[Collection Thread] War Rock Cheat Programming Discussion

[iShoX™]

#request Bypss

[ProZeroX]

 Spoiler

#include "nStandardInclude.hpp"
#define ADR_PLAYERPOINTER 0xAF05AC
#define ADR_SERVERPOINTER 0xAEAD74
#define ADR_DEVICEPOINTER 0xAE9E14
#define ADR_BASEPOINTER 0xB22B38
#define ADR_PLAYERSIZE 0xB10

#define OFS_X 0x10300
#define OFS_Y 0x10310
#define OFS_Z 0x10308
#define OFS_NOFALLDAMAGE 0x00102E8
#define OFS_PLAYERSTARE 0xC4CC   

#define ADR_SWIM1 0xAE1BFC
#define ADR_SWIM2 0xAF05EC
#define ADR_INVEHICLE 0xAF05F0
#define ADR_SPEED            0x8D0B30
#define ADR_SCOPE  0x93B458
#define ADR_SPEEDROLLING 0x8D0958

#define ADR_WEAPONGLOBAL1                   0xB0EB58
#define ADR_WEAPONGLOBAL2                   0xB63230
#define OFS_SLOTS            0x9F1E4 

#define ADR_SNIPERPX 0x45674A
#define ADR_BANDAGE 0x45677D //up2
#define ADR_CLIPA 0x4566FB  //up2
#define ADR_CLIPS 0x456714
#define ADR_STAMINAUP1 0x4094A4
#define ADR_STAMINAUP2 0x4094EB
#define ADR_DEATHCAM 0x4567AF ]


#define ADR_NORECOIL 0x501881
#define ADR_NOSPREAD 0x50F72F // 0x50EEB1
#define ADR_NODELAY  0x51C706 //
#define ADR_NORELOAD 0x51CA0B //
#define ADR_UNLIMITEDAMMO  0x51449D
#define ADR_ONEPOSITIONKILL1 0x408249
#define ADR_ONEPOSITIONKILL2 0x408252   
#define ADR_ONEPOSITIONKILL3 0x40825E
#define ADR_STW1 0x608F90
#define ADR_STW2 0x608F96//
#define ADR_WTW 0x774460 //00774460  |. D84E 0C        FMUL DWORD PTR DS:[ESI+C]
#define ADR_INVI 0x50DA2C // 0050DA2C  |. 8D47 1C        LEA EAX,DWORD PTR DS:[EDI+1C]
#define ADR_AUTOMEDIC1 0x508A7D //00508A7D  |. 0F85 3E020000  JNZ WarRock-.00508CC1
#define ADR_AUTOMEDIC2 0x508CEA //00508CEA  |. 0F8A B0000000  JPE WarRock-.00508DA0

#define ADR_BONESHOT 0x44A21D

#define ADR_STAMINA1 0x457779 //00457779  |. 74 1B          JE SHORT WarRock-.00457796
#define ADR_STAMINA2 0x4F8CFF //004F8CFF  |. 74 11          JE SHORT WarRock-.004F8D12
#define ADR_STAMINA3 0x508E84 //00508E84  |. 74 11          JE SHORT WarRock-.00508E97

#define ADR_FASTPLANT 0x5138BC // |. 7D 16          JGE SHORT WarRock-.005138D4
#define ADR_FASTDEFUSE 0x50F9A1 // 0050F9A1  |. 7D 07          JGE SHORT WarRock-.0050F9AA
#define ADR_DPANYWHERE 0x582ECA // 00582ECA  |. 75 24          JNZ SHORT WarRock-.00582EF0

#define ADR_MINESGPS1 0x4480B3 // 004480B3  |. 0F85 FF000000  |JNZ WarRock-.004481B8
#define ADR_MINESGPS2 0x448131 // 00448131  |. 0F85 81000000  |JNZ WarRock-.004481B8
#define ADR_NOM14    0x5ACD45 // 005ACD45  |? C489 A5DCFEFF  LES ECX,FWORD PTR DS:[ECX+FFFEDCA5]
#define ADR_NOFLASH  0x5ACF7E // 005ACF7E  |. 74 25          JE SHORT WarRock-.005ACFA5

#define ADR_NOBOUNDS1 0xB8271C
#define ADR_NOBOUNDS2 0xB82720
#define ADR_NOBOUNDS3 0xB8272E	
#define ADR_NOSPAWNWAIT1 0xB8CCBC
#define ADR_NOSPAWNWAIT2 0xB8CCC0
#define ADR_NOSPAWNWAIT3 0xB8CCC4
#define ADR_FASTAMMO 0xAF4BB4
#define ADR_FASTHEALTH 0xAF4BC4


#define ADR_RADARGPS 0x5A01C9 // 005A01C9  |. 75 15          JNZ SHORT WarRock-.005A01E0
#define ADR_UNLOCKSWIM 0x50A2DB // 0050A2DB  |? 41             INC ECX
#define ADR_DAMAGEAS 0x51103B // 0051103B  |. 0FBF83 EE01010>|MOVSX EAX,WORD PTR DS:[EBX+101EE]


#define ADR_VEH_NODAMAGE 0x42A58F // 0042A58F  /$ 55             PUSH EBP
#define ADR_VEH_NOOVERHEAT 0x729606 // 00729606  |. 334424 20      ||XOR EAX,DWORD PTR SS:[ESP+20]
#define ADR_VEH_INVISIBLE 0x42A8FE // 0042A8FE  |. D95B 0C        FSTP DWORD PTR DS:[EBX+C]
#define ADR_VEH_SUPERFIRE1 0x426FCA // 00426FCA  |. 74 75          JE SHORT WarRock-.00427041
#define ADR_VEH_SUPERFIRE2 0x426FF5 // 00426FF5  |. 7A 4A          JPE SHORT WarRock-.00427041
#define ADR_VEH_SUPERFIRE3 0x426AE7 //notup2date
#define ADR_GETBASE ( 0xB72560 - ADR_PLAYERPOINTER )
#define ADR_NEWCBASE ( ADR_GETBASE - 0x4 )


#define ADR_ARTILLERY1 0x4F8FC0    // 004F8FC0  |. 75 49          JNZ SHORT WarRock-.004F900B
#define ADR_ARTILLERY2 0x4F924E	  // 004F924E  |. 75 12          JNZ SHORT WarRock-.004F9262
#define ADR_ARTILLERY3 0x598737      //00598737  |. 75 73          JNZ SHORT WarRock-.005987AC
#define ADR_ARTILLERY4 0x5987CA    //005987CA  |. 7D 73          JGE SHORT WarRock-.0059883F
#define ADR_ARTILLERY5 0x598512    //00598512  |. 74 24          |JE SHORT WarRock-.00598538
#define ADR_ARTILLERY6 0x57A675    //0057A675  |. E9 5A020000    JMP WarRock-.0057A8D4
#define ADR_ARTILLERY7 0x5986B1  // 005986B1  |. 7A 73          JPE SHORT WarRock-.00598726
#define ADR_ARTILLERY8 0x598847 //00598847  |. 0F85 94000000  JNZ WarRock-.005988E1

correct me if smth is wrong blablabla, enjoy.

[xXrussXx]

Weis einer wo ich die DSETUP.DLL Source finden kann?
Oder noch besser kann sie mir einer Senden? Danke

[.BlackHat]

Originally Posted by xXrussXx

Weis einer wo ich die DSETUP.DLL Source finden kann?
Oder noch besser kann sie mir einer Senden? Danke

Davon gibts keine Source. Für DLLs habe ich aber generell ein Tool womit man automatisch Source Code erstellt der die DLL spoof'd Willst haben? PM mich an und wir handeln den Preis aus ;D

[Raz9r]

Originally Posted by .BlackHat

Davon gibts keine Source. Für DLLs habe ich aber generell ein Tool womit man automatisch Source Code erstellt der die DLL spoof'd Willst haben? PM mich an und wir handeln den Preis aus ;D

Dafür einen Preis zu verlangen ist eine Schande. Man muss einfach nur eine DLL nehmen, die die Exports weiterleitet (vgl. ) und einen Hook auf die Funktion connect oder WSAConnect aus WinSock2 legt und die IP-Adresse auf die des eigenen Servers ändert.

[kevin0152]

#request scan patterns for addy logger

[CyberMask]

#request

Ofs_ip
Ofs_health
Ofs_name
Ofs_team

[Basser]

shouldn't this be translated by now?

[Raz9r]

Originally Posted by Basser

shouldn't this be translated by now?

We just forgot about that. Anyways, the threads focus is on discussion about War Rock cheat development with some quite obvious rules.

I guess you're interested in the packet structure for War Rock? ;-)

[Basser]

Originally Posted by Raz9r

We just forgot about that. Anyways, the threads focus is on discussion about War Rock cheat development with some quite obvious rules.

I guess you're interested in the packet structure for War Rock? ;-)

I am, so far not many people are willing to help / contribute to my project though :/

[xKahba]

PLAYER ANIMATION DIARRHEA
/ NO FAKE !!! - Player Animation / Not Public @ The Moment in WarRock
SPIELER ANIMATION DURCHFALL

#define PLAYER_ANIMATION_DIARRHEA *(DWORD*)( 0xAEF49C ); // State Addr For Player Animate diarrhea
DWORD dwPlayerPointer = *(DWORD*)( 0x00000000 );
if ( dwPlayerPointer )
{
    *(DWORD*)( dwPlayerPointer + 0xC424 ) |= ( PLAYER_ANIMATION_DIARRHEA );
}

[Combatdafuq]

WarRock Remote KILL Function

All credits going to King7 aka RoBerTo!

void * DetourCreate ( BYTE *src, const BYTE *dst, const int len ) 
{
	BYTE *jmp =(BYTE*)malloc(len+5);
	DWORD dwBack;
	void* FakeStack = (unsigned char*) src - 1500;
	VirtualProtect(FakeStack,0x3000,PAGE_EXECUTE_READWRITE,&dwBack);
	memcpy(jmp,src,len); 
	jmp += len;
	jmp[0] = 0xE9;
	*(DWORD*)(jmp+1) =(DWORD)(src+len-jmp) - 5;
	src[0] = 0xE9;
	*(DWORD*)(src+1) =(DWORD)(dst - src) - 5;
	for(int i=5; i<len; i++) src[i] = 0x90;
	VirtualProtect(FakeStack,0x3000,dwBack,&dwBack);
	return(jmp-len);
}


//[B][COLOR="Red"]Address and function are updated ![/COLOR][/B]


#define ADR_USERKILL  0x416DA4


DWORD UserKillKJmp = NULL;
DWORD UserID = NULL;
__declspec (naked) void new_userkill(void)
{
	__asm
	{
		mov ecx,UserID
		mov dword ptr [eax+0x1C],ecx
		jmp dword ptr [UserKillKJmp]
	}
}


if ( CH_REMOTEKILL !=0 && CH_USERFINDER !=0 )
{
	UserID       = (CH_USERFINDER-1);
	UserKillKJmp = (ADR_USERKILL+0x6);
	DetourCreate((BYTE*)ADR_USERKILL,(BYTE*)new_userkill,6);
}

[Kazbah__]

//Address and function are updated !


#define ADR_USERKILL 0x416DA4

its wrong here is the correct one ...


#define ADR_USERKILL 0x416D9E // 10.10.13

[Combatdafuq]

Originally Posted by Kazbah__

its wrong here is the correct one ...

#define ADR_USERKILL 0x416D9E // 10.10.13

I haven't tryed mine , but normaly as i compared code should work... maybe i made a n mistake... i didn't tryed the function

[chatbl0ck]

#Request WeaponHack Source .