it's time for me to quit kal now :P have to do some more important things in rl now ( school, friends, driving licens test and so on ) :P
so as i dont need my sources anymore i will release them now ... old KalHackZz v0.3 src and also my new KalHackZz v0.4 ( including tradehack for pserver ) ( special credits and thx for this new built src to MoepMoep and chibis )
hope come guys of u can need this ... for all others : i know its not much, not all is my work and its bulshit but maybe it helps some of u :P
for all those who arent able to handle with c++ i will attach the new KalHackZz v0.4 as dll :P
kk here we go :
KalHackZz v0.4 ( again thx to MoepMoep for his src structure and chibis for his help :P ) :
main.h:
Code:
#include <iostream>
#include <fstream>
#include <stdio.h>
#include <fcntl.h>
#include <io.h>
#include <process.h>
#include "time.h"
#include <math.h>
#include <tchar.h>
#include <stdio.h>
#include <stdlib.h>
#include <string>
#define ASM void __declspec(naked)
#define EXPORT __declspec(dllexport) __cdecl
#define THREAD DWORD WINAPI
#define Naked __declspec( naked )
#define INST_NOP 0x90
#define INST_CALL 0xe8
#define INST_JMP 0xe9
#define INST_BYTE 0x00
#define SHORT_JZ 0x74
HINSTANCE hLThis = 0;
HINSTANCE hL = 0;
FARPROC p[332] = {0};
LPVOID MemcpyEx(DWORD lpDest, DWORD lpSource, int len)
{
DWORD oldSourceProt,oldDestProt=0;
VirtualProtect((LPVOID)lpSource,len,PAGE_EXECUTE_READWRITE,&oldSourceProt);
VirtualProtect((LPVOID)lpDest,len,PAGE_EXECUTE_READWRITE,&oldDestProt);
memcpy((void*)lpDest,(void*)lpSource,len);
VirtualProtect((LPVOID)lpDest,len,oldDestProt,&oldDestProt);
VirtualProtect((LPVOID)lpSource,len,oldSourceProt,&oldSourceProt);
return (LPVOID)lpDest;
};
DWORD Intercept(int instruction, DWORD lpSource, DWORD lpDest, int len)
{
DWORD realtarget;
LPBYTE buffer = new BYTE[len];
memset(buffer,0x90,len);
if (instruction != INST_NOP && len >= 5)
{
buffer[(len-5)] = instruction;
DWORD dwJMP = (DWORD)lpDest - (lpSource + 5 + (len-5));
memcpy(&realtarget,(void*)(lpSource+1),4);
realtarget = realtarget+lpSource+5;
memcpy(buffer + 1 + (len-5),&dwJMP,4);
}
if (instruction == SHORT_JZ)
{
buffer[0]=instruction;
buffer[1]=(BYTE)lpDest;
}
if (instruction == INST_BYTE)
{
buffer[0]=(BYTE)lpDest;
}
MemcpyEx(lpSource, (DWORD) buffer, len);
delete[] buffer;
return realtarget;
}
void Console()
{
int hCrtIn, hCrtOut;
FILE *conIn, *conOut;
AllocConsole();
hCrtIn = _open_osfhandle ((intptr_t) GetStdHandle(STD_INPUT_HANDLE), _O_TEXT);
hCrtOut = _open_osfhandle ((intptr_t) GetStdHandle(STD_OUTPUT_HANDLE), _O_TEXT);
conIn = _fdopen( hCrtIn, "r" );
conOut = _fdopen( hCrtOut, "w" );
*stdin = *conIn;
*stdout = *conOut;
}
HANDLE holeoutput ()
{
return GetStdHandle (STD_OUTPUT_HANDLE);
return CreateFile(
"CONOUT$", GENERIC_WRITE | GENERIC_READ,
FILE_SHARE_READ | FILE_SHARE_WRITE,
0L, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, 0L);
}
void Color (int Colorcode ) // 0-15
{
HANDLE hConsole;
BOOL bSuccess;
WORD BackColor;
WORD wAttributesOld;
CONSOLE_SCREEN_BUFFER_INFO csbi;
hConsole = holeoutput ();
bSuccess = GetConsoleScreenBufferInfo( hConsole, &csbi );
wAttributesOld = csbi.wAttributes;
BackColor = (wAttributesOld >> 4) % 16;
SetConsoleTextAttribute( hConsole, (WORD) ( (BackColor << 4) |
(WORD) Colorcode) );
}
Code:
#include <windows.h>
#include "main.h"
using namespace std;
#pragma pack(1)
char* something;
DWORD weaponID;
int playerx,mobsx;
DWORD speedvalue;
DWORD* speedpointer = (DWORD*)0x006F3840;
DWORD fparty;
DWORD fduel;
DWORD ftrade;
char* fstudent;
DWORD poliID;
DWORD taliID;
DWORD weapID;
DWORD pimps;
DWORD ebID;
DWORD ebtimes;
char lvl[255]={100};
DWORD temp={0};
DWORD coordinate1;
DWORD coordinate2;
DWORD storms;
DWORD playerID;
DWORD aniID;
DWORD dropID;
DWORD wearID;
DWORD danceID;
DWORD X;
DWORD Y;
DWORD trash;
int stormanzahl;
int Autostorm;
DWORD waffe;
DWORD waffe2;
DWORD armor;
DWORD stein;
DWORD stein2;
int stormquad;
int hh1;
DWORD ID1h;
DWORD ID2h;
int dancehackon;
int Anihack;
int Studenthack;
int Beheadhack;
int Multihack;
int flhack;
int emok;
int hla;
int d1r1;
int d1r8;
int d1r10;
int d3f2;
int d3f5;
int d4f1;
int d4f2;
int ebit;
int revit;
DWORD PID1;
DWORD droptime;
DWORD dropitem;
DWORD coordinateX;
DWORD coordinateY;
DWORD polID;
DWORD talismanID;
DWORD times;
int anzahl;
int stormdelay;
int stormd3;
int pimp;
int storm;
int autopick;
char SendText[] = "PACKET TYPE:0x%02x FORMAT:%s\n";
char RecvText[] = "RECV TYPE: 0x%02x DATA: \n";
int MySendBack=0x004F2010+6;
int MyRecvBack=0x004F2121+7;
struct SItem
{
DWORD Item;
DWORD X;
DWORD Y;
DWORD Z;
};
SItem Item[500] = {0};
struct SPlayer
{
DWORD PID;
DWORD X;
DWORD Y;
DWORD Z;
BYTE Classe;
char name[255];
};
SPlayer Player[500]={0};
struct SMob
{
DWORD MID;
DWORD X;
DWORD Y;
DWORD Z;
BYTE Classe;
DWORD HP;
};
SMob Mob[500]={0};
int Naked SendDetour(DWORD type,LPCSTR format,...)
{
__asm
{
push ebp
mov ebp, esp
sub esp, 14h
}
Color(15);
//printf(SendText,type,format);
va_list args;
va_start(args, format);
int i,s;
char* something;
for (i=0;i<strlen(format);i++)
{
switch (format[i])
{
case 'b': //BYTE
temp=va_arg( args, BYTE);
// printf(" %d: %d\n",i+1,temp);
break;
case 'd': //DWORD
temp =(DWORD)va_arg( args, DWORD);
//printf(" %d: %d\n",i+1,temp);
if ((i==0)&&(type == 0x1a))
{
dropID = temp;
printf("ItemID(weapon1): %d\n",dropID);
}
if(type == 0x41)
{
wearID = temp;
}
break;
case 'w': //WORD
// printf(" %d: %d\n",i+1,(WORD)va_arg( args, DWORD));
break;
case 's': //STRING
something=va_arg( args, char*);
char* somethings;
//printf(" %d: %s\n",i+1,something);// wird ja garnet ausgegebn
break;
case 'm':
//printf(" %d: %d\n",i+1,(DWORD)va_arg( args, DWORD));
break;
}
}
va_end(args);
__asm
{
jmp MySendBack;
}
}
int WINAPI MyRecv(char* packet)
{
//printf(RecvText,packet[2]);
WORD size;
memcpy((void*)&size,(void*)((DWORD)packet),2);
if (packet[2] == 0x32)
{
//player appear
DWORD id;
memcpy((void*)&id,(void*)((DWORD)packet+3),4);
char name[255]={0};
memcpy((void*)&name,(void*)((DWORD)packet+7),16);
printf("Player: [ID: %d Name: %s]\n",id,name);
if (dancehackon == 1)
{
SendDetour(0x3d,"db",id,14);
}
if (Anihack == 1)
{
int i;
for (i=0;i<20;i++)
{
SendDetour(0x2b,"bd",aniID,id);
}
}
if (Studenthack == 1)
{
int i;
for (i=0;i<1;i++)
{
SendDetour(0x55,"bd",01,id,i+1);
}
Studenthack = 0;
}
if (Beheadhack == 1)
{
int i;
for (i=0;i<6;i++)
{
SendDetour(0x2b,"bd",1,id);
}
}
if (Multihack == 1)
{
int i;
for (i=0;i<6;i++)
{
SendDetour(0x3d,"db",id,14);
SendDetour(0x2b,"bd",1,id);
}
}
if (flhack == 1)
{
int i;
for (i=0;i<5;i++)
{
SendDetour(0x40,"b",4);
SendDetour(0x5c,"bbssdwbdd",00,01,">>>>> FSK18 <<<<< >>>>> Do what i want or it wont take an end !!! <<<<<",name,dropID,48,0,1,10000000);
SendDetour(0x40,"b",4);
SendDetour(0x5c,"bbssdwbdd",00,01,">>>>> FSK18 <<<<< >>>>> Do what i want or it wont take an end !!! <<<<<",name,dropID,48,0,1,10000000);
}
}
if (Anihack == 1)
{
int i;
for (i=0;i<20;i++)
{
SendDetour(0x2b,"bd",aniID,id);
}
}
//ADD PLAYER
int i;
for (i=0;i<500;i++)
{
//check if x =0
if (Player[i].X == 0)
{
memcpy((void*)&(Player[i].name),(void*)&name,16);
Player[i].PID=id;
int aftername;
aftername=strlen(Player[i].name);
//insert COORDINATES
memcpy((void*)&(Player[i].Classe),(void*)((DWORD)packet+7+aftername+1),1);
memcpy((void*)&(Player[i].X),(void*)((DWORD)packet+7+aftername+2),4);
memcpy((void*)&(Player[i].Y),(void*)((DWORD)packet+7+aftername+2+4),4);
memcpy((void*)&(Player[i].Z),(void*)((DWORD)packet+7+aftername+2+4+4),4);
printf("C: %d X: %d Y:%d Z:%d\n",Player[i].Classe,Player[i].X,Player[i].Y,Player[i].Z);
playerx+=1;
break;
}
}
}
if (packet[2] == 0x33)
{
//mob apear
int i;
for (i=0;i<500;i++)
{
//check if x =0
if (Mob[i].X == 0)
{
DWORD id;
memcpy((void*)&id,(void*)((DWORD)packet+3+2),4);
Mob[i].MID=id;
memcpy((void*)&(Mob[i].Classe),(void*)((DWORD)packet+3),2);
memcpy((void*)&(Mob[i].X),(void*)((DWORD)packet+3+4+2),4);
memcpy((void*)&(Mob[i].Y),(void*)((DWORD)packet+3+4+2+4),4);
memcpy((void*)&(Mob[i].HP),(void*)((DWORD)packet+3+4+2+4+4+1+1),2);
//printf("Mob: %d X %d Y %d Z %d HP %d\n",Mob[i].Classe,Mob[i].X,Mob[i].Y,Mob[i].Z,Mob[i].HP);
//AUTOSTORM
if (hh1 == 1)
{
SendDetour(0x0f,"bd",1,Mob[i].MID);
}
if (Autostorm == 1)
{
int a = 50;
while ( a > 0)
{
SendDetour(0x10,"bdd", 43, Mob[i].X, Mob[i].Y);
a--;
}
}
mobsx+=1;
break;
}
}
}
if (packet[2] == 0x3B)
{
//ITEM AWAY !
DWORD id;
memcpy((void*)&id,(void*)((DWORD)packet+3),4);
int i;
for (i=0;i<=500;i++)
if (Item[i].Item==id)
{
//ITEM FOUND !
//DELETE IT !
Item[i].X=0;
break;
}
}
if (packet[2] == 0x36)
{
//ADD ITEM
DWORD id;
DWORD x;
DWORD y;
memcpy((void*)&id,(void*)((DWORD)packet+5),4);
memcpy((void*)&x,(void*)((DWORD)packet+5+4),4);
memcpy((void*)&y,(void*)((DWORD)packet+5+4+4),4);
//printf("Item dropped [%08x] [%d , %d]\n",id,x,y);
//add item to list !
int i;
for (i=0;i<=500;i++)
{
if (Item[i].X == 0)
{
//FREE ITEM SLOT FOUND !
Item[i].Item=id;
Item[i].X=x;
Item[i].Y=y;
//easy autopickup..
//SEND TYPE: 0x15 FORMAT: Ubbb byte byte byet Oo ? wtf ?
if (autopick == 1)
{
SendDetour(0x20,"ddd",id,x/32,y/32);
}
}
}
}
return 0;
}
int Naked MyRecvDetour()
{
__asm
{
push edx
push ecx
push ebx
push eax
mov eax, [ebp+0x08]
push eax
call MyRecv
pop eax
pop ebx
pop ecx
pop edx
mov eax, [ebp+0x08]
movzx ecx, [eax+2]
mov edx,MyRecvBack
jmp edx
}
}
/*int Naked SendDetour(DWORD type,LPCSTR format,...)
{
__asm
{
push ebp
mov ebp, esp
sub esp, 14h
}
Color(15);
//printf(SendText,type,format);
va_list args;
va_start(args, format);
int i,s;
char* something;
for (i=0;i<strlen(format);i++)
{
switch (format[i])
{
case 'b': //BYTE
temp=va_arg( args, BYTE);
// printf(" %d: %d\n",i+1,temp);
break;
case 'd': //DWORD
temp =(DWORD)va_arg( args, DWORD);
//printf(" %d: %d\n",i+1,temp);
break;
case 'w': //WORD
// printf(" %d: %d\n",i+1,(WORD)va_arg( args, DWORD));
break;
case 's': //STRING
something=va_arg( args, char*);
char* somethings;
//printf(" %d: %s\n",i+1,something);// wird ja garnet ausgegebn
break;
case 'm':
//printf(" %d: %d\n",i+1,(DWORD)va_arg( args, DWORD));
break;
}
}
va_end(args);
__asm
{
jmp MySendBack;
}
}*/
void functions(void* pParams)
{
while (true)
{
if(pimp == 1)
{
int x = 0;
for(x;x<times;x++)
{
SendDetour(0x39,"dd",polID,weaponID);
SendDetour(0x39,"dd",talismanID,weaponID);
}
pimp = 0;
}
else if(storm == 1)
{
DWORD* coordpointerX = (DWORD*)0x006F3840;
DWORD* coordpointerY = (DWORD*)0x006F3840;
MemcpyEx((DWORD)&X,(((DWORD)*coordpointerX)+0x0000463C),4);
printf("X: %d\n",X);
MemcpyEx((DWORD)&Y,(((DWORD)*coordpointerY)+0x00004644),4);
printf("Y: %d\n",Y);
int i;
for (i = 0; i < 5; i++)
SendDetour(0x10,"bdd",43,X,Y);
SendDetour(0x10,"bdd",43,X,Y);
SendDetour(0x10,"bdd",43,X,Y);
SendDetour(0x10,"bdd",43,X,Y);
SendDetour(0x10,"bdd",43,X,Y);
SendDetour(0x10,"bdd",43,X,Y);
SendDetour(0x10,"bdd",43,X,Y);
SendDetour(0x10,"bdd",43,X,Y);
SendDetour(0x10,"bdd",43,X,Y);
storm=0;
}
else if (stormquad == 1)
{
DWORD* coordpointerX = (DWORD*)0x006F3840;
DWORD* coordpointerY = (DWORD*)0x006F3840;
MemcpyEx((DWORD)&X,(((DWORD)*coordpointerX)+0x0000463C),4);
printf("X: %d\n",X);
MemcpyEx((DWORD)&Y,(((DWORD)*coordpointerY)+0x00004644),4);
printf("Y: %d\n",Y);
int i;
for( i = 0; i < 5; i++)
SendDetour(0x10,"bdd",43,X+100,Y+100);
SendDetour(0x10,"bdd",43,X+100,Y);
SendDetour(0x10,"bdd",43,X,Y+100);
SendDetour(0x10,"bdd",43,X-100,Y-100);
SendDetour(0x10,"bdd",43,X-100,Y+100);
SendDetour(0x10,"bdd",43,X+100,Y-100);
SendDetour(0x10,"bdd",43,X+150,Y+150);
SendDetour(0x10,"bdd",43,X-150,Y-150);
SendDetour(0x10,"bdd",43,X-150,Y+150);
SendDetour(0x10,"bdd",43,X+150,Y-150);
SendDetour(0x10,"bdd",43,X,Y+100);
SendDetour(0x10,"bdd",43,X+100,Y);
SendDetour(0x10,"bdd",43,X-100,Y);
SendDetour(0x10,"bdd",43,X,Y-100);
stormquad=0;
}
else if (emok == 1)
{int i;
for (i = 0; i < 5; i++)
{
SendDetour(0x10,"bdd",43,334337,241647);
SendDetour(0x10,"bdd",43,334250,241785);
SendDetour(0x10,"bdd",43,334159,241731);
SendDetour(0x10,"bdd",43,334219,241611);
}
emok=0;
}
else if (hla == 1)
{int i;
for (i = 0; i < 5; i++)
{
SendDetour(0x10,"bdd",43,250594,275625);
SendDetour(0x10,"bdd",43,250698,275462);
SendDetour(0x10,"bdd",43,250604,275376);
SendDetour(0x10,"bdd",43,250523,275483);
}
hla=0;
}
else if (d1r1 == 1)
{int i;
for (i = 0; i < 5; i++)
{
SendDetour(0x10,"bdd",43,51930,34494);
SendDetour(0x10,"bdd",43,51982,34852);
}
d1r1;
}
else if (d1r8 == 1)
{int i;
for (i = 0; i < 10; i++)
{
SendDetour(0x10,"bdd",43,50726,39075);
}
d1r8;
}
else if (d1r10 == 1)
{int i;
for (i = 0; i < 3; i++)
{
SendDetour(0x10,"bdd",43,50894,40663);
SendDetour(0x10,"bdd",43,50455,40685);
SendDetour(0x10,"bdd",43,50465,40130);
SendDetour(0x10,"bdd",43,50874,40150);
SendDetour(0x10,"bdd",43,50705,40423);
}
d1r10=0;
}
else if (d3f2 == 1)
{int i;
for (i = 0; i < 10; i++)
{
SendDetour(0x10,"bdd",43,4947,37112);
SendDetour(0x10,"bdd",43,5115,37024);
SendDetour(0x10,"bdd",43,5302,37141);
SendDetour(0x10,"bdd",43,5183,37259);
}
d3f2=0;
}
else if (d3f5 == 1)
{int i;
for (i = 0; i < 10; i++)
{
SendDetour(0x10,"bdd",43,21404,20838);
SendDetour(0x10,"bdd",43,21714,20827);
SendDetour(0x10,"bdd",43,21665,20602);
SendDetour(0x10,"bdd",43,21383,20533);
}
d3f5=0;
}
else if (d4f1 == 1)
{int i;
for (i = 0; i < 10; i++)
{
SendDetour(0x10,"bdd",43,34414,35576);
SendDetour(0x10,"bdd",43,34239,35652);
SendDetour(0x10,"bdd",43,34221,35516);
}
d4f1=0;
}
else if (d4f2 == 1)
{int i;
for (i = 0; i < 10; i++)
{
SendDetour(0x10,"bdd",43,18729,52449);
SendDetour(0x10,"bdd",43,18704,52151);
SendDetour(0x10,"bdd",43,19045,52273);
SendDetour(0x10,"bdd",43,18965,52510);
}
d4f2=0;
}
else if (ebit == 1)
{int i;
SendDetour(0x5b,"bd",2,wearID);
ebit = 0;
}
else if (revit == 1)
{int i;
for (i = 0; i < 100; i++)
{
SendDetour(0x5b,"bd",1,wearID);
}
revit = 0;
}
else if (stormd3 == 1)
{
DWORD* coordpointerX = (DWORD*)0x006F3840;
DWORD* coordpointerY = (DWORD*)0x006F3840;
MemcpyEx((DWORD)&X,(((DWORD)*coordpointerX)+0x0000463C),4);
printf("X: %d\n",X);
MemcpyEx((DWORD)&Y,(((DWORD)*coordpointerY)+0x00004644),4);
printf("Y: %d\n",Y);
int i;
for( i = 0; i < 20; i++)
{
SendDetour(0x10,"bdd",43,X,Y);
}
//int d3;
//d3 = 0;
int x1,y1;
y1 = 600;
x1 = -600;
while (y1 != (-600))
{
while ( x1 != 600)
{
SendDetour(0x10,"bdd",43,X+x1,Y+y1);
x1 = x1+100;
}
x1 = -600;
y1 = y1-100;
}
Sleep(17000);
}
}
}
void MyThread(void* pParams)
{
SetConsoleTitleA("KalHackZz v0.4");
//Killing HackShield
//Some Server will kick you if normal HackShield isn't running
BYTE Replacer=0x85;
DWORD Virutal_add=0x00504DBF-0x00104DBF;
MemcpyEx(Virutal_add+0x00104DBF,(DWORD)&Replacer,1);
Replacer=0x75;
MemcpyEx(Virutal_add+0x00104F66,(DWORD)&Replacer,1);
MemcpyEx(Virutal_add+0x0010DB66,(DWORD)&Replacer,1);
Replacer=0x61;
MemcpyEx(Virutal_add+0x002A2A6D,(DWORD)&Replacer,1);
printf("HS got pWnD\n");
while( 0 < 1 )
{
Color(15);
printf( "Enter command [ for commandlist type 'commands' ]:\n\n " );
//char command[255]={0};
//scanf("%s%*c",&command);
string command;
cin >> command;
if (command == "pimpset")
{
cout << "Define Polishing ID, Talisman ID, weapon ID and how often you want to pimp" << endl;
cin >> poliID >> talismanID >> weaponID >> times;
}
else if (command == "pimp")
{
pimp = 1;
}
else if (command == "pimp0")
{
pimp = 0;
}
else if (command == "storm")
{
storm = 1;
}
else if (command =="storm0")
{
storm = 0;
}
else if (command == "stormquad")
{
stormquad = 1;
}
else if (command == "stormquad0")
{
stormquad = 0;
}
else if (command == "stormd3")
{
stormd3 = 1;
}
else if (command == "stormd30")
{
stormd3 = 0;
}
else if (command == "emok")
{
emok = 1;
}
else if (command == "emok0")
{
emok = 0;
}
else if (command == "hla")
{
hla = 1;
}
else if (command == "hla0")
{
hla = 0;
}
else if (command == "d1r1")
{
d1r1 = 1;
}
else if (command == "d1r10")
{
d1r1 = 0;
}
else if (command == "d1r8")
{
d1r8 = 1;
}
else if (command == "d1r80")
{
d1r8 = 0;
}
else if (command == "d1r10")
{
d1r10 = 1;
}
else if (command == "d1r100")
{
d1r10 = 0;
}
else if (command == "d3f2")
{
d3f2 = 1;
}
else if (command == "d3f20")
{
d3f2 = 0;
}
else if (command == "d3f5")
{
d3f5 = 1;
}
else if (command == "d3f50")
{
d3f5 = 0;
}
else if (command == "d4f1")
{
d4f1 = 1;
}
else if (command == "d4f10")
{
d4f1 = 0;
}
else if (command == "d4f2")
{
d4f2 = 1;
}
else if (command == "d4f20")
{
d4f2 = 0;
}
else if (command == "Studenthack")
{
Studenthack = 1;
}
else if (command == "Beheadhack")
{
Beheadhack = 1;
}
else if (command == "Beheadhack0")
{
Beheadhack = 0;
}
else if (command == "Anihack")
{
Anihack = 1;
}
else if (command == "Anihack0")
{
Anihack = 0;
}
else if (command == "Multihack")
{
Multihack = 1;
}
else if (command == "Multihack0")
{
Multihack = 0;
}
else if (command == "FLhack")
{
flhack = 1;
}
else if (command == "FLhack0")
{
flhack = 0;
}
else if (command == "ebit")
{
ebit = 1;
}
else if (command == "revit")
{
revit = 1;
}
else if (command == "partyset")
{
cout << "ID of Player to party" << endl;
cin >> PID1;
}
else if (command == "aniset")
{
cout << "Ani ID" << endl;
cin >> aniID;
}
else if (command == "dropset")
{
cout << "ID of ITEM you want to drop" << endl;
cin >> dropitem;
cout << "How often u want to drop?" << endl;
cin >> droptime;
}
else if (command == "mixset")
{
cout << "Never tested, use on own risk :P " << endl;
cout << "Waepon id" << endl;
cin >> waffe;
cout << "Waepon2 id" << endl;
cin >> waffe2;
cout << "armor id" << endl;
cin >> armor;
cout << "stone id" << endl;
cin >> stein;
cout << "stone2 id" << endl;
cin >> stein2;
}
else if (command == "mix")
{
SendDetour(0x62,"bddddd",1, waffe, waffe2, armor, stein, stein2);
}
else if (command == "party")
{
int x = 0;
for(x;x<500;x++)
{
SendDetour(0x2c,"d",PID1);
}
}
else if (command == "drop")
{
Sleep(5);
int x = 0;
for(x;x<droptime;x++)
{
SendDetour(0x1a,"dd",dropitem,1);
}
}
else if (command == "th")
{
cout<<"Accept the trade now ;)"<<endl;
SendDetour(0x1c,"bbbbbbbbb", 0x01, 0x20, 0x00, 0x00, 0x80, 0x02, 0x00, 0x00, 0x00);
}
else if (command == "dancehackon")
{
dancehackon = 1;
}
else if (command == "dancehackoff")
{
dancehackon = 0;
}
else if (command == "pick")
{
autopick = 1;
}
else if (command == "pick0")
{
autopick = 0;
}
else if (command == "ug")
{
//UG HACK
DWORD newhigh;
DWORD high;
cout << "New high?" << endl;
cin >> newhigh;
MemcpyEx((DWORD)&high,0x006F3840,4);
if(high)
{
high = high+17984;
Sleep(10);
MemcpyEx(high,(DWORD)&newhigh,4);
}
}
else if (command == "speed")
{
cout << "Insert speed value" << endl;
cin >> speedvalue;
//scanf("%d%*c",&speedvalue);
MemcpyEx(DWORD(((DWORD)*speedpointer)+0x00004B14),(DWORD)&speedvalue,4);
printf("Speed changed to %d\n",speedvalue);
}
else if (command == "commands")
{
printf("------------Command List-------------\n");
printf("----Pimp Commands:\n");
printf("ebit..revit...pimp\n");
printf("----Fun Commands:\n");
printf("th = tradehack ( first put ur item in trade, than type th, than accept trade");
printf("F1/0 = F/L Hack On Off\n");
printf("S1/0 = Student Hack On Off\n");
printf("D1/0 = Dance Hack On Off\n");
printf("B1/0 = Beheade Hack On Off\n");
printf("M1/0 = Multi Hack On Off\n");
printf("pick1/0 = Pick Hack On/Off\n");
printf("Super1/0 = Super Hack On Off ( some animations)\n");
printf("partyset = Partyhack set\n");
printf("party = Partyhack ( after correct setting)\n");
printf("Animation1/0 Ani Hack On Off\n");
printf("setdrop ( set drophack )\n");
printf("setmix ( set mixing options for 1hh )\n");
printf("----Storm Commands\n");
printf("storm ( storms where u are atm )\n");
printf("d1r1..d1r8...d1r10\n");
printf("d3f2...d3f5\n");
printf("d4f1...d4f2\n");
printf("hla ( mask spawn in hla )\n");
printf("emok ( low dragon guards on dragon island )\n");
printf("---Crash Command\n");
printf("crashmix\n");
printf("-------------");
printf("to stop the hacks write commandfor start +0 ( f.ex. d3f50 )");
printf("How to Use\n");
printf("crashmix = wear your armor wear your weapon unwear armor drop stone(pick it up oO)\n");
printf("Storm Commands = you need Thunder Storm\n");
printf("pimp = wear your Weapon unwear it drop your Tali..poli via skillbar press the number\n");
printf("F/L Hack = drop 1geon, pick it, write F1\n");
}
else if (command == "kocp")
{
Intercept(INST_CALL, 0x004F203D, (DWORD)0x0052E330,5); // Otherwise KOCP will kick you..
Intercept( INST_JMP , 0x004F2010 , ( DWORD) SendDetour , 5); // Send packets
Intercept( INST_JMP , 0x004F2121 , ( DWORD) MyRecvDetour , 5); // Recv packets
_beginthread(functions,0,NULL);
printf("KOCP killed!\n");
}
}
}
void Main()
{
Console();
Color(15);
fprintf (stdout, "====================================================== \n");
fprintf (stdout, "KalHackZz v0.3 by FSK18\n");
fprintf (stdout, "Credits: BakaBug,ZeroTen,Syntex,Bloodx,chibis,MoepMoep\n");
fprintf (stdout, "Write kocp to kill packetcheck; (or u get kicked) !!!:\n\n");
fprintf (stdout, "======================================================\n\n");
_beginthread(MyThread,0,NULL);
//_beginthread(functions,0,NULL);
}
BOOL WINAPI DllMain(HINSTANCE hInst,DWORD reason,LPVOID)
{
if (reason == DLL_PROCESS_ATTACH)
{
hLThis = hInst;
char system[MAX_PATH];
GetSystemDirectoryA(system,sizeof(system));
strcat_s(system,"\\winmm.dll");
hL = LoadLibraryA(system);
if (!hL) return false;
Main();
p[0] = GetProcAddress(hL,"CloseDriver");
p[1] = GetProcAddress(hL,"DefDriverProc");
p[2] = GetProcAddress(hL,"DriverCallback");
p[3] = GetProcAddress(hL,"DrvGetModuleHandle");
p[4] = GetProcAddress(hL,"GetDriverModuleHandle");
p[5] = GetProcAddress(hL,"MigrateAllDrivers");
p[6] = GetProcAddress(hL,"MigrateSoundEvents");
p[7] = GetProcAddress(hL,"NotifyCallbackData");
p[8] = GetProcAddress(hL,"OpenDriver");
p[9] = GetProcAddress(hL,"PlaySound");
p[10] = GetProcAddress(hL,"PlaySoundA");
p[11] = GetProcAddress(hL,"PlaySoundW");
p[12] = GetProcAddress(hL,"SendDriverMessage");
p[13] = GetProcAddress(hL,"WOW32DriverCallback");
p[14] = GetProcAddress(hL,"WOW32ResolveMultiMediaHandle");
p[15] = GetProcAddress(hL,"WOWAppExit");
p[16] = GetProcAddress(hL,"WinmmLogoff");
p[17] = GetProcAddress(hL,"WinmmLogon");
p[18] = GetProcAddress(hL,"_gfxLogoff@0");
p[19] = GetProcAddress(hL,"_gfxLogon@4");
p[20] = GetProcAddress(hL,"aux32Message");
p[21] = GetProcAddress(hL,"auxGetDevCapsA");
p[22] = GetProcAddress(hL,"auxGetDevCapsW");
p[23] = GetProcAddress(hL,"auxGetNumDevs");
p[24] = GetProcAddress(hL,"auxGetVolume");
p[25] = GetProcAddress(hL,"auxOutMessage");
p[26] = GetProcAddress(hL,"auxSetVolume");
p[27] = GetProcAddress(hL,"gfxAddGfx");
p[28] = GetProcAddress(hL,"gfxBatchChange");
p[29] = GetProcAddress(hL,"gfxCreateGfxFactoriesList");
p[30] = GetProcAddress(hL,"gfxCreateZoneFactoriesList");
p[31] = GetProcAddress(hL,"gfxDestroyDeviceInterfaceList");
p[32] = GetProcAddress(hL,"gfxEnumerateGfxs");
p[33] = GetProcAddress(hL,"gfxModifyGfx");
p[34] = GetProcAddress(hL,"gfxOpenGfx");
p[35] = GetProcAddress(hL,"gfxRemoveGfx");
p[36] = GetProcAddress(hL,"joy32Message");
p[37] = GetProcAddress(hL,"joyConfigChanged");
p[38] = GetProcAddress(hL,"joyGetDevCapsA");
p[39] = GetProcAddress(hL,"joyGetDevCapsW");
p[40] = GetProcAddress(hL,"joyGetNumDevs");
p[41] = GetProcAddress(hL,"joyGetPos");
p[42] = GetProcAddress(hL,"joyGetPosEx");
p[43] = GetProcAddress(hL,"joyGetThreshold");
p[44] = GetProcAddress(hL,"joyReleaseCapture");
p[45] = GetProcAddress(hL,"joySetCapture");
p[46] = GetProcAddress(hL,"joySetThreshold");
p[47] = GetProcAddress(hL,"mci32Message");
p[48] = GetProcAddress(hL,"mciDriverNotify");
p[49] = GetProcAddress(hL,"mciDriverYield");
p[50] = GetProcAddress(hL,"mciExecute");
p[51] = GetProcAddress(hL,"mciFreeCommandResource");
p[52] = GetProcAddress(hL,"mciGetCreatorTask");
p[53] = GetProcAddress(hL,"mciGetDeviceIDA");
p[54] = GetProcAddress(hL,"mciGetDeviceIDFromElementIDA");
p[55] = GetProcAddress(hL,"mciGetDeviceIDFromElementIDW");
p[56] = GetProcAddress(hL,"mciGetDeviceIDW");
p[57] = GetProcAddress(hL,"mciGetDriverData");
p[58] = GetProcAddress(hL,"mciGetErrorStringA");
p[59] = GetProcAddress(hL,"mciGetErrorStringW");
p[60] = GetProcAddress(hL,"mciGetYieldProc");
p[61] = GetProcAddress(hL,"mciLoadCommandResource");
p[62] = GetProcAddress(hL,"mciSendCommandA");
p[63] = GetProcAddress(hL,"mciSendCommandW");
p[64] = GetProcAddress(hL,"mciSendStringA");
p[65] = GetProcAddress(hL,"mciSendStringW");
p[66] = GetProcAddress(hL,"mciSetDriverData");
p[67] = GetProcAddress(hL,"mciSetYieldProc");
p[68] = GetProcAddress(hL,"mid32Message");
p[69] = GetProcAddress(hL,"midiConnect");
p[70] = GetProcAddress(hL,"midiDisconnect");
p[71] = GetProcAddress(hL,"midiInAddBuffer");
p[72] = GetProcAddress(hL,"midiInClose");
p[73] = GetProcAddress(hL,"midiInGetDevCapsA");
p[74] = GetProcAddress(hL,"midiInGetDevCapsW");
p[75] = GetProcAddress(hL,"midiInGetErrorTextA");
p[76] = GetProcAddress(hL,"midiInGetErrorTextW");
p[77] = GetProcAddress(hL,"midiInGetID");
p[78] = GetProcAddress(hL,"midiInGetNumDevs");
p[79] = GetProcAddress(hL,"midiInMessage");
p[80] = GetProcAddress(hL,"midiInOpen");
p[81] = GetProcAddress(hL,"midiInPrepareHeader");
p[82] = GetProcAddress(hL,"midiInReset");
p[83] = GetProcAddress(hL,"midiInStart");
p[84] = GetProcAddress(hL,"midiInStop");
p[85] = GetProcAddress(hL,"midiInUnprepareHeader");
p[86] = GetProcAddress(hL,"midiOutCacheDrumPatches");
p[87] = GetProcAddress(hL,"midiOutCachePatches");
p[88] = GetProcAddress(hL,"midiOutClose");
p[89] = GetProcAddress(hL,"midiOutGetDevCapsA");
p[90] = GetProcAddress(hL,"midiOutGetDevCapsW");
p[91] = GetProcAddress(hL,"midiOutGetErrorTextA");
p[92] = GetProcAddress(hL,"midiOutGetErrorTextW");
p[93] = GetProcAddress(hL,"midiOutGetID");
p[94] = GetProcAddress(hL,"midiOutGetNumDevs");
p[95] = GetProcAddress(hL,"midiOutGetVolume");
p[96] = GetProcAddress(hL,"midiOutLongMsg");
p[97] = GetProcAddress(hL,"midiOutMessage");
p[98] = GetProcAddress(hL,"midiOutOpen");
p[99] = GetProcAddress(hL,"midiOutPrepareHeader");
p[100] = GetProcAddress(hL,"midiOutReset");
p[101] = GetProcAddress(hL,"midiOutSetVolume");
p[102] = GetProcAddress(hL,"midiOutShortMsg");
p[103] = GetProcAddress(hL,"midiOutUnprepareHeader");
p[104] = GetProcAddress(hL,"midiStreamClose");
p[105] = GetProcAddress(hL,"midiStreamOpen");
p[106] = GetProcAddress(hL,"midiStreamOut");
p[107] = GetProcAddress(hL,"midiStreamPause");
p[108] = GetProcAddress(hL,"midiStreamPosition");
p[109] = GetProcAddress(hL,"midiStreamProperty");
p[110] = GetProcAddress(hL,"midiStreamRestart");
p[111] = GetProcAddress(hL,"midiStreamStop");
p[112] = GetProcAddress(hL,"mixerClose");
p[113] = GetProcAddress(hL,"mixerGetControlDetailsA");
p[114] = GetProcAddress(hL,"mixerGetControlDetailsW");
p[115] = GetProcAddress(hL,"mixerGetDevCapsA");
p[116] = GetProcAddress(hL,"mixerGetDevCapsW");
p[117] = GetProcAddress(hL,"mixerGetID");
p[118] = GetProcAddress(hL,"mixerGetLineControlsA");
p[119] = GetProcAddress(hL,"mixerGetLineControlsW");
p[120] = GetProcAddress(hL,"mixerGetLineInfoA");
p[121] = GetProcAddress(hL,"mixerGetLineInfoW");
p[122] = GetProcAddress(hL,"mixerGetNumDevs");
p[123] = GetProcAddress(hL,"mixerMessage");
p[124] = GetProcAddress(hL,"mixerOpen");
p[125] = GetProcAddress(hL,"mixerSetControlDetails");
p[126] = GetProcAddress(hL,"mmDrvInstall");
p[127] = GetProcAddress(hL,"mmGetCurrentTask");
p[128] = GetProcAddress(hL,"mmTaskBlock");
p[129] = GetProcAddress(hL,"mmTaskCreate");
p[130] = GetProcAddress(hL,"mmTaskSignal");
p[131] = GetProcAddress(hL,"mmTaskYield");
p[132] = GetProcAddress(hL,"mmioAdvance");
p[133] = GetProcAddress(hL,"mmioAscend");
p[134] = GetProcAddress(hL,"mmioClose");
p[135] = GetProcAddress(hL,"mmioCreateChunk");
p[136] = GetProcAddress(hL,"mmioDescend");
p[137] = GetProcAddress(hL,"mmioFlush");
p[138] = GetProcAddress(hL,"mmioGetInfo");
p[139] = GetProcAddress(hL,"mmioInstallIOProcA");
p[140] = GetProcAddress(hL,"mmioInstallIOProcW");
p[141] = GetProcAddress(hL,"mmioOpenA");
p[142] = GetProcAddress(hL,"mmioOpenW");
p[143] = GetProcAddress(hL,"mmioRead");
p[144] = GetProcAddress(hL,"mmioRenameA");
p[145] = GetProcAddress(hL,"mmioRenameW");
p[146] = GetProcAddress(hL,"mmioSeek");
p[147] = GetProcAddress(hL,"mmioSendMessage");
p[148] = GetProcAddress(hL,"mmioSetBuffer");
p[149] = GetProcAddress(hL,"mmioSetInfo");
p[150] = GetProcAddress(hL,"mmioStringToFOURCCA");
p[151] = GetProcAddress(hL,"mmioStringToFOURCCW");
p[152] = GetProcAddress(hL,"mmioWrite");
p[153] = GetProcAddress(hL,"mmsystemGetVersion");
p[154] = GetProcAddress(hL,"mod32Message");
p[155] = GetProcAddress(hL,"mxd32Message");
p[156] = GetProcAddress(hL,"sndPlaySoundA");
p[157] = GetProcAddress(hL,"sndPlaySoundW");
p[158] = GetProcAddress(hL,"tid32Message");
p[159] = GetProcAddress(hL,"timeBeginPeriod");
p[160] = GetProcAddress(hL,"timeEndPeriod");
p[161] = GetProcAddress(hL,"timeGetDevCaps");
p[162] = GetProcAddress(hL,"timeGetSystemTime");
p[163] = GetProcAddress(hL,"timeGetTime");
p[164] = GetProcAddress(hL,"timeKillEvent");
p[165] = GetProcAddress(hL,"timeSetEvent");
p[166] = GetProcAddress(hL,"waveInAddBuffer");
p[167] = GetProcAddress(hL,"waveInClose");
p[168] = GetProcAddress(hL,"waveInGetDevCapsA");
p[169] = GetProcAddress(hL,"waveInGetDevCapsW");
p[170] = GetProcAddress(hL,"waveInGetErrorTextA");
p[171] = GetProcAddress(hL,"waveInGetErrorTextW");
p[172] = GetProcAddress(hL,"waveInGetID");
p[173] = GetProcAddress(hL,"waveInGetNumDevs");
p[174] = GetProcAddress(hL,"waveInGetPosition");
p[175] = GetProcAddress(hL,"waveInMessage");
p[176] = GetProcAddress(hL,"waveInOpen");
p[177] = GetProcAddress(hL,"waveInPrepareHeader");
p[178] = GetProcAddress(hL,"waveInReset");
p[179] = GetProcAddress(hL,"waveInStart");
p[180] = GetProcAddress(hL,"waveInStop");
p[181] = GetProcAddress(hL,"waveInUnprepareHeader");
p[182] = GetProcAddress(hL,"waveOutBreakLoop");
p[183] = GetProcAddress(hL,"waveOutClose");
p[184] = GetProcAddress(hL,"waveOutGetDevCapsA");
p[185] = GetProcAddress(hL,"waveOutGetDevCapsW");
p[186] = GetProcAddress(hL,"waveOutGetErrorTextA");
p[187] = GetProcAddress(hL,"waveOutGetErrorTextW");
p[188] = GetProcAddress(hL,"waveOutGetID");
p[189] = GetProcAddress(hL,"waveOutGetNumDevs");
p[190] = GetProcAddress(hL,"waveOutGetPitch");
p[191] = GetProcAddress(hL,"waveOutGetPlaybackRate");
p[192] = GetProcAddress(hL,"waveOutGetPosition");
p[193] = GetProcAddress(hL,"waveOutGetVolume");
p[194] = GetProcAddress(hL,"waveOutMessage");
p[195] = GetProcAddress(hL,"waveOutOpen");
p[196] = GetProcAddress(hL,"waveOutPause");
p[197] = GetProcAddress(hL,"waveOutPrepareHeader");
p[198] = GetProcAddress(hL,"waveOutReset");
p[199] = GetProcAddress(hL,"waveOutRestart");
p[200] = GetProcAddress(hL,"waveOutSetPitch");
p[201] = GetProcAddress(hL,"waveOutSetPlaybackRate");
p[202] = GetProcAddress(hL,"waveOutSetVolume");
p[203] = GetProcAddress(hL,"waveOutUnprepareHeader");
p[204] = GetProcAddress(hL,"waveOutWrite");
p[205] = GetProcAddress(hL,"wid32Message");
p[206] = GetProcAddress(hL,"winmmDbgOut");
p[207] = GetProcAddress(hL,"winmmSetDebugLevel");
p[208] = GetProcAddress(hL,"wod32Message");
p[209] = GetProcAddress(hL,(LPCSTR)"2");
}
if (reason == DLL_PROCESS_DETACH)
{
FreeLibrary(hL);
}
return 1;
}
// CloseDriver
extern "C" __declspec(naked) void __stdcall __E__0__()
{
__asm
{
jmp p[0*4];
}
}
// DefDriverProc
extern "C" __declspec(naked) void __stdcall __E__1__()
{
__asm
{
jmp p[1*4];
}
}
// DriverCallback
extern "C" __declspec(naked) void __stdcall __E__2__()
{
__asm
{
jmp p[2*4];
}
}
// DrvGetModuleHandle
extern "C" __declspec(naked) void __stdcall __E__3__()
{
__asm
{
jmp p[3*4];
}
}
// GetDriverModuleHandle
extern "C" __declspec(naked) void __stdcall __E__4__()
{
__asm
{
jmp p[4*4];
}
}
// MigrateAllDrivers
extern "C" __declspec(naked) void __stdcall __E__5__()
{
__asm
{
jmp p[5*4];
}
}
// MigrateSoundEvents
extern "C" __declspec(naked) void __stdcall __E__6__()
{
__asm
{
jmp p[6*4];
}
}
// NotifyCallbackData
extern "C" __declspec(naked) void __stdcall __E__7__()
{
__asm
{
jmp p[7*4];
}
}
// OpenDriver
extern "C" __declspec(naked) void __stdcall __E__8__()
{
__asm
{
jmp p[8*4];
}
}
// PlaySound
extern "C" __declspec(naked) void __stdcall __E__9__()
{
__asm
{
jmp p[9*4];
}
}
// PlaySoundA
extern "C" __declspec(naked) void __stdcall __E__10__()
{
__asm
{
jmp p[10*4];
}
}
// PlaySoundW
extern "C" __declspec(naked) void __stdcall __E__11__()
{
__asm
{
jmp p[11*4];
}
}
// SendDriverMessage
extern "C" __declspec(naked) void __stdcall __E__12__()
{
__asm
{
jmp p[12*4];
}
}
// WOW32DriverCallback
extern "C" __declspec(naked) void __stdcall __E__13__()
{
__asm
{
jmp p[13*4];
}
}
// WOW32ResolveMultiMediaHandle
extern "C" __declspec(naked) void __stdcall __E__14__()
{
__asm
{
jmp p[14*4];
}
}
// WOWAppExit
extern "C" __declspec(naked) void __stdcall __E__15__()
{
__asm
{
jmp p[15*4];
}
}
// WinmmLogoff
extern "C" __declspec(naked) void __stdcall __E__16__()
{
__asm
{
jmp p[16*4];
}
}
// WinmmLogon
extern "C" __declspec(naked) void __stdcall __E__17__()
{
__asm
{
jmp p[17*4];
}
}
// _gfxLogoff@0
extern "C" __declspec(naked) void __stdcall __E__18__()
{
__asm
{
jmp p[18*4];
}
}
// _gfxLogon@4
extern "C" __declspec(naked) void __stdcall __E__19__()
{
__asm
{
jmp p[19*4];
}
}
// aux32Message
extern "C" __declspec(naked) void __stdcall __E__20__()
{
__asm
{
jmp p[20*4];
}
}
// auxGetDevCapsA
extern "C" __declspec(naked) void __stdcall __E__21__()
{
__asm
{
jmp p[21*4];
}
}
// auxGetDevCapsW
extern "C" __declspec(naked) void __stdcall __E__22__()
{
__asm
{
jmp p[22*4];
}
}
// auxGetNumDevs
extern "C" __declspec(naked) void __stdcall __E__23__()
{
__asm
{
jmp p[23*4];
}
}
// auxGetVolume
extern "C" __declspec(naked) void __stdcall __E__24__()
{
__asm
{
jmp p[24*4];
}
}
// auxOutMessage
extern "C" __declspec(naked) void __stdcall __E__25__()
{
__asm
{
jmp p[25*4];
}
}
// auxSetVolume
extern "C" __declspec(naked) void __stdcall __E__26__()
{
__asm
{
jmp p[26*4];
}
}
// gfxAddGfx
extern "C" __declspec(naked) void __stdcall __E__27__()
{
__asm
{
jmp p[27*4];
}
}
// gfxBatchChange
extern "C" __declspec(naked) void __stdcall __E__28__()
{
__asm
{
jmp p[28*4];
}
}
// gfxCreateGfxFactoriesList
extern "C" __declspec(naked) void __stdcall __E__29__()
{
__asm
{
jmp p[29*4];
}
}
// gfxCreateZoneFactoriesList
extern "C" __declspec(naked) void __stdcall __E__30__()
{
__asm
{
jmp p[30*4];
}
}
// gfxDestroyDeviceInterfaceList
extern "C" __declspec(naked) void __stdcall __E__31__()
{
__asm
{
jmp p[31*4];
}
}
// gfxEnumerateGfxs
extern "C" __declspec(naked) void __stdcall __E__32__()
{
__asm
{
jmp p[32*4];
}
}
// gfxModifyGfx
extern "C" __declspec(naked) void __stdcall __E__33__()
{
__asm
{
jmp p[33*4];
}
}
// gfxOpenGfx
extern "C" __declspec(naked) void __stdcall __E__34__()
{
__asm
{
jmp p[34*4];
}
}
// gfxRemoveGfx
extern "C" __declspec(naked) void __stdcall __E__35__()
{
__asm
{
jmp p[35*4];
}
}
// joy32Message
extern "C" __declspec(naked) void __stdcall __E__36__()
{
__asm
{
jmp p[36*4];
}
}
// joyConfigChanged
extern "C" __declspec(naked) void __stdcall __E__37__()
{
__asm
{
jmp p[37*4];
}
}
// joyGetDevCapsA
extern "C" __declspec(naked) void __stdcall __E__38__()
{
__asm
{
jmp p[38*4];
}
}
// joyGetDevCapsW
extern "C" __declspec(naked) void __stdcall __E__39__()
{
__asm
{
jmp p[39*4];
}
}
// joyGetNumDevs
extern "C" __declspec(naked) void __stdcall __E__40__()
{
__asm
{
jmp p[40*4];
}
}
// joyGetPos
extern "C" __declspec(naked) void __stdcall __E__41__()
{
__asm
{
jmp p[41*4];
}
}
// joyGetPosEx
extern "C" __declspec(naked) void __stdcall __E__42__()
{
__asm
{
jmp p[42*4];
}
}
// joyGetThreshold
extern "C" __declspec(naked) void __stdcall __E__43__()
{
__asm
{
jmp p[43*4];
}
}
// joyReleaseCapture
extern "C" __declspec(naked) void __stdcall __E__44__()
{
__asm
{
jmp p[44*4];
}
}
// joySetCapture
extern "C" __declspec(naked) void __stdcall __E__45__()
{
__asm
{
jmp p[45*4];
}
}
// joySetThreshold
extern "C" __declspec(naked) void __stdcall __E__46__()
{
__asm
{
jmp p[46*4];
}
}
// mci32Message
extern "C" __declspec(naked) void __stdcall __E__47__()
{
__asm
{
jmp p[47*4];
}
}
// mciDriverNotify
extern "C" __declspec(naked) void __stdcall __E__48__()
{
__asm
{
jmp p[48*4];
}
}
// mciDriverYield
extern "C" __declspec(naked) void __stdcall __E__49__()
{
__asm
{
jmp p[49*4];
}
}
// mciExecute
extern "C" __declspec(naked) void __stdcall __E__50__()
{
__asm
{
jmp p[50*4];
}
}
// mciFreeCommandResource
extern "C" __declspec(naked) void __stdcall __E__51__()
{
__asm
{
jmp p[51*4];
}
}
// mciGetCreatorTask
extern "C" __declspec(naked) void __stdcall __E__52__()
{
__asm
{
jmp p[52*4];
}
}
// mciGetDeviceIDA
extern "C" __declspec(naked) void __stdcall __E__53__()
{
__asm
{
jmp p[53*4];
}
}
// mciGetDeviceIDFromElementIDA
extern "C" __declspec(naked) void __stdcall __E__54__()
{
__asm
{
jmp p[54*4];
}
}
// mciGetDeviceIDFromElementIDW
extern "C" __declspec(naked) void __stdcall __E__55__()
{
__asm
{
jmp p[55*4];
}
}
// mciGetDeviceIDW
extern "C" __declspec(naked) void __stdcall __E__56__()
{
__asm
{
jmp p[56*4];
}
}
// mciGetDriverData
extern "C" __declspec(naked) void __stdcall __E__57__()
{
__asm
{
jmp p[57*4];
}
}
// mciGetErrorStringA
extern "C" __declspec(naked) void __stdcall __E__58__()
{
__asm
{
jmp p[58*4];
}
}
// mciGetErrorStringW
extern "C" __declspec(naked) void __stdcall __E__59__()
{
__asm
{
jmp p[59*4];
}
}
// mciGetYieldProc
extern "C" __declspec(naked) void __stdcall __E__60__()
{
__asm
{
jmp p[60*4];
}
}
// mciLoadCommandResource
extern "C" __declspec(naked) void __stdcall __E__61__()
{
__asm
{
jmp p[61*4];
}
}
// mciSendCommandA
extern "C" __declspec(naked) void __stdcall __E__62__()
{
__asm
{
jmp p[62*4];
}
}
// mciSendCommandW
extern "C" __declspec(naked) void __stdcall __E__63__()
{
__asm
{
jmp p[63*4];
}
}
// mciSendStringA
extern "C" __declspec(naked) void __stdcall __E__64__()
{
__asm
{
jmp p[64*4];
}
}
// mciSendStringW
extern "C" __declspec(naked) void __stdcall __E__65__()
{
__asm
{
jmp p[65*4];
}
}
// mciSetDriverData
extern "C" __declspec(naked) void __stdcall __E__66__()
{
__asm
{
jmp p[66*4];
}
}
// mciSetYieldProc
extern "C" __declspec(naked) void __stdcall __E__67__()
{
__asm
{
jmp p[67*4];
}
}
// mid32Message
extern "C" __declspec(naked) void __stdcall __E__68__()
{
__asm
{
jmp p[68*4];
}
}
// midiConnect
extern "C" __declspec(naked) void __stdcall __E__69__()
{
__asm
{
jmp p[69*4];
}
}
// midiDisconnect
extern "C" __declspec(naked) void __stdcall __E__70__()
{
__asm
{
jmp p[70*4];
}
}
// midiInAddBuffer
extern "C" __declspec(naked) void __stdcall __E__71__()
{
__asm
{
jmp p[71*4];
}
}
// midiInClose
extern "C" __declspec(naked) void __stdcall __E__72__()
{
__asm
{
jmp p[72*4];
}
}
// midiInGetDevCapsA
extern "C" __declspec(naked) void __stdcall __E__73__()
{
__asm
{
jmp p[73*4];
}
}
// midiInGetDevCapsW
extern "C" __declspec(naked) void __stdcall __E__74__()
{
__asm
{
jmp p[74*4];
}
}
// midiInGetErrorTextA
extern "C" __declspec(naked) void __stdcall __E__75__()
{
__asm
{
jmp p[75*4];
}
}
// midiInGetErrorTextW
extern "C" __declspec(naked) void __stdcall __E__76__()
{
__asm
{
jmp p[76*4];
}
}
// midiInGetID
extern "C" __declspec(naked) void __stdcall __E__77__()
{
__asm
{
jmp p[77*4];
}
}
// midiInGetNumDevs
extern "C" __declspec(naked) void __stdcall __E__78__()
{
__asm
{
jmp p[78*4];
}
}
// midiInMessage
extern "C" __declspec(naked) void __stdcall __E__79__()
{
__asm
{
jmp p[79*4];
}
}
// midiInOpen
extern "C" __declspec(naked) void __stdcall __E__80__()
{
__asm
{
jmp p[80*4];
}
}
// midiInPrepareHeader
extern "C" __declspec(naked) void __stdcall __E__81__()
{
__asm
{
jmp p[81*4];
}
}
// midiInReset
extern "C" __declspec(naked) void __stdcall __E__82__()
{
__asm
{
jmp p[82*4];
}
}
// midiInStart
extern "C" __declspec(naked) void __stdcall __E__83__()
{
__asm
{
jmp p[83*4];
}
}
// midiInStop
extern "C" __declspec(naked) void __stdcall __E__84__()
{
__asm
{
jmp p[84*4];
}
}
// midiInUnprepareHeader
extern "C" __declspec(naked) void __stdcall __E__85__()
{
__asm
{
jmp p[85*4];
}
}
// midiOutCacheDrumPatches
extern "C" __declspec(naked) void __stdcall __E__86__()
{
__asm
{
jmp p[86*4];
}
}
// midiOutCachePatches
extern "C" __declspec(naked) void __stdcall __E__87__()
{
__asm
{
jmp p[87*4];
}
}
// midiOutClose
extern "C" __declspec(naked) void __stdcall __E__88__()
{
__asm
{
jmp p[88*4];
}
}
// midiOutGetDevCapsA
extern "C" __declspec(naked) void __stdcall __E__89__()
{
__asm
{
jmp p[89*4];
}
}
// midiOutGetDevCapsW
extern "C" __declspec(naked) void __stdcall __E__90__()
{
__asm
{
jmp p[90*4];
}
}
// midiOutGetErrorTextA
extern "C" __declspec(naked) void __stdcall __E__91__()
{
__asm
{
jmp p[91*4];
}
}
// midiOutGetErrorTextW
extern "C" __declspec(naked) void __stdcall __E__92__()
{
__asm
{
jmp p[92*4];
}
}
// midiOutGetID
extern "C" __declspec(naked) void __stdcall __E__93__()
{
__asm
{
jmp p[93*4];
}
}
// midiOutGetNumDevs
extern "C" __declspec(naked) void __stdcall __E__94__()
{
__asm
{
jmp p[94*4];
}
}
// midiOutGetVolume
extern "C" __declspec(naked) void __stdcall __E__95__()
{
__asm
{
jmp p[95*4];
}
}
// midiOutLongMsg
extern "C" __declspec(naked) void __stdcall __E__96__()
{
__asm
{
jmp p[96*4];
}
}
// midiOutMessage
extern "C" __declspec(naked) void __stdcall __E__97__()
{
__asm
{
jmp p[97*4];
}
}
// midiOutOpen
extern "C" __declspec(naked) void __stdcall __E__98__()
{
__asm
{
jmp p[98*4];
}
}
// midiOutPrepareHeader
extern "C" __declspec(naked) void __stdcall __E__99__()
{
__asm
{
jmp p[99*4];
}
}
// midiOutReset
extern "C" __declspec(naked) void __stdcall __E__100__()
{
__asm
{
jmp p[100*4];
}
}
// midiOutSetVolume
extern "C" __declspec(naked) void __stdcall __E__101__()
{
__asm
{
jmp p[101*4];
}
}
// midiOutShortMsg
extern "C" __declspec(naked) void __stdcall __E__102__()
{
__asm
{
jmp p[102*4];
}
}
// midiOutUnprepareHeader
extern "C" __declspec(naked) void __stdcall __E__103__()
{
__asm
{
jmp p[103*4];
}
}
// midiStreamClose
extern "C" __declspec(naked) void __stdcall __E__104__()
{
__asm
{
jmp p[104*4];
}
}
// midiStreamOpen
extern "C" __declspec(naked) void __stdcall __E__105__()
{
__asm
{
jmp p[105*4];
}
}
// midiStreamOut
extern "C" __declspec(naked) void __stdcall __E__106__()
{
__asm
{
jmp p[106*4];
}
}
// midiStreamPause
extern "C" __declspec(naked) void __stdcall __E__107__()
{
__asm
{
jmp p[107*4];
}
}
// midiStreamPosition
extern "C" __declspec(naked) void __stdcall __E__108__()
{
__asm
{
jmp p[108*4];
}
}
// midiStreamProperty
extern "C" __declspec(naked) void __stdcall __E__109__()
{
__asm
{
jmp p[109*4];
}
}
// midiStreamRestart
extern "C" __declspec(naked) void __stdcall __E__110__()
{
__asm
{
jmp p[110*4];
}
}
// midiStreamStop
extern "C" __declspec(naked) void __stdcall __E__111__()
{
__asm
{
jmp p[111*4];
}
}
// mixerClose
extern "C" __declspec(naked) void __stdcall __E__112__()
{
__asm
{
jmp p[112*4];
}
}
// mixerGetControlDetailsA
extern "C" __declspec(naked) void __stdcall __E__113__()
{
__asm
{
jmp p[113*4];
}
}
// mixerGetControlDetailsW
extern "C" __declspec(naked) void __stdcall __E__114__()
{
__asm
{
jmp p[114*4];
}
}
// mixerGetDevCapsA
extern "C" __declspec(naked) void __stdcall __E__115__()
{
__asm
{
jmp p[115*4];
}
}
// mixerGetDevCapsW
extern "C" __declspec(naked) void __stdcall __E__116__()
{
__asm
{
jmp p[116*4];
}
}
// mixerGetID
extern "C" __declspec(naked) void __stdcall __E__117__()
{
__asm
{
jmp p[117*4];
}
}
// mixerGetLineControlsA
extern "C" __declspec(naked) void __stdcall __E__118__()
{
__asm
{
jmp p[118*4];
}
}
// mixerGetLineControlsW
extern "C" __declspec(naked) void __stdcall __E__119__()
{
__asm
{
jmp p[119*4];
}
}
// mixerGetLineInfoA
extern "C" __declspec(naked) void __stdcall __E__120__()
{
__asm
{
jmp p[120*4];
}
}
// mixerGetLineInfoW
extern "C" __declspec(naked) void __stdcall __E__121__()
{
__asm
{
jmp p[121*4];
}
}
// mixerGetNumDevs
extern "C" __declspec(naked) void __stdcall __E__122__()
{
__asm
{
jmp p[122*4];
}
}
// mixerMessage
extern "C" __declspec(naked) void __stdcall __E__123__()
{
__asm
{
jmp p[123*4];
}
}
// mixerOpen
extern "C" __declspec(naked) void __stdcall __E__124__()
{
__asm
{
jmp p[124*4];
}
}
// mixerSetControlDetails
extern "C" __declspec(naked) void __stdcall __E__125__()
{
__asm
{
jmp p[125*4];
}
}
// mmDrvInstall
extern "C" __declspec(naked) void __stdcall __E__126__()
{
__asm
{
jmp p[126*4];
}
}
// mmGetCurrentTask
extern "C" __declspec(naked) void __stdcall __E__127__()
{
__asm
{
jmp p[127*4];
}
}
// mmTaskBlock
extern "C" __declspec(naked) void __stdcall __E__128__()
{
__asm
{
jmp p[128*4];
}
}
// mmTaskCreate
extern "C" __declspec(naked) void __stdcall __E__129__()
{
__asm
{
jmp p[129*4];
}
}
// mmTaskSignal
extern "C" __declspec(naked) void __stdcall __E__130__()
{
__asm
{
jmp p[130*4];
}
}
// mmTaskYield
extern "C" __declspec(naked) void __stdcall __E__131__()
{
__asm
{
jmp p[131*4];
}
}
// mmioAdvance
extern "C" __declspec(naked) void __stdcall __E__132__()
{
__asm
{
jmp p[132*4];
}
}
// mmioAscend
extern "C" __declspec(naked) void __stdcall __E__133__()
{
__asm
{
jmp p[133*4];
}
}
// mmioClose
extern "C" __declspec(naked) void __stdcall __E__134__()
{
__asm
{
jmp p[134*4];
}
}
// mmioCreateChunk
extern "C" __declspec(naked) void __stdcall __E__135__()
{
__asm
{
jmp p[135*4];
}
}
// mmioDescend
extern "C" __declspec(naked) void __stdcall __E__136__()
{
__asm
{
jmp p[136*4];
}
}
// mmioFlush
extern "C" __declspec(naked) void __stdcall __E__137__()
{
__asm
{
jmp p[137*4];
}
}
// mmioGetInfo
extern "C" __declspec(naked) void __stdcall __E__138__()
{
__asm
{
jmp p[138*4];
}
}
// mmioInstallIOProcA
extern "C" __declspec(naked) void __stdcall __E__139__()
{
__asm
{
jmp p[139*4];
}
}
// mmioInstallIOProcW
extern "C" __declspec(naked) void __stdcall __E__140__()
{
__asm
{
jmp p[140*4];
}
}
// mmioOpenA
extern "C" __declspec(naked) void __stdcall __E__141__()
{
__asm
{
jmp p[141*4];
}
}
// mmioOpenW
extern "C" __declspec(naked) void __stdcall __E__142__()
{
__asm
{
jmp p[142*4];
}
}
// mmioRead
extern "C" __declspec(naked) void __stdcall __E__143__()
{
__asm
{
jmp p[143*4];
}
}
// mmioRenameA
extern "C" __declspec(naked) void __stdcall __E__144__()
{
__asm
{
jmp p[144*4];
}
}
// mmioRenameW
extern "C" __declspec(naked) void __stdcall __E__145__()
{
__asm
{
jmp p[145*4];
}
}
// mmioSeek
extern "C" __declspec(naked) void __stdcall __E__146__()
{
__asm
{
jmp p[146*4];
}
}
// mmioSendMessage
extern "C" __declspec(naked) void __stdcall __E__147__()
{
__asm
{
jmp p[147*4];
}
}
// mmioSetBuffer
extern "C" __declspec(naked) void __stdcall __E__148__()
{
__asm
{
jmp p[148*4];
}
}
// mmioSetInfo
extern "C" __declspec(naked) void __stdcall __E__149__()
{
__asm
{
jmp p[149*4];
}
}
// mmioStringToFOURCCA
extern "C" __declspec(naked) void __stdcall __E__150__()
{
__asm
{
jmp p[150*4];
}
}
// mmioStringToFOURCCW
extern "C" __declspec(naked) void __stdcall __E__151__()
{
__asm
{
jmp p[151*4];
}
}
// mmioWrite
extern "C" __declspec(naked) void __stdcall __E__152__()
{
__asm
{
jmp p[152*4];
}
}
// mmsystemGetVersion
extern "C" __declspec(naked) void __stdcall __E__153__()
{
__asm
{
jmp p[153*4];
}
}
// mod32Message
extern "C" __declspec(naked) void __stdcall __E__154__()
{
__asm
{
jmp p[154*4];
}
}
// mxd32Message
extern "C" __declspec(naked) void __stdcall __E__155__()
{
__asm
{
jmp p[155*4];
}
}
// sndPlaySoundA
extern "C" __declspec(naked) void __stdcall __E__156__()
{
__asm
{
jmp p[156*4];
}
}
// sndPlaySoundW
extern "C" __declspec(naked) void __stdcall __E__157__()
{
__asm
{
jmp p[157*4];
}
}
// tid32Message
extern "C" __declspec(naked) void __stdcall __E__158__()
{
__asm
{
jmp p[158*4];
}
}
// timeBeginPeriod
extern "C" __declspec(naked) void __stdcall __E__159__()
{
__asm
{
jmp p[159*4];
}
}
// timeEndPeriod
extern "C" __declspec(naked) void __stdcall __E__160__()
{
__asm
{
jmp p[160*4];
}
}
// timeGetDevCaps
extern "C" __declspec(naked) void __stdcall __E__161__()
{
__asm
{
jmp p[161*4];
}
}
// timeGetSystemTime
extern "C" __declspec(naked) void __stdcall __E__162__()
{
__asm
{
jmp p[162*4];
}
}
// timeGetTime
extern "C" __declspec(naked) void __stdcall __E__163__()
{
__asm
{
jmp p[163*4];
}
}
// timeKillEvent
extern "C" __declspec(naked) void __stdcall __E__164__()
{
__asm
{
jmp p[164*4];
}
}
// timeSetEvent
extern "C" __declspec(naked) void __stdcall __E__165__()
{
__asm
{
jmp p[165*4];
}
}
// waveInAddBuffer
extern "C" __declspec(naked) void __stdcall __E__166__()
{
__asm
{
jmp p[166*4];
}
}
// waveInClose
extern "C" __declspec(naked) void __stdcall __E__167__()
{
__asm
{
jmp p[167*4];
}
}
// waveInGetDevCapsA
extern "C" __declspec(naked) void __stdcall __E__168__()
{
__asm
{
jmp p[168*4];
}
}
// waveInGetDevCapsW
extern "C" __declspec(naked) void __stdcall __E__169__()
{
__asm
{
jmp p[169*4];
}
}
// waveInGetErrorTextA
extern "C" __declspec(naked) void __stdcall __E__170__()
{
__asm
{
jmp p[170*4];
}
}
// waveInGetErrorTextW
extern "C" __declspec(naked) void __stdcall __E__171__()
{
__asm
{
jmp p[171*4];
}
}
// waveInGetID
extern "C" __declspec(naked) void __stdcall __E__172__()
{
__asm
{
jmp p[172*4];
}
}
// waveInGetNumDevs
extern "C" __declspec(naked) void __stdcall __E__173__()
{
__asm
{
jmp p[173*4];
}
}
// waveInGetPosition
extern "C" __declspec(naked) void __stdcall __E__174__()
{
__asm
{
jmp p[174*4];
}
}
// waveInMessage
extern "C" __declspec(naked) void __stdcall __E__175__()
{
__asm
{
jmp p[175*4];
}
}
// waveInOpen
extern "C" __declspec(naked) void __stdcall __E__176__()
{
__asm
{
jmp p[176*4];
}
}
// waveInPrepareHeader
extern "C" __declspec(naked) void __stdcall __E__177__()
{
__asm
{
jmp p[177*4];
}
}
// waveInReset
extern "C" __declspec(naked) void __stdcall __E__178__()
{
__asm
{
jmp p[178*4];
}
}
// waveInStart
extern "C" __declspec(naked) void __stdcall __E__179__()
{
__asm
{
jmp p[179*4];
}
}
// waveInStop
extern "C" __declspec(naked) void __stdcall __E__180__()
{
__asm
{
jmp p[180*4];
}
}
// waveInUnprepareHeader
extern "C" __declspec(naked) void __stdcall __E__181__()
{
__asm
{
jmp p[181*4];
}
}
// waveOutBreakLoop
extern "C" __declspec(naked) void __stdcall __E__182__()
{
__asm
{
jmp p[182*4];
}
}
// waveOutClose
extern "C" __declspec(naked) void __stdcall __E__183__()
{
__asm
{
jmp p[183*4];
}
}
// waveOutGetDevCapsA
extern "C" __declspec(naked) void __stdcall __E__184__()
{
__asm
{
jmp p[184*4];
}
}
// waveOutGetDevCapsW
extern "C" __declspec(naked) void __stdcall __E__185__()
{
__asm
{
jmp p[185*4];
}
}
// waveOutGetErrorTextA
extern "C" __declspec(naked) void __stdcall __E__186__()
{
__asm
{
jmp p[186*4];
}
}
// waveOutGetErrorTextW
extern "C" __declspec(naked) void __stdcall __E__187__()
{
__asm
{
jmp p[187*4];
}
}
// waveOutGetID
extern "C" __declspec(naked) void __stdcall __E__188__()
{
__asm
{
jmp p[188*4];
}
}
// waveOutGetNumDevs
extern "C" __declspec(naked) void __stdcall __E__189__()
{
__asm
{
jmp p[189*4];
}
}
// waveOutGetPitch
extern "C" __declspec(naked) void __stdcall __E__190__()
{
__asm
{
jmp p[190*4];
}
}
// waveOutGetPlaybackRate
extern "C" __declspec(naked) void __stdcall __E__191__()
{
__asm
{
jmp p[191*4];
}
}
// waveOutGetPosition
extern "C" __declspec(naked) void __stdcall __E__192__()
{
__asm
{
jmp p[192*4];
}
}
// waveOutGetVolume
extern "C" __declspec(naked) void __stdcall __E__193__()
{
__asm
{
jmp p[193*4];
}
}
// waveOutMessage
extern "C" __declspec(naked) void __stdcall __E__194__()
{
__asm
{
jmp p[194*4];
}
}
// waveOutOpen
extern "C" __declspec(naked) void __stdcall __E__195__()
{
__asm
{
jmp p[195*4];
}
}
// waveOutPause
extern "C" __declspec(naked) void __stdcall __E__196__()
{
__asm
{
jmp p[196*4];
}
}
// waveOutPrepareHeader
extern "C" __declspec(naked) void __stdcall __E__197__()
{
__asm
{
jmp p[197*4];
}
}
// waveOutReset
extern "C" __declspec(naked) void __stdcall __E__198__()
{
__asm
{
jmp p[198*4];
}
}
// waveOutRestart
extern "C" __declspec(naked) void __stdcall __E__199__()
{
__asm
{
jmp p[199*4];
}
}
// waveOutSetPitch
extern "C" __declspec(naked) void __stdcall __E__200__()
{
__asm
{
jmp p[200*4];
}
}
// waveOutSetPlaybackRate
extern "C" __declspec(naked) void __stdcall __E__201__()
{
__asm
{
jmp p[201*4];
}
}
// waveOutSetVolume
extern "C" __declspec(naked) void __stdcall __E__202__()
{
__asm
{
jmp p[202*4];
}
}
// waveOutUnprepareHeader
extern "C" __declspec(naked) void __stdcall __E__203__()
{
__asm
{
jmp p[203*4];
}
}
// waveOutWrite
extern "C" __declspec(naked) void __stdcall __E__204__()
{
__asm
{
jmp p[204*4];
}
}
// wid32Message
extern "C" __declspec(naked) void __stdcall __E__205__()
{
__asm
{
jmp p[205*4];
}
}
// winmmDbgOut
extern "C" __declspec(naked) void __stdcall __E__206__()
{
__asm
{
jmp p[206*4];
}
}
// winmmSetDebugLevel
extern "C" __declspec(naked) void __stdcall __E__207__()
{
__asm
{
jmp p[207*4];
}
}
// wod32Message
extern "C" __declspec(naked) void __stdcall __E__208__()
{
__asm
{
jmp p[208*4];
}
}
// ___XXX___210
extern "C" __declspec(naked) void __stdcall __E__209__()
{
__asm
{
jmp p[209*4];
}
}
there are maybe some bugs in the dll ... fix it :P if ur not able to do this u failed like me xD
so i hope some of u can need it ...
sry for my bad english ...
enjoy ur time and hf
GretZz Yours hello123456
ps: Hoffe das war jetzt genug der Danksagung und der Credits Moep :P und danke nochmals






