• 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
x86 Assembly AimBoT Source v2.0 - Dll (Mw2)
#1
i edited a litle the code and fixed the killcam bug with the espbox

heres the code

C++ Code
  1. void AimBoT(unsigned int Current_X_Degress_Address,unsigned int X_Degress_Address,unsigned int Current_Y_Degress_Address,unsigned int Y_Degress_Address,unsigned int Get_If_Aiming_Address,unsigned int My_X_Location_Address,unsigned int My_Y_Location_Address,unsigned int My_Z_Location_Address,unsigned int Enemy_X_Location_Address,unsigned int Enemy_Y_Location_Address,unsigned int Enemy_Z_Location_Address,unsigned int Gravity_Address,unsigned int If_Aiming_Tube_Address,float Tube_Velocity){
  2. float My_X_Location,My_Y_Location,My_Z_Location,Enemy_X_Location,Enemy_Y_Location,Enemy_Z_Location,Gravity,Velocity,temp;
  3. __asm{
  4. Start:
  5. mov ecx,esp
  6. push [Get_If_Aiming_Address]
  7. call ReadMemory
  8. fldz
  9. fld dword ptr [esp]
  10. fcom
  11. fstsw ax
  12. sahf
  13. fstp dword ptr [esp-4]
  14. fstp dword ptr [esp-4]
  15. je onemoreChance
  16. push 2500
  17. fild dword ptr [esp]
  18. fstp dword ptr [Velocity]
  19. add esp,4
  20. push 1
  21. fild DWORD PTR [esp]
  22. fstp DWORD PTR [Gravity]
  23. add esp,4
  24. jmp DontEndYet
  25. onemoreChance:
  26. push [If_Aiming_Tube_Address]
  27. call ReadMemory
  28. pop eax
  29. mov ebx,0
  30. cmp eax,ebx
  31. je end
  32. push [If_Aiming_Tube_Address]
  33. call ReadMemory
  34. pop eax
  35. mov ebx,3
  36. cmp eax,ebx
  37. jg end
  38. mov eax,[Tube_Velocity]
  39. mov [Velocity],eax
  40. push [Gravity_Address]
  41. call ReadMemory
  42. fild DWORD PTR [esp]
  43. fstp DWORD PTR [Gravity]
  44. add esp,4
  45. DontEndYet:
  46. push [My_X_Location_Address]
  47. call ReadMemory
  48. pop eax
  49. push [My_Y_Location_Address]
  50. call ReadMemory
  51. pop edx
  52. push [My_Z_Location_Address]
  53. call ReadMemory
  54. pop ebx
  55. mov [My_X_Location],eax
  56. mov [My_Y_Location],edx
  57. mov [My_Z_Location],ebx
  58. push [Enemy_X_Location_Address]
  59. call ReadMemory
  60. pop eax
  61. push [Enemy_Y_Location_Address]
  62. call ReadMemory
  63. pop edx
  64. push [Enemy_Z_Location_Address]
  65. call ReadMemory
  66. pop ebx
  67. cmp eax,0
  68. je Testz
  69. jmp DontEnd
  70. Testz:
  71. cmp edx,0
  72. je Test1
  73. jmp DontEnd
  74. Test1:
  75. cmp ebx,0
  76. je end
  77. DontEnd:
  78. push [Enemy_X_Location_Address]
  79. call ReadMemory
  80. pop eax
  81. push [Enemy_Y_Location_Address]
  82. call ReadMemory
  83. pop edx
  84. push [Enemy_Z_Location_Address]
  85. call ReadMemory
  86. pop ebx
  87. mov [Enemy_X_Location],eax
  88. mov [Enemy_Y_Location],edx
  89. mov [Enemy_Z_Location],ebx
  90. fld dword ptr [Enemy_X_Location]
  91. fld dword ptr [My_X_Location]
  92. fsub
  93. fstp dword ptr [My_X_Location]
  94. fld dword ptr [Enemy_Y_Location]
  95. fld dword ptr [My_Y_Location]
  96. fsub
  97. fstp dword ptr [My_Y_Location]
  98. fld dword ptr [Enemy_Z_Location]
  99. fld dword ptr [My_Z_Location]
  100. fsub
  101. fstp dword ptr [My_Z_Location]
  102. fldz
  103. fld dword ptr [My_Y_Location]
  104. fcom
  105. fstsw ax
  106. sahf
  107. fstp dword ptr [esp-4]
  108. fstp dword ptr [esp-4]
  109. jb Compare1
  110. jmp endCompare1
  111. Compare1:
  112. fldz
  113. fld dword ptr [My_X_Location]
  114. fcom
  115. fstsw ax
  116. sahf
  117. fstp dword ptr [esp-4]
  118. fstp dword ptr [esp-4]
  119. jb Compare1_1
  120. jge Compare1_2
  121. Compare1_1:
  122. push -1
  123. fild dword ptr [esp]
  124. fstp dword ptr[esp]
  125. fld dword ptr [esp]
  126. fld dword ptr [My_X_Location]
  127. fmul
  128. fstp dword ptr [My_X_Location]
  129. add esp,4
  130. push -1
  131. fild dword ptr [esp]
  132. fstp dword ptr [esp]
  133. fld dword ptr [esp]
  134. fld dword ptr [My_Y_Location]
  135. fmul
  136. fstp dword ptr [My_Y_Location]
  137. add esp,4
  138. push [My_X_Location]
  139. push [My_Y_Location]
  140. push 180
  141. fild dword ptr [esp]
  142. fstp dword ptr [esp]
  143. push 1
  144. call Degrees_X
  145. jmp endCompare2
  146. Compare1_2:
  147. push 1
  148. fild dword ptr [esp]
  149. fstp dword ptr [esp]
  150. fld dword ptr [esp]
  151. fld dword ptr [My_X_Location]
  152. fmul
  153. fstp dword ptr [My_X_Location]
  154. add esp,4
  155. push -1
  156. fild dword ptr [esp]
  157. fstp dword ptr [esp]
  158. fld dword ptr [esp]
  159. fld dword ptr [My_Y_Location]
  160. fmul
  161. fstp dword ptr [My_Y_Location]
  162. add esp,4
  163. push [My_X_Location]
  164. push [My_Y_Location]
  165. push 90
  166. fild dword ptr [esp]
  167. fstp dword ptr [esp]
  168. push 0
  169. call Degrees_X
  170. jmp endCompare2
  171. endCompare1:
  172. fldz
  173. fld dword ptr [My_Y_Location]
  174. add esp,4
  175. fcom
  176. fstsw ax
  177. sahf
  178. fstp dword ptr [esp-4]
  179. fstp dword ptr [esp-4]
  180. jge Compare2
  181. jmp endCompare2
  182. Compare2:
  183. fldz
  184. fld dword ptr [My_X_Location]
  185. add esp,4
  186. fcom
  187. fstsw ax
  188. sahf
  189. fstp dword ptr [esp-4]
  190. fstp dword ptr [esp-4]
  191. jb Compare2_1
  192. jge Compare2_2
  193. Compare2_1:
  194. push -1
  195. fild dword ptr [esp]
  196. fstp dword ptr [esp]
  197. fld dword ptr [esp]
  198. fld dword ptr [My_X_Location]
  199. fmul
  200. fstp dword ptr [My_X_Location]
  201. add esp,4
  202. push 1
  203. fild dword ptr [esp]
  204. fstp dword ptr [esp]
  205. fld dword ptr [esp]
  206. fld dword ptr [My_Y_Location]
  207. fmul
  208. fstp dword ptr [My_Y_Location]
  209. add esp,4
  210. push [My_X_Location]
  211. push [My_Y_Location]
  212. push 270
  213. fild dword ptr [esp]
  214. fstp dword ptr [esp]
  215. push 0
  216. call Degrees_X
  217. jmp endCompare2
  218. Compare2_2:
  219. push 1
  220. fild dword ptr [esp]
  221. fstp dword ptr [esp]
  222. fld dword ptr [esp]
  223. fld dword ptr [My_X_Location]
  224. fmul
  225. fstp dword ptr [My_X_Location]
  226. add esp,4
  227. push 1
  228. fild dword ptr [esp]
  229. fstp dword ptr [esp]
  230. fld dword ptr [esp]
  231. fld dword ptr [My_Y_Location]
  232. fmul
  233. fstp dword ptr [My_Y_Location]
  234. add esp,4
  235. push [My_X_Location]
  236. push [My_Y_Location]
  237. push 0
  238. fild dword ptr [esp]
  239. fstp dword ptr [esp]
  240. push 1
  241. call Degrees_X
  242. jmp endCompare2
  243. endCompare2:
  244. push [Current_X_Degress_Address]
  245. call ReadMemory
  246. fldz
  247. fld dword ptr [esp]
  248. fcom
  249. fstsw ax
  250. sahf
  251. fstp dword ptr [esp-4]
  252. fstp dword ptr [esp-4]
  253. jb add360d
  254. jmp dadd360d
  255. add360d:
  256. fld dword ptr [esp]
  257. push 360
  258. fild dword ptr [esp]
  259. fstp dword ptr [esp]
  260. fld dword ptr [esp]
  261. fadd
  262. add esp,4
  263. fstp dword ptr [esp]
  264. dadd360d:
  265. push [X_Degress_Address]
  266. call ReadMemory
  267. fld dword ptr [esp]
  268. fld dword ptr [esp+4]
  269. fsub
  270. add esp,4
  271. fstp dword ptr [esp]
  272. fld dword ptr [esp]
  273. fld dword ptr [esp+4]
  274. fadd
  275. add esp,4
  276. fstp dword ptr [esp]
  277. pop ebx
  278. push [X_Degress_Address]
  279. push ebx
  280. call WriteMemory
  281. push [Velocity]
  282. push [Gravity]
  283. push [My_X_Location]
  284. push [My_Y_Location]
  285. push [My_Z_Location]
  286. call Degrees_Y
  287. fld dword ptr [esp]
  288. fld dword ptr [esp]
  289. fcom
  290. fstsw ax
  291. sahf
  292. fstp dword ptr [esp-4]
  293. fstp dword ptr [esp-4]
  294. jb end
  295. push -1
  296. fild dword ptr [esp]
  297. fstp dword ptr [esp]
  298. fld dword ptr [esp]
  299. fld dword ptr [esp+4]
  300. fmul
  301. add esp,4
  302. fstp dword ptr [esp]
  303. push [Current_Y_Degress_Address]
  304. call ReadMemory
  305. push [Y_Degress_Address]
  306. call ReadMemory
  307. fld dword ptr [esp]
  308. fld dword ptr [esp+4]
  309. fsub
  310. add esp,4
  311. fstp dword ptr [esp]
  312. fld dword ptr [esp]
  313. fld dword ptr [esp+4]
  314. fadd
  315. add esp,4
  316. fstp dword ptr [esp]
  317. pop eax
  318. push [Y_Degress_Address]
  319. push eax
  320. call WriteMemory
  321. push [Enemy_X_Location_Address]
  322. push 0
  323. call WriteMemory
  324. push [Enemy_Y_Location_Address]
  325. push 0
  326. call WriteMemory
  327. push [Enemy_Z_Location_Address]
  328. push 0
  329. call WriteMemory
  330. jmp end
  331. ReadMemory: ; ReadMemory(Address)
  332. push ebp
  333. mov ebp, esp
  334. mov edi, dword ptr ds:[ebp+8]
  335. mov edi, dword ptr ds:[edi]
  336. mov dword ptr ds:[ebp+8],edi
  337. leave
  338. retn
  339. WriteMemory: ; WriteMemory(Address,Value)
  340. push ebp
  341. mov ebp, esp
  342. mov edi, dword ptr ds:[ebp+8]
  343. mov esi, dword ptr ds:[ebp+12]
  344. mov dword ptr ds:[esi], edi
  345. leave
  346. retn
  347. Sqrt: ; Sqrt(Value)
  348. push ebp
  349. mov ebp, esp
  350. fld dword ptr [ebp+8]
  351. fsqrt
  352. sub esp,4
  353. fstp dword ptr [esp]
  354. pop eax
  355. leave
  356. pop ebx
  357. add esp,4
  358. push eax
  359. push ebx
  360. retn
  361. Atan: ; Atan(Value)
  362. push ebp
  363. mov ebp, esp
  364. fld dword ptr [ebp+8]
  365. fld1
  366. fpatan
  367. sub esp,4
  368. fstp dword ptr [esp]
  369. push 180
  370. fild dword ptr [esp]
  371. fstp dword ptr [esp]
  372. fld dword ptr [esp]
  373. fldpi
  374. fdiv
  375. fstp dword ptr [esp]
  376. pop esi
  377. fld dword ptr [esp]
  378. push esi
  379. fld dword ptr [esp]
  380. fmul
  381. add esp,4
  382. fstp dword ptr [esp]
  383. pop esi
  384. leave
  385. pop eax
  386. add esp,4
  387. push esi
  388. push eax
  389. retn
  390. Pow: ; Pow(Base,Power)
  391. push ebp
  392. mov ebp, esp
  393. fld dword ptr [ebp+8]
  394. fld dword ptr [ebp+12]
  395. fld1
  396. fsub
  397. fyl2xp1
  398. sub ebp,16
  399. fist dword ptr [ebp+12]
  400. fld1
  401. fstp tbyte ptr [ebp]
  402. fisub dword ptr [ebp+12]
  403. mov eax, [ebp+12]
  404. add [ebp+8],eax
  405. f2xm1
  406. fld1
  407. fadd
  408. fld tbyte ptr [ebp]
  409. fmul
  410. add ebp,12
  411. fstp dword ptr [ebp]
  412. mov eax, dword ptr [ebp]
  413. add ebp,4
  414. leave
  415. pop edi
  416. add esp,8
  417. push eax
  418. push edi
  419. retn
  420. Asin: ; Asin(Value)
  421. push ebp
  422. mov ebp, esp
  423. sub esp,4
  424. mov eax,dword ptr [ebp+8]
  425. mov dword ptr [esp],eax
  426. push 2
  427. fild dword ptr [esp]
  428. fstp dword ptr [esp]
  429. call Pow
  430. pop edi
  431. push edi
  432. fld1
  433. fld dword ptr [esp]
  434. fsub
  435. fstp dword ptr [esp]
  436. push edi
  437. fld dword ptr [esp]
  438. fld dword ptr [esp+4]
  439. fdiv
  440. fstp dword ptr [esp]
  441. call Sqrt
  442. call Atan
  443. pop eax
  444. leave
  445. pop ebx
  446. add esp,4
  447. push eax
  448. push ebx
  449. retn
  450. Acos: ; Acos(Value)
  451. push ebp
  452. mov ebp, esp
  453. sub esp,4
  454. mov eax,dword ptr [ebp+8]
  455. mov dword ptr [esp],eax
  456. push 2
  457. fild dword ptr [esp]
  458. fstp dword ptr [esp]
  459. call Pow
  460. pop edi
  461. push edi
  462. fld1
  463. fld dword ptr [esp]
  464. fsub
  465. fstp dword ptr [esp]
  466. push edi
  467. fld dword ptr [esp+4]
  468. fld dword ptr [esp]
  469. fdiv
  470. fstp dword ptr [esp]
  471. call Sqrt
  472. call Atan
  473. pop eax
  474. leave
  475. pop ebx
  476. add esp,4
  477. push eax
  478. push ebx
  479. retn
  480. Degrees_X: ; Degrees_X(Value,Value)
  481. push ebp
  482. mov ebp, esp
  483. mov esi,dword ptr [ebp+8]
  484. mov edi,dword ptr [ebp+12]
  485. mov dword ptr [temp], edi
  486. push dword ptr [ebp+20]
  487. push 2
  488. fild dword ptr [esp]
  489. fstp dword ptr [esp]
  490. call Pow
  491. push dword ptr [ebp+16]
  492. push 2
  493. fild dword ptr [esp]
  494. fstp dword ptr [esp]
  495. call Pow
  496. fld dword ptr [esp+4]
  497. fld dword ptr [esp]
  498. fadd
  499. add esp,4
  500. fstp dword ptr [esp]
  501. call Sqrt
  502. push dword ptr [ebp+20]
  503. fld dword ptr [esp]
  504. fld dword ptr [esp+4]
  505. fdiv
  506. fstp dword ptr [esp]
  507. cmp esi,1
  508. je DoSin_X
  509. jmp DoCos_X
  510. DoSin_X:
  511. call Asin
  512. fld dword ptr [temp]
  513. fld dword ptr [esp]
  514. fadd
  515. add esp,4
  516. fstp dword ptr [esp]
  517. pop eax
  518. leave
  519. pop ebx
  520. add esp,20
  521. push eax
  522. push ebx
  523. retn
  524. DoCos_X:
  525. call Acos
  526. fld dword ptr [temp]
  527. fld dword ptr [esp]
  528. fadd
  529. add esp,4
  530. fstp dword ptr [esp]
  531. pop eax
  532. leave
  533. pop ebx
  534. add esp,20
  535. push eax
  536. push ebx
  537. retn
  538. Degrees_Y: ; Degrees_Y()
  539. push ebp
  540. mov ebp, esp
  541. push [ebp+16]
  542. push 2
  543. fild dword ptr [esp]
  544. fstp dword ptr [esp]
  545. call Pow
  546. push [ebp+12]
  547. push 2
  548. fild dword ptr [esp]
  549. fstp dword ptr [esp]
  550. call Pow
  551. fld dword ptr [esp]
  552. fld dword ptr [esp+4]
  553. fadd
  554. add esp,4
  555. fstp dword ptr [esp]
  556. call Sqrt
  557. pop dword ptr [ebp+16]
  558. push [ebp+24]
  559. push 4
  560. fild dword ptr [esp]
  561. fstp dword ptr [esp]
  562. call Pow
  563. push dword ptr [ebp+16]
  564. push 2
  565. fild dword ptr [esp]
  566. fstp dword ptr [esp]
  567. call Pow
  568. fld dword ptr [esp]
  569. fld dword ptr [ebp+20]
  570. fmul
  571. fstp dword ptr [esp]
  572. push 2
  573. fild dword ptr [esp]
  574. fstp dword ptr [esp]
  575. fld dword ptr [esp]
  576. fld dword ptr [ebp+8]
  577. fmul
  578. fstp dword ptr [esp]
  579. push [ebp+24]
  580. push 2
  581. fild dword ptr [esp]
  582. fstp dword ptr [esp]
  583. call Pow
  584. fld dword ptr [esp]
  585. fld dword ptr [esp+4]
  586. fmul
  587. add esp,4
  588. fstp dword ptr [esp]
  589. fld dword ptr [esp]
  590. fld dword ptr [esp+4]
  591. fadd
  592. add esp,4
  593. fstp dword ptr [esp]
  594. fld dword ptr [ebp+20]
  595. fld dword ptr [esp]
  596. fmul
  597. fstp dword ptr [esp]
  598. fld dword ptr [esp+4]
  599. fld dword ptr [esp]
  600. fsub
  601. add esp,4
  602. fstp dword ptr [esp]
  603. call Sqrt
  604. push [ebp+24]
  605. push 2
  606. fild dword ptr [esp]
  607. fstp dword ptr [esp]
  608. call Pow
  609. fld dword ptr [esp]
  610. fld dword ptr [esp+4]
  611. fsub
  612. add esp,4
  613. fstp dword ptr [esp]
  614. push 0
  615. fld dword ptr [ebp+20]
  616. fld dword ptr [ebp+16]
  617. fmul
  618. fstp dword ptr [esp]
  619. fld dword ptr [esp+4]
  620. fld dword ptr [esp]
  621. fdiv
  622. add esp,4
  623. fstp dword ptr [esp]
  624. call Atan
  625. pop eax
  626. leave
  627. pop ebx
  628. add esp,24
  629. push eax
  630. push ebx
  631. retn
  632. end:
  633. mov esp,ecx
  634. }
  635. Sleep(17);
  636. }


here full code for the hack -
C++ Code
  1. #include <windows.h>
  2.  
  3. /*///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
  4. /NNNNNNNN NNNNNNNN iiii XXXXXXX XXXXXXX lllllll MMMMMMMM MMMMMMMM/
  5. /N:::::::N N::::::N i::::i X:::::X X:::::X l:::::l M:::::::M M:::::::M/
  6. /N::::::::N N::::::N iiii X:::::X X:::::X l:::::l M::::::::M M::::::::M/
  7. /N:::::::::N N::::::N X::::::X X::::::X l:::::l M:::::::::M M:::::::::M/
  8. /N::::::::::N N::::::Niiiiiii eeeeeeeeeeee XXX:::::X X:::::XXXrrrrr rrrrrrrrr l::::l aaaaaaaaaaaaa M::::::::::M M::::::::::M/
  9. /N:::::::::::N N::::::Ni:::::i ee::::::::::::ee X:::::X X:::::X r::::rrr:::::::::r l::::l a::::::::::::a M:::::::::::M M:::::::::::M/
  10. /N:::::::N::::N N::::::N i::::i e::::::eeeee:::::ee X:::::X:::::X r:::::::::::::::::r l::::l aaaaaaaaa:::::a M:::::::M::::M M::::M:::::::M/
  11. /N::::::N N::::N N::::::N i::::i e::::::e e:::::e X:::::::::X rr::::::rrrrr::::::rl::::l a::::a M::::::M M::::M M::::M M::::::M/
  12. /N::::::N N::::N:::::::N i::::i e:::::::eeeee::::::e X:::::::::X r:::::r r:::::rl::::l aaaaaaa:::::a M::::::M M::::M::::M M::::::M/
  13. /N::::::N N:::::::::::N i::::i e:::::::::::::::::e X:::::X:::::X r:::::r rrrrrrrl::::l aa::::::::::::a M::::::M M:::::::M M::::::M/
  14. /N::::::N N::::::::::N i::::i e::::::eeeeeeeeeee X:::::X X:::::X r:::::r l::::l a::::aaaa::::::a M::::::M M:::::M M::::::M/
  15. /N::::::N N:::::::::N i::::i e:::::::e XXX:::::X X:::::XXX r:::::r l::::l a::::a a:::::a M::::::M MMMMM M::::::M/
  16. /N::::::N N::::::::Ni::::::ie::::::::e X::::::X X::::::X r:::::r l::::::la::::a a:::::a M::::::M M::::::M/
  17. /N::::::N N:::::::Ni::::::i e::::::::eeeeeeeeX:::::X X:::::X r:::::r l::::::la:::::aaaa::::::a M::::::M M::::::M/
  18. /N::::::N N::::::Ni::::::i ee:::::::::::::eX:::::X X:::::X r:::::r l::::::l a::::::::::aa:::aM::::::M M::::::M/
  19. /NNNNNNNN NNNNNNNiiiiiiii eeeeeeeeeeeeeeXXXXXXX XXXXXXX rrrrrrr llllllll aaaaaaaaaa aaaaMMMMMMMM MMMMMMMM/
  20. / /
  21. / all credits saves to NieXrlaM for coding /
  22. *////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
  23.  
  24. void AimBoT(unsigned int Current_X_Degress_Address,unsigned int X_Degress_Address,unsigned int Current_Y_Degress_Address,unsigned int Y_Degress_Address,unsigned int Get_If_Aiming_Address,unsigned int My_X_Location_Address,unsigned int My_Y_Location_Address,unsigned int My_Z_Location_Address,unsigned int Enemy_X_Location_Address,unsigned int Enemy_Y_Location_Address,unsigned int Enemy_Z_Location_Address,unsigned int Gravity_Address,unsigned int If_Aiming_Tube_Address,float Tube_Velocity){
  25. float My_X_Location,My_Y_Location,My_Z_Location,Enemy_X_Location,Enemy_Y_Location,Enemy_Z_Location,Gravity,Velocity,temp;
  26. __asm{
  27. Start:
  28. mov ecx,esp
  29. push [Get_If_Aiming_Address]
  30. call ReadMemory
  31. fldz
  32. fld dword ptr [esp]
  33. fcom
  34. fstsw ax
  35. sahf
  36. fstp dword ptr [esp-4]
  37. fstp dword ptr [esp-4]
  38. je onemoreChance
  39. push 2500
  40. fild dword ptr [esp]
  41. fstp dword ptr [Velocity]
  42. add esp,4
  43. push 1
  44. fild DWORD PTR [esp]
  45. fstp DWORD PTR [Gravity]
  46. add esp,4
  47. jmp DontEndYet
  48. onemoreChance:
  49. push [If_Aiming_Tube_Address]
  50. call ReadMemory
  51. pop eax
  52. mov ebx,0
  53. cmp eax,ebx
  54. je end
  55. push [If_Aiming_Tube_Address]
  56. call ReadMemory
  57. pop eax
  58. mov ebx,3
  59. cmp eax,ebx
  60. jg end
  61. mov eax,[Tube_Velocity]
  62. mov [Velocity],eax
  63. push [Gravity_Address]
  64. call ReadMemory
  65. fild DWORD PTR [esp]
  66. fstp DWORD PTR [Gravity]
  67. add esp,4
  68. DontEndYet:
  69. push [My_X_Location_Address]
  70. call ReadMemory
  71. pop eax
  72. push [My_Y_Location_Address]
  73. call ReadMemory
  74. pop edx
  75. push [My_Z_Location_Address]
  76. call ReadMemory
  77. pop ebx
  78. mov [My_X_Location],eax
  79. mov [My_Y_Location],edx
  80. mov [My_Z_Location],ebx
  81. push [Enemy_X_Location_Address]
  82. call ReadMemory
  83. pop eax
  84. push [Enemy_Y_Location_Address]
  85. call ReadMemory
  86. pop edx
  87. push [Enemy_Z_Location_Address]
  88. call ReadMemory
  89. pop ebx
  90. cmp eax,0
  91. je Testz
  92. jmp DontEnd
  93. Testz:
  94. cmp edx,0
  95. je Test1
  96. jmp DontEnd
  97. Test1:
  98. cmp ebx,0
  99. je end
  100. DontEnd:
  101. push [Enemy_X_Location_Address]
  102. call ReadMemory
  103. pop eax
  104. push [Enemy_Y_Location_Address]
  105. call ReadMemory
  106. pop edx
  107. push [Enemy_Z_Location_Address]
  108. call ReadMemory
  109. pop ebx
  110. mov [Enemy_X_Location],eax
  111. mov [Enemy_Y_Location],edx
  112. mov [Enemy_Z_Location],ebx
  113. fld dword ptr [Enemy_X_Location]
  114. fld dword ptr [My_X_Location]
  115. fsub
  116. fstp dword ptr [My_X_Location]
  117. fld dword ptr [Enemy_Y_Location]
  118. fld dword ptr [My_Y_Location]
  119. fsub
  120. fstp dword ptr [My_Y_Location]
  121. fld dword ptr [Enemy_Z_Location]
  122. fld dword ptr [My_Z_Location]
  123. fsub
  124. fstp dword ptr [My_Z_Location]
  125. fldz
  126. fld dword ptr [My_Y_Location]
  127. fcom
  128. fstsw ax
  129. sahf
  130. fstp dword ptr [esp-4]
  131. fstp dword ptr [esp-4]
  132. jb Compare1
  133. jmp endCompare1
  134. Compare1:
  135. fldz
  136. fld dword ptr [My_X_Location]
  137. fcom
  138. fstsw ax
  139. sahf
  140. fstp dword ptr [esp-4]
  141. fstp dword ptr [esp-4]
  142. jb Compare1_1
  143. jge Compare1_2
  144. Compare1_1:
  145. push -1
  146. fild dword ptr [esp]
  147. fstp dword ptr[esp]
  148. fld dword ptr [esp]
  149. fld dword ptr [My_X_Location]
  150. fmul
  151. fstp dword ptr [My_X_Location]
  152. add esp,4
  153. push -1
  154. fild dword ptr [esp]
  155. fstp dword ptr [esp]
  156. fld dword ptr [esp]
  157. fld dword ptr [My_Y_Location]
  158. fmul
  159. fstp dword ptr [My_Y_Location]
  160. add esp,4
  161. push [My_X_Location]
  162. push [My_Y_Location]
  163. push 180
  164. fild dword ptr [esp]
  165. fstp dword ptr [esp]
  166. push 1
  167. call Degrees_X
  168. jmp endCompare2
  169. Compare1_2:
  170. push 1
  171. fild dword ptr [esp]
  172. fstp dword ptr [esp]
  173. fld dword ptr [esp]
  174. fld dword ptr [My_X_Location]
  175. fmul
  176. fstp dword ptr [My_X_Location]
  177. add esp,4
  178. push -1
  179. fild dword ptr [esp]
  180. fstp dword ptr [esp]
  181. fld dword ptr [esp]
  182. fld dword ptr [My_Y_Location]
  183. fmul
  184. fstp dword ptr [My_Y_Location]
  185. add esp,4
  186. push [My_X_Location]
  187. push [My_Y_Location]
  188. push 90
  189. fild dword ptr [esp]
  190. fstp dword ptr [esp]
  191. push 0
  192. call Degrees_X
  193. jmp endCompare2
  194. endCompare1:
  195. fldz
  196. fld dword ptr [My_Y_Location]
  197. add esp,4
  198. fcom
  199. fstsw ax
  200. sahf
  201. fstp dword ptr [esp-4]
  202. fstp dword ptr [esp-4]
  203. jge Compare2
  204. jmp endCompare2
  205. Compare2:
  206. fldz
  207. fld dword ptr [My_X_Location]
  208. add esp,4
  209. fcom
  210. fstsw ax
  211. sahf
  212. fstp dword ptr [esp-4]
  213. fstp dword ptr [esp-4]
  214. jb Compare2_1
  215. jge Compare2_2
  216. Compare2_1:
  217. push -1
  218. fild dword ptr [esp]
  219. fstp dword ptr [esp]
  220. fld dword ptr [esp]
  221. fld dword ptr [My_X_Location]
  222. fmul
  223. fstp dword ptr [My_X_Location]
  224. add esp,4
  225. push 1
  226. fild dword ptr [esp]
  227. fstp dword ptr [esp]
  228. fld dword ptr [esp]
  229. fld dword ptr [My_Y_Location]
  230. fmul
  231. fstp dword ptr [My_Y_Location]
  232. add esp,4
  233. push [My_X_Location]
  234. push [My_Y_Location]
  235. push 270
  236. fild dword ptr [esp]
  237. fstp dword ptr [esp]
  238. push 0
  239. call Degrees_X
  240. jmp endCompare2
  241. Compare2_2:
  242. push 1
  243. fild dword ptr [esp]
  244. fstp dword ptr [esp]
  245. fld dword ptr [esp]
  246. fld dword ptr [My_X_Location]
  247. fmul
  248. fstp dword ptr [My_X_Location]
  249. add esp,4
  250. push 1
  251. fild dword ptr [esp]
  252. fstp dword ptr [esp]
  253. fld dword ptr [esp]
  254. fld dword ptr [My_Y_Location]
  255. fmul
  256. fstp dword ptr [My_Y_Location]
  257. add esp,4
  258. push [My_X_Location]
  259. push [My_Y_Location]
  260. push 0
  261. fild dword ptr [esp]
  262. fstp dword ptr [esp]
  263. push 1
  264. call Degrees_X
  265. jmp endCompare2
  266. endCompare2:
  267. push [Current_X_Degress_Address]
  268. call ReadMemory
  269. fldz
  270. fld dword ptr [esp]
  271. fcom
  272. fstsw ax
  273. sahf
  274. fstp dword ptr [esp-4]
  275. fstp dword ptr [esp-4]
  276. jb add360d
  277. jmp dadd360d
  278. add360d:
  279. fld dword ptr [esp]
  280. push 360
  281. fild dword ptr [esp]
  282. fstp dword ptr [esp]
  283. fld dword ptr [esp]
  284. fadd
  285. add esp,4
  286. fstp dword ptr [esp]
  287. dadd360d:
  288. push [X_Degress_Address]
  289. call ReadMemory
  290. fld dword ptr [esp]
  291. fld dword ptr [esp+4]
  292. fsub
  293. add esp,4
  294. fstp dword ptr [esp]
  295. fld dword ptr [esp]
  296. fld dword ptr [esp+4]
  297. fadd
  298. add esp,4
  299. fstp dword ptr [esp]
  300. pop ebx
  301. push [X_Degress_Address]
  302. push ebx
  303. call WriteMemory
  304. push [Velocity]
  305. push [Gravity]
  306. push [My_X_Location]
  307. push [My_Y_Location]
  308. push [My_Z_Location]
  309. call Degrees_Y
  310. fld dword ptr [esp]
  311. fld dword ptr [esp]
  312. fcom
  313. fstsw ax
  314. sahf
  315. fstp dword ptr [esp-4]
  316. fstp dword ptr [esp-4]
  317. jb end
  318. push -1
  319. fild dword ptr [esp]
  320. fstp dword ptr [esp]
  321. fld dword ptr [esp]
  322. fld dword ptr [esp+4]
  323. fmul
  324. add esp,4
  325. fstp dword ptr [esp]
  326. push [Current_Y_Degress_Address]
  327. call ReadMemory
  328. push [Y_Degress_Address]
  329. call ReadMemory
  330. fld dword ptr [esp]
  331. fld dword ptr [esp+4]
  332. fsub
  333. add esp,4
  334. fstp dword ptr [esp]
  335. fld dword ptr [esp]
  336. fld dword ptr [esp+4]
  337. fadd
  338. add esp,4
  339. fstp dword ptr [esp]
  340. pop eax
  341. push [Y_Degress_Address]
  342. push eax
  343. call WriteMemory
  344. push [Enemy_X_Location_Address]
  345. push 0
  346. call WriteMemory
  347. push [Enemy_Y_Location_Address]
  348. push 0
  349. call WriteMemory
  350. push [Enemy_Z_Location_Address]
  351. push 0
  352. call WriteMemory
  353. jmp end
  354. ReadMemory: ; ReadMemory(Address)
  355. push ebp
  356. mov ebp, esp
  357. mov edi, dword ptr ds:[ebp+8]
  358. mov edi, dword ptr ds:[edi]
  359. mov dword ptr ds:[ebp+8],edi
  360. leave
  361. retn
  362. WriteMemory: ; WriteMemory(Address,Value)
  363. push ebp
  364. mov ebp, esp
  365. mov edi, dword ptr ds:[ebp+8]
  366. mov esi, dword ptr ds:[ebp+12]
  367. mov dword ptr ds:[esi], edi
  368. leave
  369. retn
  370. Sqrt: ; Sqrt(Value)
  371. push ebp
  372. mov ebp, esp
  373. fld dword ptr [ebp+8]
  374. fsqrt
  375. sub esp,4
  376. fstp dword ptr [esp]
  377. pop eax
  378. leave
  379. pop ebx
  380. add esp,4
  381. push eax
  382. push ebx
  383. retn
  384. Atan: ; Atan(Value)
  385. push ebp
  386. mov ebp, esp
  387. fld dword ptr [ebp+8]
  388. fld1
  389. fpatan
  390. sub esp,4
  391. fstp dword ptr [esp]
  392. push 180
  393. fild dword ptr [esp]
  394. fstp dword ptr [esp]
  395. fld dword ptr [esp]
  396. fldpi
  397. fdiv
  398. fstp dword ptr [esp]
  399. pop esi
  400. fld dword ptr [esp]
  401. push esi
  402. fld dword ptr [esp]
  403. fmul
  404. add esp,4
  405. fstp dword ptr [esp]
  406. pop esi
  407. leave
  408. pop eax
  409. add esp,4
  410. push esi
  411. push eax
  412. retn
  413. Pow: ; Pow(Base,Power)
  414. push ebp
  415. mov ebp, esp
  416. fld dword ptr [ebp+8]
  417. fld dword ptr [ebp+12]
  418. fld1
  419. fsub
  420. fyl2xp1
  421. sub ebp,16
  422. fist dword ptr [ebp+12]
  423. fld1
  424. fstp tbyte ptr [ebp]
  425. fisub dword ptr [ebp+12]
  426. mov eax, [ebp+12]
  427. add [ebp+8],eax
  428. f2xm1
  429. fld1
  430. fadd
  431. fld tbyte ptr [ebp]
  432. fmul
  433. add ebp,12
  434. fstp dword ptr [ebp]
  435. mov eax, dword ptr [ebp]
  436. add ebp,4
  437. leave
  438. pop edi
  439. add esp,8
  440. push eax
  441. push edi
  442. retn
  443. Asin: ; Asin(Value)
  444. push ebp
  445. mov ebp, esp
  446. sub esp,4
  447. mov eax,dword ptr [ebp+8]
  448. mov dword ptr [esp],eax
  449. push 2
  450. fild dword ptr [esp]
  451. fstp dword ptr [esp]
  452. call Pow
  453. pop edi
  454. push edi
  455. fld1
  456. fld dword ptr [esp]
  457. fsub
  458. fstp dword ptr [esp]
  459. push edi
  460. fld dword ptr [esp]
  461. fld dword ptr [esp+4]
  462. fdiv
  463. fstp dword ptr [esp]
  464. call Sqrt
  465. call Atan
  466. pop eax
  467. leave
  468. pop ebx
  469. add esp,4
  470. push eax
  471. push ebx
  472. retn
  473. Acos: ; Acos(Value)
  474. push ebp
  475. mov ebp, esp
  476. sub esp,4
  477. mov eax,dword ptr [ebp+8]
  478. mov dword ptr [esp],eax
  479. push 2
  480. fild dword ptr [esp]
  481. fstp dword ptr [esp]
  482. call Pow
  483. pop edi
  484. push edi
  485. fld1
  486. fld dword ptr [esp]
  487. fsub
  488. fstp dword ptr [esp]
  489. push edi
  490. fld dword ptr [esp+4]
  491. fld dword ptr [esp]
  492. fdiv
  493. fstp dword ptr [esp]
  494. call Sqrt
  495. call Atan
  496. pop eax
  497. leave
  498. pop ebx
  499. add esp,4
  500. push eax
  501. push ebx
  502. retn
  503. Degrees_X: ; Degrees_X(Value,Value)
  504. push ebp
  505. mov ebp, esp
  506. mov esi,dword ptr [ebp+8]
  507. mov edi,dword ptr [ebp+12]
  508. mov dword ptr [temp], edi
  509. push dword ptr [ebp+20]
  510. push 2
  511. fild dword ptr [esp]
  512. fstp dword ptr [esp]
  513. call Pow
  514. push dword ptr [ebp+16]
  515. push 2
  516. fild dword ptr [esp]
  517. fstp dword ptr [esp]
  518. call Pow
  519. fld dword ptr [esp+4]
  520. fld dword ptr [esp]
  521. fadd
  522. add esp,4
  523. fstp dword ptr [esp]
  524. call Sqrt
  525. push dword ptr [ebp+20]
  526. fld dword ptr [esp]
  527. fld dword ptr [esp+4]
  528. fdiv
  529. fstp dword ptr [esp]
  530. cmp esi,1
  531. je DoSin_X
  532. jmp DoCos_X
  533. DoSin_X:
  534. call Asin
  535. fld dword ptr [temp]
  536. fld dword ptr [esp]
  537. fadd
  538. add esp,4
  539. fstp dword ptr [esp]
  540. pop eax
  541. leave
  542. pop ebx
  543. add esp,20
  544. push eax
  545. push ebx
  546. retn
  547. DoCos_X:
  548. call Acos
  549. fld dword ptr [temp]
  550. fld dword ptr [esp]
  551. fadd
  552. add esp,4
  553. fstp dword ptr [esp]
  554. pop eax
  555. leave
  556. pop ebx
  557. add esp,20
  558. push eax
  559. push ebx
  560. retn
  561. Degrees_Y: ; Degrees_Y()
  562. push ebp
  563. mov ebp, esp
  564. push [ebp+16]
  565. push 2
  566. fild dword ptr [esp]
  567. fstp dword ptr [esp]
  568. call Pow
  569. push [ebp+12]
  570. push 2
  571. fild dword ptr [esp]
  572. fstp dword ptr [esp]
  573. call Pow
  574. fld dword ptr [esp]
  575. fld dword ptr [esp+4]
  576. fadd
  577. add esp,4
  578. fstp dword ptr [esp]
  579. call Sqrt
  580. pop dword ptr [ebp+16]
  581. push [ebp+24]
  582. push 4
  583. fild dword ptr [esp]
  584. fstp dword ptr [esp]
  585. call Pow
  586. push dword ptr [ebp+16]
  587. push 2
  588. fild dword ptr [esp]
  589. fstp dword ptr [esp]
  590. call Pow
  591. fld dword ptr [esp]
  592. fld dword ptr [ebp+20]
  593. fmul
  594. fstp dword ptr [esp]
  595. push 2
  596. fild dword ptr [esp]
  597. fstp dword ptr [esp]
  598. fld dword ptr [esp]
  599. fld dword ptr [ebp+8]
  600. fmul
  601. fstp dword ptr [esp]
  602. push [ebp+24]
  603. push 2
  604. fild dword ptr [esp]
  605. fstp dword ptr [esp]
  606. call Pow
  607. fld dword ptr [esp]
  608. fld dword ptr [esp+4]
  609. fmul
  610. add esp,4
  611. fstp dword ptr [esp]
  612. fld dword ptr [esp]
  613. fld dword ptr [esp+4]
  614. fadd
  615. add esp,4
  616. fstp dword ptr [esp]
  617. fld dword ptr [ebp+20]
  618. fld dword ptr [esp]
  619. fmul
  620. fstp dword ptr [esp]
  621. fld dword ptr [esp+4]
  622. fld dword ptr [esp]
  623. fsub
  624. add esp,4
  625. fstp dword ptr [esp]
  626. call Sqrt
  627. push [ebp+24]
  628. push 2
  629. fild dword ptr [esp]
  630. fstp dword ptr [esp]
  631. call Pow
  632. fld dword ptr [esp]
  633. fld dword ptr [esp+4]
  634. fsub
  635. add esp,4
  636. fstp dword ptr [esp]
  637. push 0
  638. fld dword ptr [ebp+20]
  639. fld dword ptr [ebp+16]
  640. fmul
  641. fstp dword ptr [esp]
  642. fld dword ptr [esp+4]
  643. fld dword ptr [esp]
  644. fdiv
  645. add esp,4
  646. fstp dword ptr [esp]
  647. call Atan
  648. pop eax
  649. leave
  650. pop ebx
  651. add esp,24
  652. push eax
  653. push ebx
  654. retn
  655. end:
  656. mov esp,ecx
  657. }
  658. Sleep(17);
  659. }
  660.  
  661. void SendTextToChat(char* Text){
  662. char* MessageType = "chat message";
  663. int ChatOffset = 0x594830;
  664. _asm{
  665. push [MessageType]
  666. push 0x3A83B201
  667. push 0x96
  668. push [Text]
  669. push [Text]
  670. mov ESI,[Text]
  671. mov ecx,esi
  672. call [ChatOffset]
  673. add esp,0x14
  674. }
  675. }
  676.  
  677. class MemHacking {
  678. public:
  679. float ReadFloat(unsigned int Address){
  680. float N;
  681. _asm{
  682. push [Address]
  683. pop ebx
  684. mov eax,dword ptr [ebx]
  685. mov [N],eax}return N;}
  686. int ReadInt(unsigned int Address){
  687. int N;
  688. _asm{
  689. push [Address]
  690. pop ebx
  691. mov eax,dword ptr [ebx]
  692. mov [N],eax}return N;}
  693. char* ReadChar(unsigned int Address,unsigned int Bytes){
  694. Bytes -= 1;
  695. char* N;
  696. for (unsigned int i = 0; i <= Bytes; i++){
  697. char Temporary;
  698. __asm{
  699. xor edi,edi
  700. push [Address]
  701. pop edi
  702. xor edx,edx
  703. xor dx,dx
  704. xor dl,dl
  705. xor dh,dh
  706. mov dl,byte ptr ds:[edi]
  707. mov [Temporary],dl}
  708. N[i] = Temporary;
  709. Address++;}return N;}
  710. void writeMemByte(DWORD dwAddress, void* bytes, DWORD dwSize){
  711. DWORD flOldProtect = 0;
  712. VirtualProtect((void*)dwAddress, dwSize, PAGE_EXECUTE_READWRITE, &flOldProtect);
  713. memcpy((void*) dwAddress, bytes, dwSize);
  714. VirtualProtect((void*)dwAddress, dwSize, flOldProtect, &flOldProtect);}
  715. void writeMemInt(DWORD dwAddress, int bytes){
  716. DWORD flOldProtect = 0;
  717. VirtualProtect((void*)dwAddress, sizeof(bytes), PAGE_EXECUTE_READWRITE, &flOldProtect);
  718. memcpy((void*) dwAddress, &bytes, sizeof(bytes));
  719. VirtualProtect((void*)dwAddress, sizeof(bytes), flOldProtect, &flOldProtect);}
  720. void writeMemFloat(DWORD dwAddress, float bytes){
  721. DWORD flOldProtect = 0;
  722. VirtualProtect((void*)dwAddress, sizeof(bytes), PAGE_EXECUTE_READWRITE, &flOldProtect);
  723. memcpy((void*) dwAddress, &bytes, sizeof(bytes));
  724. VirtualProtect((void*)dwAddress, sizeof(bytes), flOldProtect, &flOldProtect);}
  725. };
  726.  
  727. void Thermal(bool OnorOff){
  728. MemHacking MH;
  729. if(OnorOff == true){
  730. MH.writeMemFloat(0x6746E58,1.00000011920929);}}
  731.  
  732. void Laser(bool OnorOff){
  733. MemHacking MH;
  734. if(OnorOff == false){
  735. MH.writeMemInt(0x646E7B0,0);}
  736. if(OnorOff == true){
  737. MH.writeMemInt(0x646E7B0,1);}}
  738.  
  739. void FOV(bool OnorOff){
  740. MemHacking MH;
  741. if(OnorOff == true){
  742. MH.writeMemFloat(0x64684A0,80);}}
  743.  
  744. void BlackNWhiteFix(bool OnorOff){
  745. float BlackNWhiteValue = 0.407000005245209;
  746. MemHacking MH;
  747. if(OnorOff == true){
  748. _asm{
  749. push -1
  750. fild dword ptr [esp]
  751. fstp dword ptr[esp]
  752. fld dword ptr [BlackNWhiteValue]
  753. fld dword ptr [esp]
  754. fmul
  755. add esp,4
  756. fstp dword ptr[BlackNWhiteValue]}
  757. MH.writeMemFloat(0x8F280C,BlackNWhiteValue);}}
  758.  
  759. void GameESP(bool OnorOff){
  760. MemHacking MH;
  761. if(MH.ReadInt(0x7F58C8) == 4376){
  762. if(OnorOff == false){
  763. MH.writeMemInt(0xB9B828,4096);
  764. MH.writeMemInt(0xB89060,4096);
  765. MH.writeMemInt(0xB8C1AC,4096);
  766. MH.writeMemInt(0xB8F2F8,4096);
  767. MH.writeMemInt(0xB92444,4096);
  768. MH.writeMemInt(0xB95590,4096);
  769. MH.writeMemInt(0xB986DC,4096);}}
  770. if(MH.ReadInt(0x7F58C8) == 4096){
  771. if(OnorOff == true){
  772. MH.writeMemInt(0xB9B828,4376);
  773. MH.writeMemInt(0xB89060,4376);
  774. MH.writeMemInt(0xB8C1AC,4376);
  775. MH.writeMemInt(0xB8F2F8,4376);
  776. MH.writeMemInt(0xB92444,4376);
  777. MH.writeMemInt(0xB95590,4376);
  778. MH.writeMemInt(0xB986DC,4376);}}}
  779.  
  780. DWORD WINAPI Mw2_Hack(LPVOID lpParam) {
  781. bool EnableAimBoT = false;
  782. bool EnableESPbox = false;
  783. bool NoRecoil = false;
  784. bool Thermalb = false;
  785. bool Laserb = false;
  786. bool NoFlash = false;
  787. bool Re3Deffect = false;
  788. bool BlackNwhiteF = false;
  789. bool Radar = false;
  790. bool Fovb = false;
  791. MemHacking MH;
  792. BYTE Nop[6] = {0x90, 0x90, 0x90, 0x90, 0x90, 0x90};
  793. while(true){
  794. if (GetAsyncKeyState(VK_NUMPAD0)){
  795. EnableAimBoT = EnableAimBoT == true ? false : true;
  796. Sleep(250);
  797. if (EnableAimBoT == true){
  798. MH.writeMemByte(0x56BAFD, Nop,6);
  799. MH.writeMemByte(0x491C31, Nop,6);
  800. SendTextToChat("^3AimBoT is ^2On");}
  801. else{
  802. BYTE AimBoTx[6] = {0xF, 0x8B, 0x5C, 0xFF, 0xFF, 0xFF};
  803. BYTE AimBoTy[6] = {0xF, 0x84, 0xA6, 0x0, 0x0, 0x0};
  804. MH.writeMemByte(0x56BAFD, AimBoTx,6);
  805. MH.writeMemByte(0x491C31, AimBoTy,6);
  806. SendTextToChat("^3AimBoT is ^1Off");}}
  807. if (GetAsyncKeyState(VK_NUMPAD1)){
  808. EnableESPbox = EnableESPbox == true ? false : true;
  809. Sleep(250);
  810. if (EnableESPbox == true){
  811. MH.writeMemByte(0x5A00FE, Nop,2);
  812. MH.writeMemByte(0x4D7520, Nop,6);
  813. SendTextToChat("^3EspBox is ^2On");}
  814. else{
  815. BYTE Esp[6] = {0x8B, 0xD, 0xC8, 0x58, 0x7F, 0x0};
  816. BYTE FixColdBlooded[2] = {0x75, 0x6F};
  817. MH.writeMemByte(0x5A00FE, FixColdBlooded,2);
  818. MH.writeMemByte(0x4D7520, Esp,6);
  819. SendTextToChat("^3EspBox is ^1Off");}}
  820. if (GetAsyncKeyState(VK_NUMPAD2)){
  821. NoRecoil = NoRecoil == true ? false : true;
  822. Sleep(250);
  823. if (NoRecoil == true){
  824. MH.writeMemByte(0x49D327, Nop,5);
  825. SendTextToChat("^3No Recoil is ^2On");}
  826. else{
  827. BYTE NoRecoil[5] = {0xE8,0xC4,0x53,0xFB,0xFF};
  828. MH.writeMemByte(0x49D327, NoRecoil,5);
  829. SendTextToChat("^3No Recoil is ^1Off");}}
  830. if (GetAsyncKeyState(VK_NUMPAD3)){
  831. Thermalb = Thermalb == true ? false : true;
  832. Sleep(250);
  833. if (Thermalb == true){
  834. MH.writeMemByte(0x5102C4, Nop,5);
  835. SendTextToChat("^3Thermal is ^2On");}
  836. else{
  837. BYTE Thermal[5] = {0xA2, 0x58, 0x6E, 0x74, 0x6};
  838. MH.writeMemByte(0x5102C4, Thermal,5);
  839. SendTextToChat("^3Thermal is ^1Off");}}
  840. if (GetAsyncKeyState(VK_NUMPAD4)){
  841. Laserb = Laserb == true ? false : true;
  842. Sleep(250);
  843. if (Laserb == true){
  844. SendTextToChat("^3Laser is ^2On");}
  845. else{
  846. SendTextToChat("^3Laser is ^1Off");}}
  847. if (GetAsyncKeyState(VK_NUMPAD5)){
  848. NoFlash = NoFlash == true ? false : true;
  849. Sleep(250);
  850. if (NoFlash == true){
  851. BYTE NoFlash1[10] = {0xC7, 0x5, 0x34, 0x98, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0};
  852. BYTE NoFlash2[13] = {0xC7, 0x5, 0x34, 0x98, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x90, 0x90};
  853. BYTE NoFlash3[17] = {0xC7, 0x5, 0x2C, 0x98, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0xC4, 0x10, 0xC3, 0xCC, 0xCC, 0xCC};
  854. MH.writeMemByte(0x4AEE85, NoFlash1,10);
  855. MH.writeMemByte(0x5966AA, NoFlash2,13);
  856. MH.writeMemByte(0x5966DF, NoFlash3,17);
  857. SendTextToChat("^3No Flash is ^2On");}
  858. else{
  859. BYTE NoFlash1[10] = {0xC7, 0x5, 0x34, 0x98, 0x86, 0x0, 0x1, 0x0, 0x0, 0x0};
  860. BYTE NoFlash2[13] = {0xD9, 0x1D, 0x28, 0x98, 0x86, 0x0, 0xD9, 0x40, 0x1C, 0xD9, 0x5C, 0x24, 0x10};
  861. BYTE NoFlash3[17] = {0xD9, 0x1D, 0x2C, 0x98, 0x86, 0x0, 0x83, 0xC4, 0x10, 0xC3, 0xCC, 0xCC, 0xCC, 0xCC, 0xCC, 0xCC, 0xCC};
  862. MH.writeMemByte(0x4AEE85, NoFlash1,10);
  863. MH.writeMemByte(0x5966AA, NoFlash2,13);
  864. MH.writeMemByte(0x5966DF, NoFlash3,17);
  865. SendTextToChat("^3No Flash is ^1Off");}}
  866. if (GetAsyncKeyState(VK_NUMPAD6)){
  867. Re3Deffect = Re3Deffect == true ? false : true;
  868. Sleep(250);
  869. if (Re3Deffect == true){
  870. MH.writeMemByte(0x404250, Nop,4);
  871. SendTextToChat("^3Remove 3D Effects is ^2On");}
  872. else{
  873. BYTE No3Deffects[4] = {0xD9, 0x44, 0xE4, 0x8};
  874. MH.writeMemByte(0x404250, No3Deffects,4);
  875. SendTextToChat("^3Remove 3D Effects is ^1Off");}}
  876. if (GetAsyncKeyState(VK_NUMPAD7)){
  877. BlackNwhiteF = BlackNwhiteF == true ? false : true;
  878. Sleep(250);
  879. if (BlackNwhiteF == true){
  880. MH.writeMemByte(0x50E09B, Nop,4);
  881. SendTextToChat("^0Black^3&^7White ^3Fix is ^2On");}
  882. else{
  883. BYTE BlackNWhite[4] = {0xD9, 0x44, 0x24, 0x28};
  884. MH.writeMemByte(0x50E09B, BlackNWhite,4);
  885. MH.writeMemFloat(0x8F280C,0.407000005245209);
  886. SendTextToChat("^0Black^3&^7White ^3Fix is ^1Off");}}
  887. if (GetAsyncKeyState(VK_NUMPAD8)){
  888. Radar = Radar == true ? false : true;
  889. Sleep(250);
  890. if (Radar == true){
  891. MH.writeMemByte(0x5806D0, Nop,2);
  892. MH.writeMemByte(0x580701, Nop,2);
  893. SendTextToChat("^3Radar is ^2On");}
  894. else{
  895. BYTE Radarx[2] = {0x74, 0x3B};
  896. BYTE Radary[2] = {0x74, 0x9};
  897. MH.writeMemByte(0x5806D0, Radarx,2);
  898. MH.writeMemByte(0x580701, Radary,2);
  899. SendTextToChat("^3Radar is ^1Off");}}
  900. if (GetAsyncKeyState(VK_NUMPAD9)){
  901. Fovb = Fovb == true ? false : true;
  902. Sleep(250);
  903. if (Fovb == true){
  904. SendTextToChat("^3FOV 80 is ^2On");}
  905. else{
  906. MH.writeMemFloat(0x64684A0,65);
  907. SendTextToChat("^3FOV 80 is ^1Off");}}
  908. GameESP(EnableESPbox);
  909. Thermal(Thermalb);
  910. Laser(Laserb);
  911. FOV(Fovb);
  912. BlackNWhiteFix(BlackNwhiteF);
  913. if (EnableAimBoT == true){
  914. AimBoT(0x7A3304,0xB36A44,0x7A3300,0xB36A40,0x7F5B78,0x7A32E8+4,0x7A32E8,0x7A32E8+8,0x7A3360+4,0x7A3360,0x7A3360+8,0x7F590C,0x7F8EE9,2406);
  915. }
  916. }
  917. }
  918.  
  919. BOOL WINAPI DllMain(HMODULE hModule, DWORD dwReason, LPVOID lpvReserved) {
  920. if (dwReason == DLL_PROCESS_ATTACH) {
  921. DisableThreadLibraryCalls( hModule );
  922. CreateThread(0, 0, Mw2_Hack, 0, 0, 0);
  923. }
  924. return TRUE;
  925. }


http://pastebin.com/

Enjoy =P


Attached Files
.rar   Mw2_Hack_Source_v2.0_By_NieXrlaM.rar (Size: 277.99 KB / Downloads: 83)
[Image: 14y48rc.png]
There are 10 types of people in the world, those who know binary code and those who not understand the joke ,,
[-] The following 3 users say Thank You to NieXrlaM for this post:
  • aosma8, d0h!, [MPGH]House
  Reply
#2
U r the best man lol. Post ur Multy hack in the mw2 section haha.
  Reply
#3
I am too dumb for this
  Reply
#4
I still don't see why someone would not use something like C++ but do this instead.
  Reply
#5
Odd, you should either use mostly C++, or just use masm, or fasm.
  Reply
#6
are the offsets in the code for 1.2.208?
  Reply
#7
yes
[Image: 14y48rc.png]
There are 10 types of people in the world, those who know binary code and those who not understand the joke ,,
[-] The following 1 user says Thank You to NieXrlaM for this post:
  • aosma8
  Reply


Possibly Related Threads...
Thread Author Replies Views Last Post
  [Release] [SOURCE] Random Weapons. [HARD] Tony. 1 1,887 11-08-2013, 11:11
Last Post: Nekochan
  Help source random weapons [HARD] Tony. 4 1,792 11-08-2013, 05:25
Last Post: [HARD] Tony.
  [Request] Health and Points on hud source robinvm 7 2,095 10-27-2013, 08:23
Last Post: robinvm
  [Release] Working Aimbot The Clay Man 17 13,243 10-21-2013, 15:10
Last Post: zurasaur
  [Release] [SOURCE] DOOR V2.0 [HARD] Tony. 5 2,374 09-26-2013, 14:01
Last Post: Nekochan
  [source] medic E-losev 6 2,221 07-26-2013, 06:18
Last Post: E-losev
  [source] vAmpIr E-losev 5 1,914 07-25-2013, 16:28
Last Post: Bandarigoda123
  [Release] Barata's REAL External Console Source C# barata 37 9,464 06-28-2013, 23:47
Last Post: barata
  [Release] Shoutbot + source JariZ 11 2,539 04-05-2013, 18:15
Last Post: SuperNovaAO
Rainbow [News] Valve strikes again (Source Filmmaker) estebespt 25 4,834 04-05-2013, 18:15
Last Post: SuperNovaAO

Forum Jump:


Users browsing this thread: 1 Guest(s)