• 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Build your own memhook
#1
Original Source:
CoD6Wallhack180SuperNovaAO

complete source attached, rdy to update

oudated offsets

mem_hacks.h

memhack
-wallhack
-noflash
-radar
-no recoil
-laser
-chopper esp
-nametags
-thermal
-playerkick

C++ Code
  1. BOOL menuEnabled, wallhackEnabled, ALL2Enabled, noflashEnabled, NoRecoilEnabled, ESPEnabled, ThermalEnabled, LaserEnabled, RadarEnabled, ALLEnabled, hostEnabled, restartEnabled = false;
  2. BOOL cmdEnabled, kickEnabled, kick0Enabled, kick1Enabled, kick2Enabled, kick3Enabled, kick4Enabled, kick5Enabled, kick6Enabled, kick7Enabled, kick8Enabled, kick9Enabled, kick10Enabled, kick11Enabled, kick12Enabled, kick13Enabled, kick14Enabled, kick15Enabled, kick16Enabled, kick17Enabled, kick18Enabled = false;
  3. BYTE JMP[1] = {0xEB};
  4. BYTE NopTwo[2] = {0x90, 0x90};
  5. BYTE NopFive[5] = {0x90, 0x90, 0x90, 0x90, 0x90};
  6. BYTE NopSix[6] = {0x90, 0x90, 0x90, 0x90, 0x90, 0x90};
  7.  
  8. int *iInGame = 0;
  9.  
  10. //CONSOLE
  11. void (__cdecl *SendCommandToConsole)(int a1,int a2,char *cvar)=(void (__cdecl *)(int,int,char *))0x413D60;
  12. void *pConsoleCommand = (void*)0x413D60;
  13. void *pConsoleCommandkick = (void*)0x413D60;
  14. int spamTimer = 0;
  15. char *command1 = "^6..^2Kicked.Player^6..";
  16. char *command2 = "^6..^2Kicked.Player^6..";
  17. char *command3 = "^6..^0beta1.2..^2CK^6..";
  18. char *command4 = "^6..^0beta1.2..^2CK^6..";
  19. char *command5 = "^6..^0beta1.2..^2CK^6..";
  20. char *command6 = "^6..^0beta1.2..^2CK^6..";
  21. char *command7 = "^6..^0beta1.2..^2CK^6..";
  22. char *command8 = "^6..^0beta1.2..^2CK^6..";
  23. char *command9 = "^6..^0beta1.2..^2CK^6....";
  24. char *command10 = "lobby_partySearchWaitTime 2";
  25. char *command11 = "party_connecttimeout 2";
  26. char *command12 = "party_hostmigration 0";
  27. char *command13 = "badhost_endGameIfISuck 0";
  28. char *command14 = "lobby_partySearchWaitTime 1000";
  29. char *command15 = "party_connecttimeout 1000";
  30. char *command16 = "party_hostmigration 1";
  31. char *command17 = "badhost_endGameIfISuck 1";
  32. char *command18 = "exec .cfg";
  33. char *command19 = "fast_restart";
  34. char *command20 = "^6....^2v2^6-.^0ALL^9..^2ON";
  35. char *command21 = "^6....^2v2^6-.^0ALL^9..^1OFF";
  36. char *command22 = "^6....^2v2^6-.^0Exec..cfg";
  37. char *command23 = "^6....^^2v2^6-.^0Force.Host^9..^2ON";
  38. char *command24 = "^6....^2v2^6-.^0Force.Host^9..^1OFF";
  39. char *command25 = "^6....^2v2^6-.^0Laser^9..^2ON";
  40. char *command26 = "^6....^2v2^6-.^0Laser^9..^1OFF";
  41. char *command27 = "^6....^2v2^6-.^0UAV^9..^2ON";
  42. char *command28 = "^6....^2v2^6-.^0UAV^9..^1OFF";
  43. char *command29 = "^6....^2v2^6-.^0Anti.Recoil^9..^2ON";
  44. char *command30 = "^6....^2v2^6-.^0Anti.Recoil^9..^1OFF";
  45. char *command31 = "^6....^2v2^6-.^0Thermal^9..^2ON";
  46. char *command32 = "^6....^2v2^6-.^0Thermal^9..^1OFF";
  47. char *command33 = "^6....^2v2^6-.^0ESP.Box's^9..^2ON";
  48. char *command34 = "^6....^2v2^6-.^0ESP.Box's^9..^1OFF";
  49. char *command35 = "player_sustainammo 1";
  50. char *command36 = "clientkick 3";
  51. char *command37 = "clientkick 4";
  52. char *command38 = "g_gravity 100";
  53. char *command39 = "cg_drawFPS 1";
  54. char *command40 = "cg_drawFPS 0";
  55. char *command41 = "exec config_mp.cfg";
  56. char *command42 = "exec .cfg";
  57. char *command43 = "exec config_mp.cfg";
  58. char *command44 = "exec .cfg";
  59.  
  60. //STATUS MESSAGE
  61. void *pStatusMessage = (void*)0x4B1190;
  62. char *tString = "%c \"TEST MESSAGE\"";
  63.  
  64. //wallhack
  65. DWORD Wallhack = 0x0048970D;
  66. BYTE Wallhackon[5] = {0x68, 0x82, 0x00, 0x00, 0x00};
  67. BYTE Wallhackoff[5] = {0x68, 0x04, 0x01, 0x00, 0x00};
  68. DWORD Explosivehack = 0x0058C5C2;
  69. //0058C5C2 |. 6A 00 PUSH 0
  70. BYTE Explosivehackon[5] = {0x6A, 0x82, 0x00, 0x00, 0x00};
  71. BYTE Explosivehackoff[5] = {0x6A, 0x00};
  72. DWORD Weaponhack = 0x58C197;
  73. BYTE Weaponhackon[5] = {0x68, 0x82, 0x00, 0x00, 0x00};
  74. BYTE Weaponhackoff[5] = {0x68, 0x04, 0x01, 0x00, 0x00};
  75. DWORD Chopperhack = 0x47060F;
  76. BYTE Chopperhackon[5] = {0x68, 0x82, 0x00, 0x00, 0x00};
  77. BYTE Chopperhackoff[5] = {0x68, 0x04, 0x01, 0x00, 0x00};
  78. DWORD Sentryhack = 0x58C26C;
  79. BYTE Sentryhackon[5] = {0x68, 0x82, 0x00, 0x00, 0x00};
  80. BYTE Sentryhackoff[5] = {0x68, 0x04, 0x01, 0x00, 0x00};
  81.  
  82. //noflash
  83. DWORD noFlash = 0x4BD090;
  84. BYTE noFlashx[7] = {0xB8, 0x00, 0x00, 0x00, 0x00, 0xC3, 0x90};
  85. BYTE noFlasho[6] = {0x83, 0x3D, 0xA8, 0x88, 0x86, 0x00};
  86.  
  87. //RADAR HACK
  88. DWORD Radar1 = 0x585DA1;
  89. DWORD Radar2 = 0x585D70;
  90. DWORD counterUAVfix = 0x430E08;
  91. //RADAR OFF
  92. BYTE Radaro1[2] = {0x74, 0x09};
  93. BYTE Radaro2[2] = {0x74, 0x3B};
  94. BYTE counterUAVfixo[2] = {0x75, 0x66};
  95. //NO RECOIL
  96. DWORD fireRecoil = 0x45F9A7;
  97. //NO RECOIL ORIGINAL
  98. BYTE NoRecoilo[5] = {0xE8, 0x84, 0xB7, 0xFD, 0xFF};
  99.  
  100. //LASER
  101. DWORD Laser = 0x4C2F72;
  102. //LASER OFF
  103. BYTE Lasero[2] = {0x74, 0x08};
  104.  
  105. //CHOPPER ESP
  106. DWORD ColdBloodedFix = 0x5A468E;
  107. DWORD ColdBloodedFix2 = 0x58818C;
  108. DWORD ChopperESP1 = 0x4B27F0;
  109. DWORD ChopperESP2 = ChopperESP1 + 0x8;
  110. DWORD ChopperESP3 = ChopperESP1 + 0x1A;
  111. //CHOPPER ESP ORIGINAL
  112. BYTE ColdBloodedo2[2] = {0x75, 0x6F};
  113. BYTE ColdBloodedo[2] = {0x74, 0x06};
  114. BYTE ChopperESPo1[2] = {0x75, 0x23};
  115. BYTE ChopperESPo2[2] = {0x74, 0x09};
  116. BYTE ChopperESPo3[2] = {0x74, 0x09};
  117.  
  118. //NAMETAGS
  119. DWORD Nametags1 = 0x5883A6;
  120. DWORD Nametags2 = Nametags1 + 0x27;
  121. DWORD Nametags3 = Nametags1 + 0x34;
  122. DWORD Nametags4 = Nametags1 + 0x3C;
  123. DWORD Nametags5 = Nametags1 + 0x56;
  124. DWORD DrawThroughWall = 0x58818C;
  125. //NAMETAGS ORIGINAL
  126. BYTE Nametagso1[6] = {0x0F, 0x85, 0xF9, 0x00, 0x00, 0x00};
  127. BYTE Nametagso2[6] = {0x0F, 0x84, 0xD2, 0x00, 0x00, 0x00};
  128. BYTE Nametagso3[6] = {0x0F, 0x84, 0xC5, 0x00, 0x00, 0x00};
  129. BYTE Nametagso4[6] = {0x0F, 0x84, 0xBD, 0x00, 0x00, 0x00};
  130. BYTE Nametagso5[6] = {0x0F, 0x85, 0xA3, 0x00, 0x00, 0x00};
  131. BYTE DrawThroughWallo[2] = {0x74, 0x06};
  132.  
  133. //THERMAL VISION ON
  134. DWORD ThermalVision1 = 0x59F6EB;
  135. DWORD ThermalVision2 = 0x59F74E;
  136. DWORD BlackWhiteFix = 0x513C61;
  137. //THERMAL VISION OFF
  138. BYTE ThermalVisiono1[2] = {0x74, 0x03};
  139. BYTE ThermalVisiono2[1] = {0x74};
  140. BYTE BlackWhiteFixo[6] = {0x0F, 0x84, 0xBD, 0x00, 0x00, 0x00};
  141.  
  142. void writeMem(DWORD dwAddress, void* bytes, DWORD dwSize) {
  143. DWORD flOldProtect = 0;
  144. VirtualProtect((void*)dwAddress, dwSize, PAGE_EXECUTE_READWRITE, &flOldProtect);
  145. memcpy((void*) dwAddress, bytes, dwSize);
  146. VirtualProtect((void*)dwAddress, dwSize, flOldProtect, &flOldProtect);
  147. }
  148.  
  149.  
  150. void ConsoleCommand(char *command) {
  151. __asm {
  152. PUSH command
  153. PUSH 0
  154. PUSH 0
  155. CALL [pConsoleCommand]
  156. ADD esp, 0x8
  157. }
  158. Sleep(100);
  159. }
  160.  
  161. void ConsoleCommandkick(char *commandkick) {
  162. __asm {
  163. PUSH commandkick
  164. PUSH 0
  165. PUSH 0
  166. CALL [pConsoleCommandkick]
  167. ADD esp, 0x8
  168. }
  169. Sleep(100);
  170. }
  171.  
  172. char *commandkick0 = "clientkick 0";
  173. char *commandkick1 = "clientkick 1";
  174. char *commandkick2 = "clientkick 2";
  175. char *commandkick3 = "clientkick 3";
  176. char *commandkick4 = "clientkick 4";
  177. char *commandkick5 = "clientkick 5";
  178. char *commandkick6 = "clientkick 6";
  179. char *commandkick7 = "clientkick 7";
  180. char *commandkick8 = "clientkick 8";
  181. char *commandkick9 = "clientkick 9";
  182. char *commandkick10 = "clientkick 10";
  183. char *commandkick11 = "clientkick 11";
  184. char *commandkick12 = "clientkick 12";
  185. char *commandkick13 = "clientkick 13";
  186. char *commandkick14 = "clientkick 14";
  187. char *commandkick15 = "clientkick 15";
  188. char *commandkick16 = "clientkick 16";
  189. char *commandkick17 = "clientkick 17";
  190. char *commandkick18 = "clientkick 18";
  191.  
  192. void FakeHeadshot() {
  193. __asm {
  194. PUSH 65
  195. PUSH tString
  196. PUSH 0
  197. PUSH 0
  198. CALL [pStatusMessage]
  199. }
  200. }


Attached Files
.zip   m00 Source.zip (Size: 7.87 MB / Downloads: 62)
  Reply
#2
main.cpp

C++ Code
  1. #include "main.h"
  2. #include "mem_hacks.h"
  3. #include "windows.h"
  4. #include <intrin.h>
  5. #include <Tlhelp32.h>
  6. #include <detours.h>
  7. #include <stdio.h>
  8. //*(unsigned long*)0x01B2B8B0 = 0;
  9.  
  10. void (*oEndScene)(void);
  11.  
  12. #pragma intrinsic(_ReturnAddress)
  13. #pragma warning(disable:4996)
  14.  
  15. #define VIP_VERSION 3
  16.  
  17. struct RGBA_COLOR
  18. {
  19. float r, g, b, a;
  20. };
  21.  
  22. typedef void* (*GetFontType_)(char* FontName, int Unknown1);
  23. GetFontType_ GetFontType = (GetFontType_)0x50BEF0;
  24.  
  25. typedef int (*DrawEngineText_)(char* Text, int Unknown1, void* Font, float X, float Y, float Unknown2, float Unknown3, float Unknown4, RGBA_COLOR* Color, int Unknown5);
  26. DrawEngineText_ DrawEngineText = (DrawEngineText_)0x510790;
  27.  
  28. void DrawTextWithEngine(float x, float y, RGBA_COLOR* Color, const char* Text, ...)
  29. {
  30. void* Font = GetFontType( "fonts/bigDevFont", 0 );
  31. void* Fontsmall = GetFontType( "fonts/smallDevFont", 0 );
  32.  
  33. char buf[300] = "";
  34. va_list va_alist;
  35.  
  36. va_start(va_alist,Text);
  37. vsnprintf(buf,sizeof(buf),Text,va_alist);
  38. va_end(va_alist);
  39.  
  40. DrawEngineText(buf,0x7FFFFFFF,Font,x,y,1.0f,1.0f,0.0f,Color,0);
  41. }
  42.  
  43. void DrawTextWithEngine2(float x, float y, RGBA_COLOR* Color, const char* Text, ...)
  44. {
  45. void* Font = GetFontType( "fonts/smallDevFont", 0 );
  46.  
  47. char buf[300] = "";
  48. va_list va_alist;
  49.  
  50. va_start(va_alist,Text);
  51. vsnprintf(buf,sizeof(buf),Text,va_alist);
  52. va_end(va_alist);
  53.  
  54. DrawEngineText(buf,0x7FFFFFFF,Font,x,y,1.0f,1.0f,0.0f,Color,0);
  55. }
  56.  
  57. void xEndScene(void)
  58. {
  59. RGBA_COLOR White = { 1, 1, 1, 1 };
  60. RGBA_COLOR Blue = { 0.4f, 0.4f, 1, 1 };
  61. RGBA_COLOR Orange = { 1, 0.5f, 0, 1 };
  62. RGBA_COLOR Red = { 1, 0, 0, 1 };
  63. RGBA_COLOR Green = { 0, 1, 0, 1 };
  64. DrawTextWithEngine(190,25, &Blue, " .: :. ", VIP_VERSION);//prints out vip v3
  65. DrawTextWithEngine(190,25, &White, " .com ", VIP_VERSION);//prints out vip v3
  66. DrawTextWithEngine(190,25, &White, " i", VIP_VERSION);//prints out vip v3
  67. DrawTextWithEngine(190,50, &Blue, " .: :. ", VIP_VERSION);//prints out vip v3
  68. DrawTextWithEngine(190,50, &White, " v%d ", VIP_VERSION);//prints out vip v3
  69. DrawTextWithEngine(190,50, &White, " i", VIP_VERSION);//prints out vip v3
  70.  
  71. oEndScene();
  72. if ((GetAsyncKeyState(VK_END) & 1)) menuEnabled = !menuEnabled;
  73. if (menuEnabled) {
  74. DrawTextWithEngine2(5,210, &Blue, " Numpad ", VIP_VERSION);//prints out vip v3
  75. DrawTextWithEngine2(5,225, &White, " 0 ", VIP_VERSION);//prints out vip v3
  76. DrawTextWithEngine2(5,240, &White, " 1 ", VIP_VERSION);//prints out vip v3
  77. DrawTextWithEngine2(5,250, &White, " 2 ", VIP_VERSION);//prints out vip v3
  78. DrawTextWithEngine2(5,260, &White, " 3 ", VIP_VERSION);//prints out vip v3
  79. DrawTextWithEngine2(5,270, &White, " 4 ", VIP_VERSION);//prints out vip v3
  80. DrawTextWithEngine2(5,280, &White, " 5 ", VIP_VERSION);//prints out vip v3
  81. DrawTextWithEngine2(5,290, &White, " 6 ", VIP_VERSION);//prints out vip v3
  82. DrawTextWithEngine2(5,300, &White, " 7 ", VIP_VERSION);//prints out vip v3
  83. DrawTextWithEngine2(5,310, &White, " 8 ", VIP_VERSION);//prints out vip v3
  84. DrawTextWithEngine2(15,225, &Blue, " All ON / OFF ", VIP_VERSION);//prints out vip v3
  85. if (NoRecoilEnabled) {
  86. DrawTextWithEngine2(15,240, &Green, " Anti Recoil ON ", VIP_VERSION);//prints out vip v3
  87. } else {
  88. DrawTextWithEngine2(15,240, &Red, " Anti Recoil OFF ", VIP_VERSION);//prints out vip v3
  89. }
  90. if (hostEnabled) {
  91. DrawTextWithEngine2(15,250, &Green, " Force Host ON ", VIP_VERSION);//prints out vip v3
  92. } else {
  93. DrawTextWithEngine2(15,250, &Red, " Force Host OFF ", VIP_VERSION);//prints out vip v3
  94. }
  95. if (RadarEnabled) {
  96. DrawTextWithEngine2(15,260, &Green, " Radar Uav ON ", VIP_VERSION);//prints out vip v3
  97. } else {
  98. DrawTextWithEngine2(15,260, &Red, " Radar Uav OFF ", VIP_VERSION);//prints out vip v3
  99. }
  100. if (noflashEnabled) {
  101. DrawTextWithEngine2(15,270, &Green, " Anti Flash ON ", VIP_VERSION);//prints out vip v3
  102. } else {
  103. DrawTextWithEngine2(15,270, &Red, " Anti Flash OFF ", VIP_VERSION);//prints out vip v3
  104. }
  105. if (wallhackEnabled) {
  106. DrawTextWithEngine2(15,280, &Green, " Wallhack ON ", VIP_VERSION);//prints out vip v3
  107. } else {
  108. DrawTextWithEngine2(15,280, &Red, " Wallhack OFF ", VIP_VERSION);//prints out vip v3
  109. }
  110. if (ThermalEnabled) {
  111. DrawTextWithEngine2(15,290, &Green, " Thermal ON ", VIP_VERSION);//prints out vip v3
  112. } else {
  113. DrawTextWithEngine2(15,290, &Red, " Thermal OFF ", VIP_VERSION);//prints out vip v3
  114. }
  115. if (LaserEnabled) {
  116. DrawTextWithEngine2(15,300, &Green, " Laser ON ", VIP_VERSION);//prints out vip v3
  117. } else {
  118. DrawTextWithEngine2(15,300, &Red, " Laser OFF ", VIP_VERSION);//prints out vip v3
  119. }
  120. if (ESPEnabled) {
  121. DrawTextWithEngine2(15,310, &Green, " ESP ON ", VIP_VERSION);//prints out vip v3
  122. } else {
  123. DrawTextWithEngine2(15,310, &Red, " ESP OFF ", VIP_VERSION);//prints out vip v3
  124. }
  125. /*int CenterX = GetSystemMetrics(SM_CXSCREEN)/2;
  126. int CenterY = GetSystemMetrics(SM_CYSCREEN)/2;
  127. DrawTextWithEngine(CenterX-0,CenterY-0, &Red, "+");*/
  128. } else {
  129. DrawTextWithEngine2(5,210, &Blue, " Press For Menu ", VIP_VERSION);//prints out vip v3
  130. DrawTextWithEngine2(5,210, &White, " END", VIP_VERSION);//prints out vip v3
  131. }
  132. }
  133. void vip(void)
  134. {
  135. oEndScene = (void (__cdecl *)(void))DetourFunction((PBYTE)0x586DA0, (PBYTE)xEndScene);
  136. while(1) Sleep(10);
  137. }
  138.  
  139. DWORD WINAPI MemHackLoop(LPVOID lpParam) {
  140. while (true) {
  141. if ((GetAsyncKeyState(VK_NUMPAD8) & 1)) {
  142. ESPEnabled = !ESPEnabled;
  143. if (ESPEnabled) {
  144. //ConsoleCommand(command33);
  145. writeMem(ChopperESP1, NopTwo, 2);
  146. writeMem(ChopperESP2, NopTwo, 2);
  147. writeMem(ChopperESP3, NopTwo, 2);
  148. writeMem(ColdBloodedFix, NopTwo, 2);
  149. writeMem(Nametags1, NopSix, 6);
  150. writeMem(Nametags2, NopSix, 6);
  151. writeMem(Nametags3, NopSix, 6);
  152. writeMem(Nametags4, NopSix, 6);
  153. writeMem(Nametags5, NopSix, 6);
  154. writeMem(DrawThroughWall, NopTwo, 2);
  155. writeMem(BlackWhiteFix, NopSix, 6);
  156. } else {
  157. //ConsoleCommand(command34);
  158. writeMem(ChopperESP1, ChopperESPo1, 2);
  159. writeMem(ChopperESP2, ChopperESPo2, 2);
  160. writeMem(ChopperESP3, ChopperESPo3, 2);
  161. writeMem(ColdBloodedFix, ColdBloodedo, 2);
  162. writeMem(Nametags1, Nametagso1, 6);
  163. writeMem(Nametags2, Nametagso2, 6);
  164. writeMem(Nametags3, Nametagso3, 6);
  165. writeMem(Nametags4, Nametagso4, 6);
  166. writeMem(Nametags5, Nametagso5, 6);
  167. writeMem(DrawThroughWall, DrawThroughWallo, 2);
  168. writeMem(BlackWhiteFix, BlackWhiteFixo, 6);
  169. }
  170. }
  171. if ((GetAsyncKeyState(VK_F1) & 1)) {
  172. kick0Enabled = !kick0Enabled;
  173. if (kick0Enabled) {
  174. //ConsoleCommandkick(commandkick0);
  175. *(unsigned long*)0x01B2B8C0 = 0; //Assists
  176. *(unsigned long*)0x01B2B8C4 = 0; //Headshots
  177. *(unsigned long*)0x01B2B8B4 = 0; //Killstreak
  178. *(unsigned long*)0x01B2B8E8 = 0; //Losses
  179. *(unsigned long*)0x01B2B8A4 = 0; //Prestige
  180. *(unsigned long*)0x01B2B8AC = 0; //Score
  181. *(unsigned long*)0x01B2B8EC = 0; //Ties
  182. *(unsigned long*)0x01B2B8F0 = 0; //Winstreak
  183. *(unsigned long*)0x01B2B8E4 = 0; //Wins
  184. *(unsigned long*)0x01B2B89C = 0; //XP
  185. *(unsigned long*)0x01B2B8D0 = 0; //Time Played
  186. *(unsigned long*)0x01B2B8B0 = 0; //Kills
  187. *(unsigned long*)0x01B2B8B8 = 0; //Deaths
  188. /*0x01B2B8C0 = Assists
  189.  0x01B2B8C4 = Headshots
  190.  0x01B2B8B4 = Killstreak
  191.  0x01B2B8E8 = Losses
  192.  0x01B2B8A4 = Prestige
  193.  0x01B2B8AC = Score
  194.  0x01B2B8EC = Ties
  195.  0x01B2B8F0 = Winstreak
  196.  0x01B2B8E4 = Wins
  197.  0x01B2B89C = XP
  198.  0x01B2B8D0 = Time Played
  199.  and lastly Kills and deaths
  200.  0x01B2B8B0 = Kills
  201.  0x01B2B8B8 = Deaths*/
  202. } else {
  203. *(unsigned long*)0x01B2B8C0 = 12060; //Assists
  204. *(unsigned long*)0x01B2B8C4 = 2500; //Headshots
  205. *(unsigned long*)0x01B2B8B4 = 120; //Killstreak
  206. *(unsigned long*)0x01B2B8E8 = 4560; //Losses
  207. *(unsigned long*)0x01B2B8A4 = 10; //Prestige
  208. *(unsigned long*)0x01B2B8AC = 22634763742; //Score
  209. *(unsigned long*)0x01B2B8EC = 30; //Ties
  210. *(unsigned long*)0x01B2B8F0 = 5; //Winstreak
  211. *(unsigned long*)0x01B2B8E4 = 5630; //Wins
  212. *(unsigned long*)0x01B2B89C = 2516000; //XP
  213. *(unsigned long*)0x01B2B8D0 = 999999; //Time Played
  214. *(unsigned long*)0x01B2B8B0 = 18960; //Kills
  215. *(unsigned long*)0x01B2B8B8 = 16790; //Deaths
  216. }
  217. }
  218. /*
  219. if ((GetAsyncKeyState(VK_F2) & 1)) {
  220. kick1Enabled = !kick1Enabled;
  221. if (kick1Enabled) {
  222. ConsoleCommandkick(commandkick1);
  223. } else {
  224. ConsoleCommand(command2);
  225. }
  226. }
  227. if ((GetAsyncKeyState(VK_F3) & 1)) {
  228. kick2Enabled = !kick2Enabled;
  229. if (kick2Enabled) {
  230. ConsoleCommandkick(commandkick2);
  231. } else {
  232. ConsoleCommand(command2);
  233. }
  234. }
  235. if ((GetAsyncKeyState(VK_F4) & 1)) {
  236. kick3Enabled = !kick3Enabled;
  237. if (kick3Enabled) {
  238. ConsoleCommandkick(commandkick3);
  239. } else {
  240. ConsoleCommand(command2);
  241. }
  242. }
  243. if ((GetAsyncKeyState(VK_F5) & 1)) {
  244. kick4Enabled = !kick4Enabled;
  245. if (kick4Enabled) {
  246. ConsoleCommandkick(commandkick4);
  247. } else {
  248. ConsoleCommand(command2);
  249. }
  250. }
  251. if ((GetAsyncKeyState(VK_F6) & 1)) {
  252. kick5Enabled = !kick5Enabled;
  253. if (kick5Enabled) {
  254. ConsoleCommandkick(commandkick5);
  255. } else {
  256. ConsoleCommand(command2);
  257. }
  258. }
  259. if ((GetAsyncKeyState(VK_F7) & 1)) {
  260. kick6Enabled = !kick6Enabled;
  261. if (kick6Enabled) {
  262. ConsoleCommandkick(commandkick6);
  263. } else {
  264. ConsoleCommand(command2);
  265. }
  266. }
  267. if ((GetAsyncKeyState(VK_F8) & 1)) {
  268. kick7Enabled = !kick7Enabled;
  269. if (kick7Enabled) {
  270. ConsoleCommandkick(commandkick7);
  271. } else {
  272. ConsoleCommand(command2);
  273. }
  274. }
  275. if ((GetAsyncKeyState(VK_F9) & 1)) {
  276. kick8Enabled = !kick8Enabled;
  277. if (kick8Enabled) {
  278. ConsoleCommandkick(commandkick8);
  279. } else {
  280. ConsoleCommand(command2);
  281. }
  282. }
  283. if ((GetAsyncKeyState(VK_F10) & 1)) {
  284. kick9Enabled = !kick9Enabled;
  285. if (kick9Enabled) {
  286. ConsoleCommandkick(commandkick9);
  287. } else {
  288. ConsoleCommand(command2);
  289. }
  290. }
  291. if ((GetAsyncKeyState(VK_F11) & 1)) {
  292. kick10Enabled = !kick10Enabled;
  293. if (kick10Enabled) {
  294. ConsoleCommandkick(commandkick10);
  295. } else {
  296. ConsoleCommand(command2);
  297. }
  298. }
  299. if ((GetAsyncKeyState(VK_F12) & 1)) {
  300. kick11Enabled = !kick11Enabled;
  301. if (kick11Enabled) {
  302. ConsoleCommandkick(commandkick11);
  303. } else {
  304. ConsoleCommand(command2);
  305. }
  306. }
  307. if (GetAsyncKeyState(VK_SHIFT) && GetAsyncKeyState(VK_F3)) {
  308. kick12Enabled = !kick12Enabled;
  309. if (kick12Enabled) {
  310. ConsoleCommandkick(commandkick12);
  311. } else {
  312. ConsoleCommand(command2);
  313. }
  314. }
  315. if (GetAsyncKeyState(VK_SHIFT) && GetAsyncKeyState(VK_F4)) {
  316. kick13Enabled = !kick13Enabled;
  317. if (kick13Enabled) {
  318. ConsoleCommandkick(commandkick13);
  319. } else {
  320. ConsoleCommand(command2);
  321. }
  322. }
  323. if (GetAsyncKeyState(VK_SHIFT) && GetAsyncKeyState(VK_F5)) {
  324. kick14Enabled = !kick14Enabled;
  325. if (kick14Enabled) {
  326. ConsoleCommandkick(commandkick14);
  327. } else {
  328. ConsoleCommand(command2);
  329. }
  330. }
  331. if (GetAsyncKeyState(VK_SHIFT) && GetAsyncKeyState(VK_F6)) {
  332. kick15Enabled = !kick15Enabled;
  333. if (kick15Enabled) {
  334. ConsoleCommandkick(commandkick15);
  335. } else {
  336. ConsoleCommand(command2);
  337. }
  338. }
  339. if (GetAsyncKeyState(VK_SHIFT) && GetAsyncKeyState(VK_F7)) {
  340. kick16Enabled = !kick16Enabled;
  341. if (kick16Enabled) {
  342. ConsoleCommandkick(commandkick16);
  343. } else {
  344. ConsoleCommand(command2);
  345. }
  346. }
  347. if (GetAsyncKeyState(VK_SHIFT) && GetAsyncKeyState(VK_F8)) {
  348. kick17Enabled = !kick17Enabled;
  349. if (kick17Enabled) {
  350. ConsoleCommandkick(commandkick17);
  351. } else {
  352. ConsoleCommand(command2);
  353. }
  354. }
  355. if (GetAsyncKeyState(VK_SHIFT) && GetAsyncKeyState(VK_F9)) {
  356. kick18Enabled = !kick18Enabled;
  357. if (kick18Enabled) {
  358. ConsoleCommandkick(commandkick18);
  359. } else {
  360. ConsoleCommand(command2);
  361. }
  362. }*/
  363. if ((GetAsyncKeyState(VK_NUMPAD6) & 1)) {
  364. ThermalEnabled = !ThermalEnabled;
  365. if (ThermalEnabled) {
  366. //ConsoleCommand(command31);
  367. writeMem(ThermalVision1, NopTwo, 2);
  368. writeMem(ThermalVision2, JMP, 1);
  369. writeMem(BlackWhiteFix, NopSix, 6);
  370. } else {
  371. //ConsoleCommand(command32);
  372. writeMem(ThermalVision1, ThermalVisiono1, 2);
  373. writeMem(ThermalVision2, ThermalVisiono2, 1);
  374. writeMem(BlackWhiteFix, BlackWhiteFixo, 6);
  375. }
  376. }
  377. if ((GetAsyncKeyState(VK_NUMPAD1) & 1)) {
  378. NoRecoilEnabled = !NoRecoilEnabled;
  379. if (NoRecoilEnabled) {
  380. //ConsoleCommand(command29);
  381. writeMem(fireRecoil, NopFive, 5);
  382. } else {
  383. //ConsoleCommand(command30);
  384. writeMem(fireRecoil, NoRecoilo,5);
  385. }
  386. }
  387. if ((GetAsyncKeyState(VK_NUMPAD3) & 1)) {
  388. RadarEnabled = !RadarEnabled;
  389. if (RadarEnabled) {
  390. //ConsoleCommand(command27);
  391. writeMem(Radar1, NopTwo, 2);
  392. writeMem(Radar2, NopTwo, 2);
  393. writeMem(counterUAVfix, NopTwo, 2);
  394. } else {
  395. //ConsoleCommand(command28);
  396. writeMem(Radar1, Radaro1, 2);
  397. writeMem(Radar2, Radaro2, 2);
  398. writeMem(counterUAVfix, counterUAVfixo, 2);
  399. }
  400. }
  401. if ((GetAsyncKeyState(VK_NUMPAD7) & 1)) {
  402. LaserEnabled = !LaserEnabled;
  403. if (LaserEnabled) {
  404. // ConsoleCommand(command25);
  405. writeMem(Laser, NopTwo, 2);
  406. } else {
  407. // ConsoleCommand(command26);
  408. writeMem(Laser, Lasero, 2);
  409. }
  410. }
  411. if ((GetAsyncKeyState(VK_NUMPAD2) & 1)) { //forcehost
  412. hostEnabled = !hostEnabled;
  413. if (hostEnabled) {
  414. //ConsoleCommand(command23);
  415. //ConsoleCommand(command11);
  416. SendCommandToConsole(1,1,"party_connecttoothers 0");
  417. SendCommandToConsole(1,1,"party_connecttimeout 1");
  418. switch (spamTimer) {
  419. case 0: SendCommandToConsole(1,1,"party_connecttimeout 1");
  420. break;
  421. case 1: SendCommandToConsole(1,1,"party_connecttoothers 0");
  422. break;
  423. case 1000: SendCommandToConsole(1,1,"party_connecttimeout 1");
  424. break;
  425. case 1001: SendCommandToConsole(1,1,"party_connecttoothers 0");
  426. break;
  427. case 2000: SendCommandToConsole(1,1,"party_connecttimeout 1");
  428. break;
  429. case 2001: SendCommandToConsole(1,1,"party_connecttoothers 0");
  430. break;
  431. case 3000: SendCommandToConsole(1,1,"party_connecttimeout 1");
  432. break;
  433. case 3001: SendCommandToConsole(1,1,"party_connecttoothers 0");
  434. break;
  435. case 4000: spamTimer = -100;
  436. }
  437. spamTimer += 100;
  438. Sleep(100);
  439. } else {
  440. //ConsoleCommand(command24);
  441. //ConsoleCommand(command15);
  442. SendCommandToConsole(1,1,"party_connecttimeout 1000");
  443. SendCommandToConsole(1,1,"party_connecttoothers 1");
  444. }
  445. }
  446. /*if ((GetAsyncKeyState(VK_NUMPAD3) & 1)) { //forcehost off
  447. ConsoleCommand(command24);
  448. ConsoleCommand(command15);
  449. ConsoleCommand(command16);
  450. }*/
  451. if ((GetAsyncKeyState(VK_NUMPAD9) & 1)) {
  452. restartEnabled = !restartEnabled;
  453. if (restartEnabled) {
  454. //ConsoleCommand(command19);
  455. SendCommandToConsole(1,1,"fast_restart");
  456. } else {
  457. SendCommandToConsole(1,1,"fast_restart");
  458. }
  459. }
  460. if ((GetAsyncKeyState(VK_NUMPAD4) & 1)) {
  461. noflashEnabled = !noflashEnabled;
  462. if (restartEnabled) {
  463. writeMem(noFlash, noFlashx, 7);
  464. } else {
  465. writeMem(noFlash, noFlasho, 6);
  466. }
  467. }
  468. if ((GetAsyncKeyState(VK_NUMPAD5) & 1)) {
  469. wallhackEnabled = !wallhackEnabled;
  470. if (wallhackEnabled) {
  471. writeMem(Wallhack, Wallhackon, 5);
  472. } else {
  473. writeMem(Wallhack, Wallhackoff, 5);
  474. }
  475. }
  476. if ((GetAsyncKeyState(VK_NUMPAD0) & 1)) {
  477. ALLEnabled = !ALLEnabled;
  478. if (ALLEnabled) {
  479. noflashEnabled=ESPEnabled=NoRecoilEnabled=ThermalEnabled=LaserEnabled=RadarEnabled=wallhackEnabled=true;
  480. //SendCommandToConsole(1,1,"^7");
  481. //ConsoleCommand(command20);
  482. //ConsoleCommand(command39);
  483. writeMem(Laser, NopTwo, 2);
  484. writeMem(Wallhack, Wallhackon, 5);
  485. writeMem(Wallhack, Wallhackon, 5);
  486. writeMem(noFlash, noFlashx, 7);
  487. writeMem(ThermalVision1, NopTwo, 2);
  488. writeMem(ThermalVision2, JMP, 1);
  489. writeMem(BlackWhiteFix, NopSix, 6);
  490. writeMem(fireRecoil, NopFive, 5);
  491. writeMem(Radar1, NopTwo, 2);
  492. writeMem(Radar2, NopTwo, 2);
  493. writeMem(counterUAVfix, NopTwo, 2);
  494. writeMem(ChopperESP1, NopTwo, 2);
  495. writeMem(ChopperESP2, NopTwo, 2);
  496. writeMem(ChopperESP3, NopTwo, 2);
  497. writeMem(ColdBloodedFix, NopTwo, 2);
  498. writeMem(Nametags1, NopSix, 6);
  499. writeMem(Nametags2, NopSix, 6);
  500. writeMem(Nametags3, NopSix, 6);
  501. writeMem(Nametags4, NopSix, 6);
  502. writeMem(Nametags5, NopSix, 6);
  503. writeMem(DrawThroughWall, NopTwo, 2);
  504. } else {
  505. noflashEnabled=ESPEnabled=NoRecoilEnabled=ThermalEnabled=LaserEnabled=RadarEnabled=wallhackEnabled=false;
  506. //ConsoleCommand(command21);
  507. //ConsoleCommand(command40);
  508. writeMem(Laser, Lasero, 2);
  509. writeMem(Wallhack, Wallhackoff, 5);
  510. writeMem(noFlash, noFlasho, 6);
  511. writeMem(ThermalVision1, ThermalVisiono1, 2);
  512. writeMem(ThermalVision2, ThermalVisiono2, 1);
  513. writeMem(BlackWhiteFix, BlackWhiteFixo, 6);
  514. writeMem(fireRecoil, NoRecoilo,5);
  515. writeMem(Radar1, Radaro1, 2);
  516. writeMem(Radar2, Radaro2, 2);
  517. writeMem(counterUAVfix, counterUAVfixo, 2);
  518. writeMem(ChopperESP1, ChopperESPo1, 2);
  519. writeMem(ChopperESP2, ChopperESPo2, 2);
  520. writeMem(ChopperESP3, ChopperESPo3, 2);
  521. writeMem(ColdBloodedFix, ColdBloodedo, 2);
  522. writeMem(Nametags1, Nametagso1, 6);
  523. writeMem(Nametags2, Nametagso2, 6);
  524. writeMem(Nametags3, Nametagso3, 6);
  525. writeMem(Nametags4, Nametagso4, 6);
  526. writeMem(Nametags5, Nametagso5, 6);
  527. writeMem(DrawThroughWall, DrawThroughWallo, 2);
  528. writeMem(Laser, Lasero, 2);
  529. }
  530. }
  531. if ((GetAsyncKeyState(VK_HOME) & 1)) {
  532. ALL2Enabled = !ALL2Enabled;
  533. if (ALL2Enabled) {
  534. //ConsoleCommand(command20);
  535. //ConsoleCommand(command39);
  536. noflashEnabled=ESPEnabled=NoRecoilEnabled=ThermalEnabled=LaserEnabled=RadarEnabled=wallhackEnabled=true;
  537. writeMem(Laser, NopTwo, 2);
  538. writeMem(Wallhack, Wallhackon, 5);
  539. writeMem(Wallhack, Wallhackon, 5);
  540. writeMem(noFlash, noFlashx, 7);
  541. writeMem(ThermalVision1, NopTwo, 2);
  542. writeMem(ThermalVision2, JMP, 1);
  543. writeMem(BlackWhiteFix, NopSix, 6);
  544. writeMem(fireRecoil, NopFive, 5);
  545. writeMem(Radar1, NopTwo, 2);
  546. writeMem(Radar2, NopTwo, 2);
  547. writeMem(counterUAVfix, NopTwo, 2);
  548. writeMem(ChopperESP1, NopTwo, 2);
  549. writeMem(ChopperESP2, NopTwo, 2);
  550. writeMem(ChopperESP3, NopTwo, 2);
  551. writeMem(ColdBloodedFix, NopTwo, 2);
  552. writeMem(Nametags1, NopSix, 6);
  553. writeMem(Nametags2, NopSix, 6);
  554. writeMem(Nametags3, NopSix, 6);
  555. writeMem(Nametags4, NopSix, 6);
  556. writeMem(Nametags5, NopSix, 6);
  557. writeMem(DrawThroughWall, NopTwo, 2);
  558. } else {
  559. //ConsoleCommand(command21);
  560. //ConsoleCommand(command40);
  561. noflashEnabled=ESPEnabled=NoRecoilEnabled=ThermalEnabled=LaserEnabled=RadarEnabled=wallhackEnabled=false;
  562. writeMem(Laser, Lasero, 2);
  563. writeMem(Wallhack, Wallhackoff, 5);
  564. writeMem(noFlash, noFlasho, 6);
  565. writeMem(ThermalVision1, ThermalVisiono1, 2);
  566. writeMem(ThermalVision2, ThermalVisiono2, 1);
  567. writeMem(BlackWhiteFix, BlackWhiteFixo, 6);
  568. writeMem(fireRecoil, NoRecoilo,5);
  569. writeMem(Radar1, Radaro1, 2);
  570. writeMem(Radar2, Radaro2, 2);
  571. writeMem(counterUAVfix, counterUAVfixo, 2);
  572. writeMem(ChopperESP1, ChopperESPo1, 2);
  573. writeMem(ChopperESP2, ChopperESPo2, 2);
  574. writeMem(ChopperESP3, ChopperESPo3, 2);
  575. writeMem(ColdBloodedFix, ColdBloodedo, 2);
  576. writeMem(Nametags1, Nametagso1, 6);
  577. writeMem(Nametags2, Nametagso2, 6);
  578. writeMem(Nametags3, Nametagso3, 6);
  579. writeMem(Nametags4, Nametagso4, 6);
  580. writeMem(Nametags5, Nametagso5, 6);
  581. writeMem(DrawThroughWall, DrawThroughWallo, 2);
  582. writeMem(Laser, Lasero, 2);
  583. }
  584. }
  585. /*switch (spamTimer) {
  586. case 0: ConsoleCommand(command3);
  587. break;
  588. case 40000: ConsoleCommand(command4);
  589. break;
  590. case 80000: ConsoleCommand(command5);
  591. break;
  592. case 12000: ConsoleCommand(command6);
  593. break;
  594. case 16000: ConsoleCommand(command7);
  595. break;
  596. case 20000: ConsoleCommand(command8);
  597. break;
  598. case 24000: ConsoleCommand(command9);
  599. break;
  600. case 28000: spamTimer = -100;
  601. }
  602. spamTimer += 100;
  603. Sleep(100);*/
  604. }
  605. return 0;
  606. }
  607.  
  608. BOOL WINAPI DllMain(HMODULE hModule, DWORD dwReason, LPVOID lpvReserved) {
  609. if (dwReason == DLL_PROCESS_ATTACH) {
  610. DisableThreadLibraryCalls( hModule );
  611. CreateThread(0, 0, MemHackLoop, 0, 0, 0);
  612. CreateThread(0,0, (LPTHREAD_START_ROUTINE)vip, 0, 0,0);
  613. /* }
  614. else if(reason == DLL_PROCESS_DETACH)
  615. {
  616. DetourRemove( ( PBYTE )0x004063A0, ( PBYTE )&Render );*/
  617. }
  618. return TRUE;
  619. }
  Reply
#3
recoil.cpp

C++ Code
  1. #include "windows.h"
  2.  
  3. unsigned long *fireRecoil = (unsigned long*)0x004730E7;
  4. unsigned char xRecoilPatch[5] = { 0x90, 0x90, 0x90, 0x90, 0x90 }; //patch
  5. unsigned char oRecoilPatch[5] = { 0xE8, 0x84, 0xEF, 0xF4, 0xFF }; //orig
  6. bool bNoRec=false;
  7.  
  8. void MW2TeamThread(void)
  9. {
  10. unsigned long orig;
  11. while(1)
  12. {
  13. if(GetAsyncKeyState(VK_F11)&1)
  14. {
  15. if(bNoRec==false)
  16. {
  17. VirtualProtect(fireRecoil, sizeof(xRecoilPatch), PAGE_EXECUTE_READWRITE, &orig);
  18. memcpy(fireRecoil, &xRecoilPatch, sizeof(xRecoilPatch));
  19. VirtualProtect(fireRecoil, sizeof(xRecoilPatch), orig, &orig);
  20. bNoRec=true;
  21. }
  22. else
  23. {
  24. VirtualProtect(fireRecoil, sizeof(oRecoilPatch), PAGE_EXECUTE_READWRITE, &orig);
  25. memcpy(fireRecoil, &oRecoilPatch, sizeof(oRecoilPatch));
  26. VirtualProtect(fireRecoil, sizeof(oRecoilPatch), orig, &orig);
  27. bNoRec=false;
  28. }
  29. }
  30. Sleep(10);
  31. }
  32. }
  Reply
#4
Is that my Open Source hack I once posted on itshax.com (back when it had a frontpage)?

EDIT: Ah no, looks like my code extended by monsterman.
  Reply
#5
indeed the stolen used snippets by monsterman.

i can post the whole source if anybody is rly interested in it
  Reply
#6
@d0h me plz Smile
[Image: 1fxsnb.jpg]
  Reply
#7
the last Patch console command offset is not 0x4393E0?
and you not need to do
add esp,0x0c ? :S
[Image: 14y48rc.png]
There are 10 types of people in the world, those who know binary code and those who not understand the joke ,,
  Reply
#8
....CoD6Wallhack180 not 208
Quote:oudated offsets
  Reply
#9
iv already replaced the codes, what now?
  Reply
#10
(01-31-2011, 09:28)luimotta Wrote: iv already replaced the codes, what now?

1.Compile
2. Play
3. Own
4. ?????
5. Profit $$$$$$
  Reply


Possibly Related Threads...
Thread Author Replies Views Last Post
  Roll the Dice [BUILD 2] (25th Jun 2011) AZUMIKKEL 74 19,046 12-02-2012, 10:19
Last Post: Nekochan
  [Release] Roll the Dice [BUILD 1] (28th Jan 2011) AZUMIKKEL 16 11,066 05-13-2012, 23:32
Last Post: AZUMIKKEL
  [Release] ItsZombieMod BETA Build 2 alistair3149 16 11,408 11-27-2011, 21:21
Last Post: mokal1202
Brick [Request] Build Mod Trojan 15 1,679 08-05-2011, 14:39
Last Post: armeenzzz
  build mod.ff - turbo33 1 1,000 06-26-2011, 03:07
Last Post: iAegle
  build your own squirrel d0h! 2 621 06-19-2011, 04:23
Last Post: number1
  What do you think of RTD Build 1? AZUMIKKEL 18 2,542 06-01-2011, 15:51
Last Post: rusdark
  [Release] ItsZombieMod BETA Build 1 alistair3149 40 8,839 03-21-2011, 17:05
Last Post: daniel199578

Forum Jump:


Users browsing this thread: 1 Guest(s)