War Rock Cheat Programming Discussion

Page 28 of 76

12/07/2013 11:02 Combatdafuq#406

Founded out public somewhere

// WarRock BYPASS Method
EhSvc.dll+0x908F0
EhSvc.dll+0x0AC28
EhSvc.dll+0x4628E
EhSvc.dll+0x431DF
EhSvc.dll+0xB3A48
EhSvc.dll+0xB2AC9
EhSvc.dll+0x34D9D
EhSvc.dll+0x46304
EhSvc.dll+0x0AB90
WarRock.exe+0x51C478 - They set to this an jump short = EB ( AS OPCODE )
WarRock.exe+0x5E2651 - They set to this address an return = C3 ( AS OPCODE )

What does it do ?
Those 2 check are importat !

WarRock.exe+0x51C478 - They set to this an jump short = EB ( AS OPCODE )
WarRock.exe+0x5E2651 - They set to this address an return = C3 ( AS OPCODE )

0x51C478 = WarRock Party program detect this prevent they to get error party program detect with this they just connection terminated form server

0x5E2651 = Heart beat of hackshield inside warrock.exe that allow they to play for 1 hours with no kick if you are able to fix this they won't use anymore bypass

12/07/2013 17:44 Gameerish___#407

Code:

///////////////////////////////////////////////////////
////////////ASM Addys Searched by Gameerish////////////
///////////////////////////////////////////////////////
#define ADR_WRCHECK01        0x0051C478//04.12.2013
#define ADR_WRCHECK02        0x005E2651//04.12.2013
#define ADR_ARTILLERY0       0x004F7942//04.12.2013
#define ADR_ARTILLERY1       0x004F7BF4//04.12.2013
#define ADR_ARTILLERY2       0x0059BEE4//04.12.2013
#define ADR_ARTILLERY3       0x0059BF77//04.12.2013
#define ADR_ARTILLERY4       0x0059BCBF//04.12.2013
#define ADR_ARTILLERY5       0x0057D497//04.12.2013
#define ADR_ARTILLERY6       0x0059BE5E//04.12.2013
#define ADR_ARTILLERY7       0x0057D44E//04.12.2013
#define ADR_OPK1             0x0040838E//04.12.2013
#define ADR_OPK2             0x00408397//04.12.2013
#define ADR_OPK3             0x004083A3//04.12.2013
#define ADR_AUTOAMMO1        0x00507299//04.12.2013
#define ADR_AUTOAMMO2        0x005072D9//04.12.2013
#define ADR_AUTOHEAL1        0x005073A2//04.12.2013
#define ADR_AUTOHEAL2        0x0050760F//04.12.2013
#define ADR_UNLAMMO          0x00512DD0//04.12.2013
#define ADR_STAMINA1         0x00457A73//04.12.2013
#define ADR_STAMINA2         0x004F7669//04.12.2013
#define ADR_STAMINA3         0x005077A9//04.12.2013
#define ADR_ZERODELAY        0x0051B1DA//04.12.2013
/*Credits ~ GTGameerish(Me) And KingDevil*/

12/07/2013 18:53 bananegel#408

Quote:

Originally Posted by GTGameerish

Code:

///////////////////////////////////////////////////////
////////////ASM Addys Searched by Gameerish////////////
///////////////////////////////////////////////////////
#define ADR_WRCHECK01        0x0051C478//04.12.2013
#define ADR_WRCHECK02        0x005E2651//04.12.2013
#define ADR_ARTILLERY0       0x004F7942//04.12.2013
#define ADR_ARTILLERY1       0x004F7BF4//04.12.2013
#define ADR_ARTILLERY2       0x0059BEE4//04.12.2013
#define ADR_ARTILLERY3       0x0059BF77//04.12.2013
#define ADR_ARTILLERY4       0x0059BCBF//04.12.2013
#define ADR_ARTILLERY5       0x0057D497//04.12.2013
#define ADR_ARTILLERY6       0x0059BE5E//04.12.2013
#define ADR_ARTILLERY7       0x0057D44E//04.12.2013
#define ADR_OPK1             0x0040838E//04.12.2013
#define ADR_OPK2             0x00408397//04.12.2013
#define ADR_OPK3             0x004083A3//04.12.2013
#define ADR_AUTOAMMO1        0x00507299//04.12.2013
#define ADR_AUTOAMMO2        0x005072D9//04.12.2013
#define ADR_AUTOHEAL1        0x005073A2//04.12.2013
#define ADR_AUTOHEAL2        0x0050760F//04.12.2013
#define ADR_UNLAMMO          0x00512DD0//04.12.2013
#define ADR_STAMINA1         0x00457A73//04.12.2013
#define ADR_STAMINA2         0x004F7669//04.12.2013
#define ADR_STAMINA3         0x005077A9//04.12.2013
#define ADR_ZERODELAY        0x0051B1DA//04.12.2013
/*Credits ~ GTGameerish(Me) And KingDevil*/

Code:

#define ADR_STAMINA2			0x4019DC
#define ADR_STAMINA3			0x4F7669
#define ADR_ARTILLERY7			0x59BFF4
#define ADR_ZERODELAY			0x51B1EC

These are correct

12/07/2013 21:07 *KingDevil*#409

Quote:
Originally Posted by bananegel
Code:
....
These are correct

All of these addys are right lol

12/07/2013 21:37 bananegel#410

Quote:

Originally Posted by *KingDevil*

All of these addys are right lol

nope lol, maybe my zerodelay is wrong, but others aren't.

12/07/2013 21:39 Chowniiqhtz�#411

Quote:

Originally Posted by bananegel

nope lol

stop discussing ...
Thinking these Addies are wrong, post the correct...

12/07/2013 21:43 bananegel#412

Quote:

Originally Posted by Chowniiqhtz�

stop discussing ...
Thinking these Addies are wrong, post the correct...

I did post the correct but he started the discussion.

12/08/2013 01:51 *KingDevil*#413

Quote:

Originally Posted by bananegel

I did post the correct but he started the discussion.

I just said that these addresses are correct lol.
but np bro, i'm a hero.. my functions works all with wrong adresses..

Here some Signs..

Code:

DWORD dwASMFastRelo1 = FindPattern((PBYTE)"\x74\x08\xD9\x05\x00\x00\x00\x00\xEB\x02\xD9\xE8\xD9\x59\x40\xC3", "xxxx????xxxxxxxx",0,false);
DWORD dwASMFastRelo2 = FindPattern((PBYTE)"\x74\x04\xB1\x01\xEB\x02\x32\xC9\xE8\x00\x00\x00\x00\x39\x3D\x00\x00\x00\x00", "xxxxxxxxx????xx????",0,false);
DWORD dwASMWTW = FindPattern((PBYTE)"\xD8\x4E\x0C\xDE\xC1\xD8\x66\x34\xD9\x5C\x24\x18\xD9\x44\x24\x10", "xxxxxxxxxxxxxxxx",0,false);
DWORD dwVehSupFir1 = FindPattern((PBYTE)"\x74\x75\xA1\x00\x00\x00\x00\x33\x05\x00\x00\x00\x00\x89\x45\xC8\xA1\x00\x00\x00\x00\xD9\x45\xC8", "xxx????xx????xxxx????xxx",0,false);

Credits: Me, C++ and OllyDbg

12/08/2013 05:41 Hepe2567�#414

#Request Addys Vehiculo (Jump,Fire,Etc)

12/08/2013 12:20 bananegel#415

Quote:

Originally Posted by *KingDevil*

I just said that these addresses are correct lol.
but np bro, i'm a hero.. my functions works all with wrong adresses..

Here some Signs..

Code:

DWORD dwASMFastRelo1 = FindPattern((PBYTE)"\x74\x08\xD9\x05\x00\x00\x00\x00\xEB\x02\xD9\xE8\xD9\x59\x40\xC3", "xxxx????xxxxxxxx",0,false);
DWORD dwASMFastRelo2 = FindPattern((PBYTE)"\x74\x04\xB1\x01\xEB\x02\x32\xC9\xE8\x00\x00\x00\x00\x39\x3D\x00\x00\x00\x00", "xxxxxxxxx????xx????",0,false);
DWORD dwASMWTW = FindPattern((PBYTE)"\xD8\x4E\x0C\xDE\xC1\xD8\x66\x34\xD9\x5C\x24\x18\xD9\x44\x24\x10", "xxxxxxxxxxxxxxxx",0,false);
DWORD dwVehSupFir1 = FindPattern((PBYTE)"\x74\x75\xA1\x00\x00\x00\x00\x33\x05\x00\x00\x00\x00\x89\x45\xC8\xA1\x00\x00\x00\x00\xD9\x45\xC8", "xxx????xx????xxxx????xxx",0,false);

Credits: Me, C++ and OllyDbg

ah I understoot it wrong:p

anyway also some sigs from me:)

Code:

DWORD dwNoRecoil = FindPattern((PBYTE)"\x56\x8D\x44\x24\x08\x50\x8D\x87\x48\xC4\x00\x00\xE8\x00\x00\xF2", "xxxxxxxxxxxxx??x", 0, 0 );
DWORD dwNoReload = FindPattern((PBYTE)"\x0F\x84\x00\x01\x00\x00\x8B\x7D\x0C\xFF\x37\xE8\x00\x00\xFD\xFF", "xxxxxxxxxxxx??xx", 0, 0 );
DWORD dwStamina1 = FindPattern((PBYTE)"\x74\x1B\xD9\x44\x24\x0C\x51\x8B\xC7\xD9\x1C\x24\xE8\x00\x00\xFB", "xxxxxxxxxxxxx??x", 0, 0 );
DWORD dwStamina2 = FindPattern((PBYTE)"\x74\x15\xD9\x45\x0C\x51\xD9\x1C\x24\x57\xE8\x00\x00\x03\x00\x84", "xxxxxxxxxxx??xxx", 0, 0 );
DWORD dwStamina3 = FindPattern((PBYTE)"\x74\x11\xD9\x05\x00\x00\x89\x00\x51\x8B\xCE\xD9\x1C\x24\xE8\x00", "xxxx??xxxxxxxxx?", 0, 0 );

12/10/2013 19:01 kevin0152#416

request snippet for asm vehicle radar
and latest addies
#define Asm_VehRadarGPS 0x005836B0

Code:

                         loc_583674:                             ; CODE XREF: sub_5835A6+197j
___:00583674 8B 45 E8                                mov     eax, [ebp+var_18]
___:00583677 8B 00                                   mov     eax, [eax]
___:00583679 85 C0                                   test    eax, eax
___:0058367B 0F 8C A9 00 00 00                       jl      loc_58372A
___:00583681 8B 0D D8 98 A7 00                       mov     ecx, dword_A798D8
___:00583687 57                                      push    edi
___:00583688 8B F3                                   mov     esi, ebx
___:0058368A 85 C9                                   test    ecx, ecx
___:0058368C 0F 84 E1 00 00 00                       jz      loc_583773
___:00583692 8B 89 98 C4 00 00                       mov     ecx, [ecx+0C498h]
___:00583698 69 C0 10 0B 00 00                       imul    eax, 0B10h
___:0058369E 8B 80 FC C1 AA 00                       mov     eax, dword_AAC1FC[eax]
___:005836A4 69 C9 10 0B 00 00                       imul    ecx, 0B10h
___:005836AA 3B 81 FC C1 AA 00                       cmp     eax, dword_AAC1FC[ecx]
___:005836B0 0F 85 D2 01 00 00                       jnz     loc_583888
___:005836B6 E8 5B F0 FD FF                          call    sub_562716
___:005836BB 8B 40 04                                mov     eax, [eax+4]
___:005836BE B1 01                                   mov     cl, 1
___:005836C0 E8 5B 9E 0A 00                          call    sub_62D520
___:005836C5 D9 E8                                   fld1
___:005836C7 D9 55 C4                                fst     [ebp+var_3C]
___:005836CA 57                                      push    edi
___:005836CB D9 55 C8                                fst     [ebp+var_38]
___:005836CE C7 45 C0 00 00 00 10                    mov     [ebp+var_40], 10000000h
___:005836D5 D9 55 CC                                fst     [ebp+var_34]
___:005836D8 D9 5D D0                                fstp    [ebp+var_30]
___:005836DB E8 36 F0 FD FF                          call    sub_562716
___:005836E0 8B C8                                   mov     ecx, eax
___:005836E2 8B 49 04                                mov     ecx, [ecx+4]
___:005836E5 8D 45 C0                                lea     eax, [ebp+var_40]
___:005836E8 E8 33 9F 0A 00                          call    sub_62D620
___:005836ED 8B 45 E8                                mov     eax, [ebp+var_18]
___:005836F0 8B 00                                   mov     eax, [eax]
___:005836F2 8B 0D D8 98 A7 00                       mov     ecx, dword_A798D8
___:005836F8 C7 45 C0 00 00 00 10                    mov     [ebp+var_40], 10000000h
___:005836FF 57                                      push    edi
___:00583700 3B 81 98 C4 00 00                       cmp     eax, [ecx+0C498h]
___:00583706 74 40                                   jz      short loc_583748
___:00583708 D9 E8                                   fld1
___:0058370A D9 55 C4                                fst     [ebp+var_3C]
___:0058370D D9 55 C8                                fst     [ebp+var_38]
___:00583710 D9 55 CC                                fst     [ebp+var_34]
___:00583713 D9 5D D0                                fstp    [ebp+var_30]
___:00583716 E8 FB EF FD FF                          call    sub_562716
___:0058371B 8B C8                                   mov     ecx, eax
___:0058371D 8B 49 04                                mov     ecx, [ecx+4]
___:00583720 8D 45 C0                                lea     eax, [ebp+var_40]
___:00583723 E8 F8 9E 0A 00                          call    sub_62D620
___:00583728 EB 03                                   jmp     short loc_58372D
___:0058372A                         ; ---------------------------------------------------------------------------
___:0058372A
___:0058372A                         loc_58372A:                             ; CODE XREF: sub_5835A6+D5j
___:0058372A FF 45 E4                                inc     [ebp+var_1C]
___:0058372D
___:0058372D                         loc_58372D:                             ; CODE XREF: sub_5835A6+182j
___:0058372D FF 45 EC                                inc     [ebp+var_14]
___:00583730 8B 45 F0                                mov     eax, [ebp+var_10]
___:00583733 8B 4D EC                                mov     ecx, [ebp+var_14]
___:00583736 83 45 E8 20                             add     [ebp+var_18], 20h
___:0058373A 3B 48 78                                cmp     ecx, [eax+78h]
___:0058373D 0F 8C 31 FF FF FF                       jl      loc_583674
___:00583743 E9 4F 01 00 00                          jmp     loc_583897
___:00583748

Code:

_:00583888                         ; ---------------------------------------------------------------------------
___:00583888
___:00583888                         loc_583888:                             ; CODE XREF: sub_5835A6+10Aj
___:00583888                                                                 ; sub_5835A6+1D9j
___:00583888 E8 89 EE FD FF                          call    sub_562716
___:0058388D 8B 40 04                                mov     eax, [eax+4]
___:00583890 32 C9                                   xor     cl, cl
___:00583892 E8 89 9C 0A 00                          call    sub_62D520
___:00583897

12/10/2013 19:24 .BlackHat#417

Here's the Source Code. It's not that difficult and it works fine for me. All the bobs out there should rly try to understand this code. DERP!

Spoiler

Code:

static string GetPassport(string username, string password)
{
	System.Net.CookieContainer webCookieContainer = new System.Net.CookieContainer();
	System.Net.HttpWebRequest webRequest = (System.Net.HttpWebRequest)System.Net.HttpWebRequest.Create(new Uri("https://passport.nexoneu.com/Login.aspx?nexoneuTheme=Warrock"));
	webRequest.CookieContainer = webCookieContainer;
	webRequest.Proxy = null;
	webRequest.Method = "GET";
	webRequest.UserAgent = "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0";
	webRequest.Referer = "http://de.warrock.nexoneu.com/";
	//webRequest.UserAgent 
	System.Net.HttpWebResponse webResponse = (System.Net.HttpWebResponse)webRequest.GetResponse();
	System.IO.StreamReader webStreamReader = new System.IO.StreamReader(webResponse.GetResponseStream());
	string responseContent = webStreamReader.ReadToEnd();
	System.Text.RegularExpressions.Match aspDetailsMatch = System.Text.RegularExpressions.Regex.Match(responseContent, "\\<input .*? name=\"__VIEWSTATE\" .*? value=\"(?<viewstate>.*?)\"\\s?/>.*?" +
		"<input .*? name=\"__EVENTVALIDATION\" .*? value=\"(?<eventvalidation>.*?)\"\\s?/>", System.Text.RegularExpressions.RegexOptions.Singleline);

	webRequest = (System.Net.HttpWebRequest)System.Net.HttpWebRequest.Create(new Uri("https://passport.nexoneu.com/Login.aspx?nexoneuTheme=Warrock"));
	webRequest.CookieContainer = webCookieContainer;
	webRequest.Proxy = null;
	webRequest.Referer = "https://passport.nexoneu.com/Login.aspx?nexoneuTheme=Warrock";
	webRequest.Method = "POST";
	webRequest.ContentType = "application/x-www-form-urlencoded";

	System.IO.StreamWriter webStreamWriter = new System.IO.StreamWriter(webRequest.GetRequestStream());
	webStreamWriter.Write(String.Format("__EVENTTARGET=&__EVENTARGUMENT=&__VIEWSTATE={0}&__EVENTVALIDATION={1}&txtLogin0={2}&btnLogin.x=26&btnLogin.y=13&txtPassword0={3}&hdIsCaptcha=false&txtCaptchaText=&txtLogin2=&txtPassword2=&txtFirstName=Vorname&txtLastName=Nachname&txtEmail=+E-mail+Adresse+eingeben&ddlBirthYear=&ddlBirthMonth=&ddlBirthDay=",
		System.Web.HttpUtility.UrlEncode(aspDetailsMatch.Groups["viewstate"].Value),
		System.Web.HttpUtility.UrlEncode(aspDetailsMatch.Groups["eventvalidation"].Value),
		System.Web.HttpUtility.UrlEncode(username),
		System.Web.HttpUtility.UrlEncode(password)));
	webStreamWriter.Flush();

	webResponse = (System.Net.HttpWebResponse)webRequest.GetResponse();

	System.Net.CookieCollection cookies = webCookieContainer.GetCookies(new Uri("http://nexoneu.com"));

	return cookies["NPP"].Value;
}

12/10/2013 21:15 Kazbah__#418

Quote:

request snippet for asm vehicle radar
and latest addies
#define Asm_VehRadarGPS 0x005836B0

correct ones, jump the color addy

Code:

#define ADR_VEHGPS            0x5A3E3D
#define ADR_VEHGPSColor       0x5A3E9B

Credits: UPK researched by me :)

12/11/2013 21:45 LetMedafuq#419

Info for everyone address didn't changed to this update ;) just let you know it

12/11/2013 23:13 Kazbah__#420

Code:

	const static DWORD LevelTable       = 0x89F128; //
	const static DWORD Level            = 0x0B7E18; //

	if(options->hacks.SetVisualLvl)
	{
		int *EXPTable = (int*)( WarRockAddy->Memory.LevelTable );
		*reinterpret_cast<int*> (dwServerPointer + ( WarRockAddy->Offset.Level ) ) = EXPTable[options->hacks.SetVisualLvl - 1];
	}

Page 28 of 76

« First

Last »