jmp SkipMissileDamage

PBYTE_SkipMobilePartsDamage:
jmp SkipMobilePartsDamage
db 90

[DISABLE]

PBYTE_SkipVehicleDamage:
db 48 89 5C 24 08

PBYTE_SkipMissileDamage:
db 53 56 57 41 56

PBYTE_SkipMobilePartsDamage:
db 55 57 41 54 41 55

unregistersymbol( PBYTE_SkipMobilePartsDamage )
unregistersymbol( PBYTE_SkipMissileDamage )
unregistersymbol( PBYTE_SkipVehicleDamage )

dealloc( pHook )
You won't receive any type of damage now: from hits (bullets, crashes, smashing into walls), missiles or rotor grinding to objects ;)

Be advised that when doing Electro Jumps in Narco Road, you will have to disable this. Game engine checks if you've received any damage on jumps (with this on you won't get any), therefore it will keep counting the jumped distance. My suggestion: keep it on, jump the ramp so distance counter starts-up, then keep jumping from ledges, over rocks, etc. till you accumulate enough to score a HIGH distance value. Once done, disable script and just hit a rock, wall, pole, etc. to receive a bit of damage. Counter will stop and record your value :)

BR,
Sun

leseho
Novice Cheater
Novice Cheater
Posts: 15
Joined: Mon Aug 21, 2017 1:37 am
Reputation: 0

Re: Tom Clancy's Ghost Recon Wildlands - AnvilNEXT64 Cheats and more..

Post by leseho » Thu Sep 07, 2017 1:22 pm

hi~
I did what I taught you.
It's a fiasco.
You scanned the unknown values.
I found my address.
But we could only fix the level.
The power of the guns has not changed.
Just teach me the power of the guns, the noise and the penetration.
I'll look for the rest.
Thank you very much.

User avatar
SunBeam
Trouble Makers
Trouble Makers
Posts: 353
Joined: Thu Mar 02, 2017 10:15 pm
Reputation: 95

Re: Tom Clancy's Ghost Recon Wildlands - AnvilNEXT64 Cheats and more..

Post by SunBeam » Thu Sep 07, 2017 1:27 pm

If you've found at least 1 weapon property, the rest should be in the SAME structure. Poke around it, the various offsets and figure out where it is :P String references in game code might easily point that out :)

Regarding Tier One, I started from Paul44's post here:

• there is a list of all Tier One levels and their maximum values:

Image

Left column is the level, right column is the Max XP.

• you start at Tier 50, which corresponds to level 1 in above list: 1 -> 1000.

Image

• my current level, as you can see, is 7 with Max XP 3400:

Image

• Tier Level is decrypted here when you press J, then go to TIER ONE tab:

Code: Select all

GRW.exe+6BA2537 - 48 8B 8E 48070000     - mov rcx,[rsi+00000748]
GRW.exe+6BA253E - 44 0FB6 F0            - movzx r14d,al
GRW.exe+6BA2542 - E8 F9EA4DFE           - call GRW.exe+5081040 <-- this call decrypts Tier One level
GRW.exe+6BA2547 - 48 8B 8E 48070000     - mov rcx,[rsi+00000748] <-- here, in EAX, you should see your level
• Current XP is decrypted here when you press J, then go to TIER ONE tab:

Code: Select all

GRW.exe+507FA00 - 48 89 5C 24 08        - mov [rsp+08],rbx
GRW.exe+507FA05 - 48 89 74 24 10        - mov [rsp+10],rsi
GRW.exe+507FA0A - 57                    - push rdi
GRW.exe+507FA0B - 48 83 EC 20           - sub rsp,20
GRW.exe+507FA0F - 48 89 CB              - mov rbx,rcx
GRW.exe+507FA12 - 48 81 C1 A0000000     - add rcx,000000A0
GRW.exe+507FA19 - E8 1250BAFF           - call GRW.exe+4C24A30
GRW.exe+507FA1E - 48 89 D9              - mov rcx,rbx
GRW.exe+507FA21 - 89 C7                 - mov edi,eax
GRW.exe+507FA23 - E8 28190000           - call GRW.exe+5081350
GRW.exe+507FA28 - 84 C0                 - test al,al
GRW.exe+507FA2A - 74 41                 - je GRW.exe+507FA6D
GRW.exe+507FA2C - 48 8B 35 7D4532FF     - mov rsi,[GRW.exe+43A3FB0] { [3FE0CBC0] }
GRW.exe+507FA33 - 3B BE B0020000        - cmp edi,[rsi+000002B0]
GRW.exe+507FA39 - 7D 32                 - jnl GRW.exe+507FA6D
GRW.exe+507FA3B - 85 FF                 - test edi,edi
GRW.exe+507FA3D - 74 1C                 - je GRW.exe+507FA5B
GRW.exe+507FA3F - 48 8D 8B C8000000     - lea rcx,[rbx+000000C8]
GRW.exe+507FA46 - E8 E54FBAFF           - call GRW.exe+4C24A30 <-- this call decrypts Current XP
GRW.exe+507FA4B - 89 FA                 - mov edx,edi <-- EAX here will hold your Current XP
• Maximum XP is read from here when you press J, then go to TIER ONE tab:

Code: Select all

GRW.exe+54FE590 - 48 83 EC 28           - sub rsp,28
GRW.exe+54FE594 - 41 89 D0              - mov r8d,edx
GRW.exe+54FE597 - 85 D2                 - test edx,edx
GRW.exe+54FE599 - 7F 0F                 - jg GRW.exe+54FE5AA
GRW.exe+54FE59B - 31 C0                 - xor eax,eax
GRW.exe+54FE59D - 48 83 C4 28           - add rsp,28
GRW.exe+54FE5A1 - C3                    - ret 
GRW.exe+54FE5A2 - 00 00                 - add [rax],al
GRW.exe+54FE5A4 - 00 00                 - add [rax],al
GRW.exe+54FE5A6 - 00 00                 - add [rax],al
GRW.exe+54FE5A8 - 00 00                 - add [rax],al
GRW.exe+54FE5AA - 48 8B 81 B8020000     - mov rax,[rcx+000002B8]
GRW.exe+54FE5B1 - 44 8B 89 34030000     - mov r9d,[rcx+00000334]
GRW.exe+54FE5B8 - 48 63 50 0C           - movsxd  rdx,dword ptr [rax+0C]
GRW.exe+54FE5BC - 48 8B 08              - mov rcx,[rax]
GRW.exe+54FE5BF - 48 C1 E2 20           - shl rdx,20
GRW.exe+54FE5C3 - 48 C1 FA 3F           - sar rdx,3F
GRW.exe+54FE5C7 - 48 21 D1              - and rcx,rdx
GRW.exe+54FE5CA - 74 12                 - je GRW.exe+54FE5DE
GRW.exe+54FE5CC - 66 41 0F6E C8         - movd xmm1,r8d
GRW.exe+54FE5D1 - 0F5B C9               - cvtdq2ps xmm1,xmm1
GRW.exe+54FE5D4 - E8 D7B1D500           - call GRW.exe+62597B0 <-- returns Max XP
GRW.exe+54FE5D9 - F3 44 0F2C C8         - cvttss2si r9d,xmm0 <-- Paul44's code in GRW_XP_AutoLevel_T1~Image1.png
GRW.exe+54FE5DE - 44 89 C8              - mov eax,r9d
GRW.exe+54FE5E1 - 48 83 C4 28           - add rsp,28
GRW.exe+54FE5E5 - C3                    - ret 
• when you do a kill, for example, Current XP is written to in this function:

Code: Select all

GRW.exe+50831B0 - 48 89 E0              - mov rax,rsp <-- function prologue
GRW.exe+50831B3 - 53                    - push rbx
GRW.exe+50831B4 - 48 83 EC 60           - sub rsp,60
GRW.exe+50831B8 - 48 89 68 10           - mov [rax+10],rbp
GRW.exe+50831BC - 48 89 70 18           - mov [rax+18],rsi
GRW.exe+50831C0 - 48 89 78 20           - mov [rax+20],rdi
GRW.exe+50831C4 - 48 8D 59 10           - lea rbx,[rcx+10]
GRW.exe+50831C8 - 4C 89 60 F0           - mov [rax-10],r12
GRW.exe+50831CC - 4C 89 68 E8           - mov [rax-18],r13
GRW.exe+50831D0 - 4D 89 CD              - mov r13,r9
GRW.exe+50831D3 - 49 63 E8              - movsxd  rbp,r8d
GRW.exe+50831D6 - 89 D6                 - mov esi,edx
GRW.exe+50831D8 - 48 89 CF              - mov rdi,rcx
GRW.exe+50831DB - 48 85 DB              - test rbx,rbx
GRW.exe+50831DE - 74 08                 - je GRW.exe+50831E8
GRW.exe+50831E0 - 48 89 D9              - mov rcx,rbx
GRW.exe+50831E3 - E8 78F5DF02           - call GRW.exe+7E82760
GRW.exe+50831E8 - 48 8D 8F A0000000     - lea rcx,[rdi+000000A0] <-- load pointer to Tier One Level
GRW.exe+50831EF - E8 3C18BAFF           - call GRW.exe+4C24A30 <-- read and decrypt
GRW.exe+50831F4 - 48 8B 0D B50D32FF     - mov rcx,[GRW.exe+43A3FB0] { [3FE0CBC0] }
GRW.exe+50831FB - 3B 81 B0020000        - cmp eax,[rcx+000002B0] <-- compare to Tier One Max (which is 50)
GRW.exe+5083201 - 0F8D 90010000         - jnl GRW.exe+5083397 <-- if 50, exit
GRW.exe+5083207 - 89 C2                 - mov edx,eax <-- else, move level value to edx
GRW.exe+5083209 - 4C 89 74 24 48        - mov [rsp+48],r14
GRW.exe+508320E - 4C 89 7C 24 40        - mov [rsp+40],r15
GRW.exe+5083213 - E8 78B34700           - call GRW.exe+54FE590 <-- get Max XP
GRW.exe+5083218 - 48 8D 8F C8000000     - lea rcx,[rdi+000000C8] <-- load pointer to Current XP
GRW.exe+508321F - 41 89 C6              - mov r14d,eax <-- move Max XP to R14
GRW.exe+5083222 - E8 0918BAFF           - call GRW.exe+4C24A30 <-- read and decrypt Current XP
GRW.exe+5083227 - 48 8D 4C 24 30        - lea rcx,[rsp+30]
GRW.exe+508322C - 31 D2                 - xor edx,edx
GRW.exe+508322E - 41 89 C7              - mov r15d,eax <-- move Current XP to R15
GRW.exe+5083231 - 89 44 24 70           - mov [rsp+70],eax
GRW.exe+5083235 - E8 F60A0B02           - call GRW.exe+7133D30
GRW.exe+508323A - BA 0FA2FFE7           - mov edx,E7FFA20F
GRW.exe+508323F - 48 89 F9              - mov rcx,rdi
GRW.exe+5083242 - 8D 92 F95D0018        - lea edx,[rdx+18005DF9]
GRW.exe+5083248 - F3 0F10 15 98AF1DFE   - movss xmm2,[GRW.exe+325E1E8] { [1.00] }
GRW.exe+5083250 - E8 4BDFFFFF           - call GRW.exe+50811A0
GRW.exe+5083255 - 48 8D 44 24 30        - lea rax,[rsp+30]
GRW.exe+508325A - 66 0F6E CE            - movd xmm1,esi
GRW.exe+508325E - 48 89 44 24 28        - mov [rsp+28],rax
GRW.exe+5083263 - 4D 89 E9              - mov r9,r13
GRW.exe+5083266 - 41 89 E8              - mov r8d,ebp
GRW.exe+5083269 - 48 89 F9              - mov rcx,rdi
GRW.exe+508326C - C7 44 24 20 02000000  - mov [rsp+20],00000002
GRW.exe+5083274 - 0F5B C9               - cvtdq2ps xmm1,xmm1
GRW.exe+5083277 - F3 0F59 C1            - mulss xmm0,xmm1
GRW.exe+508327B - F3 0F2C D0            - cvttss2si edx,xmm0
GRW.exe+508327F - E8 ECC2FFFF           - call GRW.exe+507F570 <-- returns given XP by action
GRW.exe+5083284 - 31 C9                 - xor ecx,ecx
GRW.exe+5083286 - 44 01 F8              - add eax,r15d <-- add amount to Current XP
GRW.exe+5083289 - 41 89 C7              - mov r15d,eax <-- move updated Current XP to EAX
GRW.exe+508328C - 45 29 F7              - sub r15d,r14d <-- subtract Current XP from Max XP
GRW.exe+508328F - 45 85 FF              - test r15d,r15d <-- check result
GRW.exe+5083292 - 44 0F4E F9            - cmovle r15d,ecx <-- if lower or equal, ECX (which is 0); else R15 (Current XP)
GRW.exe+5083296 - 44 39 74 24 70        - cmp [rsp+70],r14d <-- check Current XP before addition vs. Max XP
GRW.exe+508329B - 7D 7D                 - jnl GRW.exe+508331A <-- if not lower, continue
GRW.exe+508329D - 44 39 F0              - cmp eax,r14d <-- check updated Current XP vs. Max XP
GRW.exe+50832A0 - 44 89 F6              - mov esi,r14d
GRW.exe+50832A3 - 48 8D 8F C8000000     - lea rcx,[rdi+000000C8] <-- load pointer to Current XP
GRW.exe+50832AA - 0F4E F0               - cmovle esi,eax <-- if Current XP is lower or equal than Max XP, ESI = EAX; else ESI (Max XP)
GRW.exe+50832AD - 89 F2                 - mov edx,esi <-- move Current XP to EDX
GRW.exe+50832AF - E8 8C71BBFF           - call GRW.exe+4C3A440 <-- encrypt and write Current XP
GRW.exe+50832B4 - 44 39 F6              - cmp esi,r14d
GRW.exe+50832B7 - 7C 27                 - jl GRW.exe+50832E0
GRW.exe+50832B9 - 48 8D 8F A0000000     - lea rcx,[rdi+000000A0]
GRW.exe+50832C0 - E8 6B17BAFF           - call GRW.exe+4C24A30
GRW.exe+50832C5 - BA 0F05C390           - mov edx,90C3050F
GRW.exe+50832CA - 48 89 F9              - mov rcx,rdi
GRW.exe+50832CD - 44 8D 48 01           - lea r9d,[rax+01]
GRW.exe+50832D1 - 8D 92 F9FA3C6F        - lea edx,[rdx+6F3CFAF9]
GRW.exe+50832D7 - 44 8D 42 1D           - lea r8d,[rdx+1D]
GRW.exe+50832DB - E8 10D6FFFF           - call GRW.exe+50808F0
GRW.exe+50832E0 - 2B 74 24 70           - sub esi,[rsp+70]
GRW.exe+50832E4 - 48 8D 54 24 30        - lea rdx,[rsp+30]
GRW.exe+50832E9 - 41 89 E9              - mov r9d,ebp
GRW.exe+50832EC - 48 89 F9              - mov rcx,rdi
GRW.exe+50832EF - 41 89 F0              - mov r8d,esi
GRW.exe+50832F2 - 4C 89 6C 24 20        - mov [rsp+20],r13
GRW.exe+50832F7 - E8 84D7FFFF           - call GRW.exe+5080A80
GRW.exe+50832FC - 01 B4 AF D4020000     - add [rdi+rbp*4+000002D4],esi
GRW.exe+5083303 - 41 89 F1              - mov r9d,esi
GRW.exe+5083306 - 4D 89 E8              - mov r8,r13
GRW.exe+5083309 - 89 EA                 - mov edx,ebp
GRW.exe+508330B - 48 89 F9              - mov rcx,rdi
GRW.exe+508330E - C6 87 20030000 01     - mov byte ptr [rdi+00000320],01
GRW.exe+5083315 - E8 66F8FFFF           - call GRW.exe+5082B80
GRW.exe+508331A - 4C 8B 74 24 48        - mov r14,[rsp+48]
GRW.exe+508331F - 45 85 FF              - test r15d,r15d
GRW.exe+5083322 - 7E 31                 - jle GRW.exe+5083355
GRW.exe+5083324 - 48 8D 8F 18010000     - lea rcx,[rdi+00000118]
GRW.exe+508332B - E8 0017BAFF           - call GRW.exe+4C24A30
GRW.exe+5083330 - 48 8B 15 790C32FF     - mov rdx,[GRW.exe+43A3FB0] { [3FE0CBC0] }
GRW.exe+5083337 - 8B 92 30030000        - mov edx,[rdx+00000330]
GRW.exe+508333D - 39 D0                 - cmp eax,edx
GRW.exe+508333F - 7D 14                 - jnl GRW.exe+5083355
GRW.exe+5083341 - 44 01 F8              - add eax,r15d
GRW.exe+5083344 - 48 8D 8F 18010000     - lea rcx,[rdi+00000118]
GRW.exe+508334B - 39 D0                 - cmp eax,edx
GRW.exe+508334D - 0F4E D0               - cmovle edx,eax
GRW.exe+5083350 - E8 EB70BBFF           - call GRW.exe+4C3A440
GRW.exe+5083355 - 8B 44 24 38           - mov eax,[rsp+38]
GRW.exe+5083359 - 4C 8B 7C 24 40        - mov r15,[rsp+40]
GRW.exe+508335E - C1 E8 0F              - shr eax,0F
GRW.exe+5083361 - F6 D0                 - not al
GRW.exe+5083363 - A8 01                 - test al,01
GRW.exe+5083365 - 74 30                 - je GRW.exe+5083397
GRW.exe+5083367 - 48 8B 7C 24 30        - mov rdi,[rsp+30]
GRW.exe+508336C - 48 85 FF              - test rdi,rdi
GRW.exe+508336F - 74 26                 - je GRW.exe+5083397
GRW.exe+5083371 - 48 8B 0D 50BC51FF     - mov rcx,[GRW.exe+459EFC8]
GRW.exe+5083378 - 48 89 FA              - mov rdx,rdi
GRW.exe+508337B - E8 D0512B01           - call GRW.exe+6338550
GRW.exe+5083380 - 48 8B 0D 39BB51FF     - mov rcx,[GRW.exe+459EEC0] { [1445A08A8] }
GRW.exe+5083387 - 48 89 FA              - mov rdx,rdi
GRW.exe+508338A - 48 8B 09              - mov rcx,[rcx]
GRW.exe+508338D - 49 89 C0              - mov r8,rax
GRW.exe+5083390 - 4C 8B 09              - mov r9,[rcx]
GRW.exe+5083393 - 41 FF 51 28           - call qword ptr [r9+28]
GRW.exe+5083397 - 4C 8B 6C 24 50        - mov r13,[rsp+50]
GRW.exe+508339C - 4C 8B 64 24 58        - mov r12,[rsp+58]
GRW.exe+50833A1 - 48 8B BC 24 88000000  - mov rdi,[rsp+00000088]
GRW.exe+50833A9 - 48 8B B4 24 80000000  - mov rsi,[rsp+00000080]
GRW.exe+50833B1 - 48 8B 6C 24 78        - mov rbp,[rsp+78]
GRW.exe+50833B6 - 48 85 DB              - test rbx,rbx
GRW.exe+50833B9 - 74 0D                 - je GRW.exe+50833C8
GRW.exe+50833BB - 48 89 D9              - mov rcx,rbx
GRW.exe+50833BE - 48 83 C4 60           - add rsp,60
GRW.exe+50833C2 - 5B                    - pop rbx
GRW.exe+50833C3 - E9 A82EE002           - jmp GRW.exe+7E86270
GRW.exe+50833C8 - 48 83 C4 60           - add rsp,60
GRW.exe+50833CC - 5B                    - pop rbx
GRW.exe+50833CD - C3                    - ret <-- function epilogue
Now, to level-up fast, change:

Code: Select all

GRW.exe+5083286 - 44 01 F8              - add eax,r15d
to

Code: Select all

GRW.exe+5083286 - 41 8B C6              - mov eax,r14d
This is in the official Ubisoft version (I'm done with CPY one, won't mention it from now on).

Happy gaming :P



BR,
Sun

P.S.: If you do above change, note that you will level up fast when you aim at an enemy. Or just use the drone to highlight enemies ;) :D

beam moon
What is cheating?
What is cheating?
Posts: 1
Joined: Fri Sep 08, 2017 7:19 am
Reputation: 0

Re: Tom Clancy's Ghost Recon Wildlands - AnvilNEXT64 Cheats and more..

Post by beam moon » Fri Sep 08, 2017 7:24 am

For anyone still working on v2355883, is there chance for bonus medal weapons and acceory unlocker?
Thanks in advance, you are very great people!

BulliPang
What is cheating?
What is cheating?
Posts: 2
Joined: Fri Sep 08, 2017 1:13 pm
Reputation: 0

Re: Tom Clancy's Ghost Recon Wildlands - AnvilNEXT64 Cheats and more..

Post by BulliPang » Fri Sep 08, 2017 1:29 pm

Any way you could post the complete script for Tier One? I'm not good enough at scripting to get it to work.
Also thank you for all the work you've put into this!

jacobcass97
Noobzor
Noobzor
Posts: 6
Joined: Fri Sep 01, 2017 12:50 pm
Reputation: 0

Re: Tom Clancy's Ghost Recon Wildlands - AnvilNEXT64 Cheats and more..

Post by jacobcass97 » Fri Sep 08, 2017 3:37 pm

so has anyone know to bypass eac . if so . please help .

sky170111
Novice Cheater
Novice Cheater
Posts: 23
Joined: Fri Aug 18, 2017 9:47 am
Reputation: 3

Re: Tom Clancy's Ghost Recon Wildlands - AnvilNEXT64 Cheats and more..

Post by sky170111 » Fri Sep 08, 2017 9:51 pm

jacobcass97 wrote:
Fri Sep 08, 2017 3:37 pm
so has anyone know to bypass eac . if so . please help .
commandline
-eac_launcher
?

Post Reply

Who is online

Users browsing this forum: 8906, AznBoy222, Bing [Bot], coldcell, nomar, sinykk, UnfadingOnes, Zalexard