WarRock EU - Code Snippets

[UnknownData]

Weapon Binder für Arme:

Source:

#define OFS_Weapon1 0x101DA
#define OFS_Weapon2 0x101DE
#define OFS_Weapon3 0x101E2

void WeaponBinder(int ID)//Für Arme :P
{
DWORD Player = *(DWORD*)ADR_PlayerPointer;
if(Player != 0)
{
if (GetAsyncKeyState(VK_F5)&1)
{
*(WORD*)(Player+OFS_Weapon1) = ID;
*(WORD*)(Player+OFS_Weapon2) = ID;
*(WORD*)(Player+OFS_Weapon3) = ID;
}
}
}

Usage:

if(binoculars== 1)
{
WeaponBinder(104);
}

Credits : UnknownData ( Diesmal Wirklick :P )

[Zœy™²]

#request (Marcel sagte ich sollte hier fragen)
Suche ne D3D Base

[lukasdermaster]

@ UnknownData hasste nen AddyLogger ? wenn ja kannste pls Link dazu schicken ?

Warum funzt mein Hack nicht ?
[[[[NoMenu!!!]]]
Is nur ein Teleport und NFD Hack.. noMenu aber der funzt iwi nicht... was habe ich falsc gemacht ??

SC:
Inkludierungen:

#include <windows.h>
#include <stdio.h>

Addys [Stand 20.01.2012] :

#define Playerpointer 0x009F1BAC
#define NFD_Offset 0x00102C8
#define OFS_X 0x00102E0
#define OFS_Y 0x00102F0
#define OFS_Z 0x00102E8

Positionen:

float posiX;
float posiY;
float posiZ;

Hacks:

void NFD()
{
DWORD dwPlP = *(DWORD*)Playerpointer;
if(dwPlP != 0)
{
   *(float*)(dwPlP+NFD_Offset) = -25000;
}
}

void Teleport ()
{
DWORD dwPlayerPtr = *(DWORD*)Playerpointer;
if(dwPlayerPtr != 0)
{
if (GetAsyncKeyState(VK_F2)) 
{
posiX = *(float*)(dwPlayerPtr + OFS_X);
posiY = *(float*)(dwPlayerPtr + OFS_Y);
posiZ = *(float*)(dwPlayerPtr + OFS_Z);
}
if (GetAsyncKeyState(VK_F3))
{
*(float*)(dwPlayerPtr + OFS_X) = posiX;
*(float*)(dwPlayerPtr + OFS_Y) = posiY;
*(float*)(dwPlayerPtr + OFS_Z) = posiZ;
}
}
}

Voids:

void TheHacks()
{
for(;;)
{
NFD();
Sleep(30);
}
}
BOOL WINAPI DllMain(HINSTANCE mod, DWORD DWORD_GRUND, LPVOID res)
{
switch(DWORD_GRUND)
{
case 1:
//Made by Lukas DONT COPY THIS TEXT OR DELETE!
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)TheHacks , 0, 0, 0);
break;
case 2:
break;
}
return TRUE;
}

Und vllt. weiss wer ja wie ein D3D Hack geht...

Danke im Voruas!

[Chown¡¡qhtz]

Das, was ich rot markiert habe, habe ich verbessert.

Originally Posted by lukasdermaster

@ UnknownData hasste nen AddyLogger ? wenn ja kannste pls Link dazu schicken ?

Warum funzt mein Hack nicht ?
[[[[NoMenu!!!]]]
Is nur ein Teleport und NFD Hack.. noMenu aber der funzt iwi nicht... was habe ich falsc gemacht ??

SC:
Inkludierungen:

#include <windows.h>
#include <stdio.h>

Addys [Stand 20.01.2012] :

#define Playerpointer 0x9EEB8C // -> Updated nach dem Update

#define NFD_Offset 0x00102C8
#define OFS_X 0x00102E0
#define OFS_Y 0x00102F0
#define OFS_Z 0x00102E8

Positionen:

float posiX;
float posiY;
float posiZ;

Hacks:

void NFD()
{
DWORD dwPlP = *(DWORD*)Playerpointer;
if(dwPlP != 0)
{
   *(float*)(dwPlP+NFD_Offset) = -25000;
}
}

void Teleport ()
{
DWORD dwPlayerPtr = *(DWORD*)Playerpointer;
if(dwPlayerPtr != 0)
{
if (GetAsyncKeyState(VK_F2)) 
{
posiX = *(float*)(dwPlayerPtr + OFS_X);
posiY = *(float*)(dwPlayerPtr + OFS_Y);
posiZ = *(float*)(dwPlayerPtr + OFS_Z);
}
if (GetAsyncKeyState(VK_F3))
{
*(float*)(dwPlayerPtr + OFS_X) = posiX;
*(float*)(dwPlayerPtr + OFS_Y) = posiY;
*(float*)(dwPlayerPtr + OFS_Z) = posiZ;
}
}
}

Voids:

void TheHacks()
{
for(;;)
{
NFD();
[color=red]Teleport(); // -> Teleport haste hier vergessen.
Sleep(10); // -> Sleep 10 reicht völlig aus.[/color]
}
}
BOOL WINAPI DllMain(HINSTANCE mod, DWORD DWORD_GRUND, LPVOID res)
{
switch(DWORD_GRUND)
{
case 1:
//Made by Lukas DONT COPY THIS TEXT OR DELETE!
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)TheHacks , 0, 0, 0);
break;
[color=red]// -> unnötigen scheiß gelöscht [/color]
}
return TRUE;
}

Und vllt. weiss wer ja wie ein D3D Hack geht...

Danke im Voruas!

Den satz finde ich ja am geilsten:

//Made by Lukas DONT COPY THIS TEXT OR DELETE!

[UnknownData]

Originally Posted by lukasdermaster

@ UnknownData hasste nen AddyLogger ? wenn ja kannste pls Link dazu schicken ?

Warum funzt mein Hack nicht ?
[[[[NoMenu!!!]]]
Is nur ein Teleport und NFD Hack.. noMenu aber der funzt iwi nicht... was habe ich falsc gemacht ??

SC:
Inkludierungen:

#include <windows.h>
#include <stdio.h>

Addys [Stand 20.01.2012] :

#define Playerpointer 0x009F1BAC // -> OutDated
#define NFD_Offset 0x00102C8
#define OFS_X 0x00102E0
#define OFS_Y 0x00102F0
#define OFS_Z 0x00102E8

Positionen:

float posiX;
float posiY;
float posiZ;

Hacks:

void NFD()
{
DWORD dwPlP = *(DWORD*)Playerpointer;
if(dwPlP != 0)
{
   *(float*)(dwPlP+NFD_Offset) = -25000;
}
}

void Teleport ()
{
DWORD dwPlayerPtr = *(DWORD*)Playerpointer;
if(dwPlayerPtr != 0)
{
if (GetAsyncKeyState(VK_F2)) 
{
posiX = *(float*)(dwPlayerPtr + OFS_X);
posiY = *(float*)(dwPlayerPtr + OFS_Y);
posiZ = *(float*)(dwPlayerPtr + OFS_Z);
}
if (GetAsyncKeyState(VK_F3))
{
*(float*)(dwPlayerPtr + OFS_X) = posiX;
*(float*)(dwPlayerPtr + OFS_Y) = posiY;
*(float*)(dwPlayerPtr + OFS_Z) = posiZ;
}
}
}

Voids:

void TheHacks()
{
for(;;)
{
NFD();
Teleport();
Sleep(1);
}
}
BOOL WINAPI DllMain(HINSTANCE mod, DWORD DWORD_GRUND, LPVOID res)
{
switch(DWORD_GRUND)
{
case 1:
//C&P by Lukas
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)TheHacks , 0, 0, 0);
break;
case 2:
break;
}
return TRUE;
}

!

Da fixxed

[BlackLegend™#]

 Spoiler

// Declaration
LONG WINAPI UnhandlerExceptionFilter (struct _EXCEPTION_POINTERS* ExceptionInfo);
DWORD WINAPI GetTickCount_Detour (void);
BOOL WINAPI GetThreadContext_Detour (HANDLE hThread,LPCONTEXT lpContext);
DETOUR_TRAMPOLINE (BOOL WINAPI GetThreadContext_Trampoline(HANDLE,LPCONTEXT),GetT hreadContext);

// Function defines
void Set_BreakPoints(void);
LPTOP_LEVEL_EXCEPTION_FILTER oldHandler = NULL;
LPTOP_LEVEL_EXCEPTION_FILTER oldHandler2= NULL;

#define ADR_QuickPlant 0x4D6E0B // Address update to 21/01/2012
#define ADR_QuickDefuse 0x4D32E7 // Address update to 21/01/2012

// Global variables
DWORD dwBreakPoint1 = ADR_QuickPlant;
DWORD dwBreakPoint2 = ADR_QuickDefuse;

// if someone dosent know it's look as Byte
int nQuickPlant = 0x41;
int nQuickDefuse = 0x44;

// How to calculate a jmp ? so
//#define ADR_RelativeJMPofQuickDefuse 0x4D332B - 0x4D32E7 = Result is 44
// Relative jmp is a address where you jmp quick defuse for defuse a bomb fast !!!

BYTE opcodes[5];

DWORD WINAPI GetTickCount_Detour()
{
Set_BreakPoints();
WriteProcessMemory(GetCurrentProcess(),(LPVOID)Get ProcAddress(GetModuleHandle("Kernel32"),"GetTickCo unt"),&opcodes,5,0);
return GetTickCount();
}

void Set_BreakPoints()
{
oldHandler = SetUnhandledExceptionFilter(UnhandlerExceptionFilt er);
oldHandler2 = SetUnhandledExceptionFilter(UnhandlerExceptionFilt er);

CONTEXT ctx = {CONTEXT_DEBUG_REGISTERS};

ctx.Dr0 = dwBreakPoint1;
ctx.Dr7 = 0x00000001;

ctx.Dr1 = dwBreakPoint2;
ctx.Dr7 |= 0x00000004;

/*ctx.Dr2 = dwBreakPoint3;
ctx.Dr7 |= 0x00000010;*/

SetThreadContext(GetCurrentThread(), &ctx);
}

BOOL WINAPI GetThreadContext_Detour ( HANDLE hThread,LPCONTEXT lpContext )
{
BOOL ret=GetThreadContext_Trampoline( hThread, lpContext);

if (lpContext->ContextFlags && CONTEXT_DEBUG_REGISTERS)
{
lpContext->Dr0=0;
lpContext->Dr1=0;
lpContext->Dr2=0;
}
return ret;
}
LONG WINAPI UnhandlerExceptionFilter(struct _EXCEPTION_POINTERS* ExceptionInfo)
{
if(ExceptionInfo->ExceptionRecord->ExceptionCode==EXCEPTION_SINGLE_STEP )
{
if ( (DWORD)ExceptionInfo->ExceptionRecord->ExceptionAddress == dwBreakPoint1 ) // address where we set Exception
{
ExceptionInfo->ContextRecord->Eip+=nQuickPlant; // Relative jmp
return EXCEPTION_CONTINUE_EXECUTION;
}
if((DWORD)ExceptionInfo->ExceptionRecord->ExceptionAddress == dwBreakPoint2 ) // address where we set Exception
{

ExceptionInfo->ContextRecord->Eip+=nQuickDefuse; // Relative jmp

return EXCEPTION_CONTINUE_EXECUTION;
}

}
return EXCEPTION_CONTINUE_SEARCH;
}
bool DllMain ( HMODULE hDll, unsigned long Reason , LPVOID LPReserved )
{
switch (Reason)
{
case DLL_PROCESS_ATTACH :

// Hook Hardware BreakPoint

ReadProcessMemory(GetCurrentProcess(),(LPVOID)GetP rocAddress(GetModuleHandle("Kernel32"),"GetTickCou nt"),&opcodes,5,0);
DetourFunction((PBYTE)GetTickCount,(PBYTE)GetTickC ount_Detour);
DetourFunctionWithTrampoline((PBYTE)GetThreadConte xt_Trampoline,(PBYTE)GetThreadContext_Detour);

break;

case DLL_PROCESS_DETACH :

DetourRemove((PBYTE) GetThreadContext_Trampoline,(PBYTE) GetThreadContext_Detour);
WriteProcessMemory(GetCurrentProcess(),(LPVOID)Get ProcAddress(GetModuleHandle("Kernel32"),"GetTickCo unt"),&opcodes,5,0);
if (oldHandler) SetUnhandledExceptionFilter (oldHandler);
if (oldHandler2) SetUnhandledExceptionFilter (oldHandler2);
break;
}
return (1);
}

"angeblich" King7 sein Werk
ich gebe aber mal Credits an Silentchris.
€: 0815 Fehler gefixed.
Für die Noobs

[Chown¡¡qhtz]

Originally Posted by UnknownData

Da fixxed

sleep 1 völlig unnötig bei teleport und nfd

[UnknownData]

Quick Plant/defuse by King7:

#include <windows.h>
#include "detours.h"


// Declaration
LONG WINAPI UnhandlerExceptionFilter (struct _EXCEPTION_POINTERS* ExceptionInfo);
DWORD WINAPI GetTickCount_Detour (void);
BOOL WINAPI GetThreadContext_Detour (HANDLE hThread,LPCONTEXT lpContext);
DETOUR_TRAMPOLINE (BOOL WINAPI GetThreadContext_Trampoline(HANDLE,LPCONTEXT),GetT hreadContext);

// Function defines
void Set_BreakPoints(void);
LPTOP_LEVEL_EXCEPTION_FILTER oldHandler = NULL;
LPTOP_LEVEL_EXCEPTION_FILTER oldHandler2= NULL;

#define ADR_QuickPlant 0x4D6E0B // Address update to 21/01/2012
#define ADR_QuickDefuse 0x4D32E7 // Address update to 21/01/2012

// Global variables
DWORD dwBreakPoint1 = ADR_QuickPlant;
DWORD dwBreakPoint2 = ADR_QuickDefuse;

// if someone dosent know it's look as Byte
int nQuickPlant = 0x41;
int nQuickDefuse = 0x44;

// How to calculate a jmp ? so
//#define ADR_RelativeJMPofQuickDefuse 0x4D332B - 0x4D32E7 = Result is 44
// Relative jmp is a address where you jmp quick defuse for defuse a bomb fast !!!

BYTE opcodes[5];

DWORD WINAPI GetTickCount_Detour()
{
Set_BreakPoints();
WriteProcessMemory(GetCurrentProcess(),(LPVOID)Get ProcAddress(GetModuleHandle("Kernel32"),"GetTickCo unt"),&opcodes,5,0);
return GetTickCount();
}

void Set_BreakPoints()
{
oldHandler = SetUnhandledExceptionFilter(UnhandlerExceptionFilt er);
oldHandler2 = SetUnhandledExceptionFilter(UnhandlerExceptionFilt er);

CONTEXT ctx = {CONTEXT_DEBUG_REGISTERS};

ctx.Dr0 = dwBreakPoint1;
ctx.Dr7 = 0x00000001;

ctx.Dr1 = dwBreakPoint2;
ctx.Dr7 |= 0x00000004;

SetThreadContext(GetCurrentThread(), &ctx);
}

BOOL WINAPI GetThreadContext_Detour ( HANDLE hThread,LPCONTEXT lpContex )
{
BOOL ret=GetThreadContext_Trampoline( hThread, lpContext);

if (lpContext->ContextFlags && CONTEXT_DEBUG_REGISTERS)
{
lpContext->Dr0=0;
lpContext->Dr1=0;
lpContext->Dr2=0;
}
return ret;
}

LONG WINAPI UnhandlerExceptionFilter(struct _EXCEPTION_POINTERS* ExceptionInfo)
{
if(ExceptionInfo->ExceptionRecord->ExceptionCode==EXCEPTION_SINGLE_STEP )
{
if ( (DWORD)ExceptionInfo->ExceptionRecord->ExceptionAddress == dwBreakPoint1 ) // address where we set Exception
{
ExceptionInfo->ContextRecord->Eip+=nQuickPlant; // Relative jmp

return EXCEPTION_CONTINUE_EXECUTION;
}
if((DWORD)ExceptionInfo->ExceptionRecord->ExceptionAddress == dwBreakPoint2 ) // address where we set Exception
{
ExceptionInfo->ContextRecord->Eip+=nQuickDefuse; // Relative jmp

return EXCEPTION_CONTINUE_EXECUTION;
}

}
return EXCEPTION_CONTINUE_SEARCH;
}

booll DllMain ( HMODULE hDll, unsigned long Reason , LPVOID LPReserved )
{
switch (Reason)
{
case DLL_PROCESS_ATTACH :

// Hook Hardware BreakPoint

ReadProcessMemory(GetCurrentProcess(),(LPVOID)GetP rocAddress(GetModuleHandle("Kernel32"),"GetTickCou nt"),&opcodes,5,0);
DetourFunction((PBYTE)GetTickCount,(PBYTE)GetTickC ount_Detour);
DetourFunctionWithTrampoline((PBYTE)GetThreadConte xt_Trampoline,(PBYTE)GetThreadContext_Detour);

break;

case DLL_PROCESS_DETACH :

DetourRemove((PBYTE) GetThreadContext_Trampoline,(PBYTE) GetThreadContext_Detour);
WriteProcessMemory(GetCurrentProcess(),(LPVOID)Get ProcAddress(GetModuleHandle("Kernel32"),"GetTickCo unt"),&opcodes,5,0);
if (oldHandler) SetUnhandledExceptionFilter (oldHandler);
if (oldHandler2) SetUnhandledExceptionFilter (oldHandler2);
break;
}
return (1);
}

[_supreme_]

Wisst ihr trottel auch warum man den playerpointer immer zu dword umwandeln muss?
Weil das ja ein -pointer- ist, der immer auf den spieler verweist.
Da sich ja der Spieler nicht immer an der gleichen Speicherposition befindet ist hoffentlich klar.

[R3d_L!n3]

//-----------------------------------------------------------------------------
// Name: Addies()
//-----------------------------------------------------------------------------
ADR_Skin 0x008B473C
ADR_SuperJump 0x008B4870

//-----------------------------------------------------------------------------
// Name: Skin()
//-----------------------------------------------------------------------------

Use double and don't ask me how code it ..

//-----------------------------------------------------------------------------
// Name: SuperJump()
//-----------------------------------------------------------------------------

if(RedLine.PlayerH.RL_SuperJump)
{

  *(float*) ADR_SuperJump = ; /*Your choice but make sure val is up than 180*/ 

}
else
{

  *(float*) ADR_SuperJump = 180 ; 

}

You can do it on case too or by counting 1 2 3 4 5 6 .. also its your choice ..

Credits :
R3d_L!n3

[__BuRn3R]

Originally Posted by UnknownData

Credits : CyberVeezy(Vorlage)
UnknownPK(Structs)
UnknownData(Features)

Credits to CyberRazzer! CyberVeezy hat es von Razzers Base geleeched!!!

[Venom']

Originally Posted by _BuRn3R_

Credits to CyberRazzer! CyberVeezy hat es von Razzers Base geleeched!!!

Wenn das mal nicht der gute alte _BuRn3R_ ist ,der sich nach langer zeit wieder meldet

AntiSpam :

if(premium==1) // Bronze
        *(int*)(Server+OFS_PREMIUM) = 1;

if(premium==2) // Silber
        *(int*)(Server+OFS_PREMIUM) = 2;

if(premium==3) // Gold
        *(int*)(Server+OFS_PREMIUM) = 3;

if(premium==4) // Platin
        *(int*)(Server+OFS_PREMIUM) = 4;

Von der ersten Seite :D

[BlackLegend™#]

if(items->menu.player.stamina == 1){*(float*)MEM_STAMINA1=1000;*(float*)MEM_STAMINA 2=0;*(float*)MEM_STAMINA3=0;*(float*)MEM_STAMINA4= 0;*(float*)MEM_STAMINA5=1000;}if(items->menu.player.stamina == 2){ *(float*)MEM_STAMINA1=500;*(float*)MEM_STAMINA2=0; *(float*)MEM_STAMINA3=0;*(float*)MEM_STAMINA4=0;*( float*)MEM_STAMINA5=500;}
if(items->menu.player.stamina == 0){*(float*)MEM_STAMINA1 = 100.0f;*(double*)MEM_STAMINA2 = 20.0f;*(double*)MEM_STAMINA3 = 15.0f;*(float*)MEM_STAMINA4 = 30.0f;*(float*)MEM_STAMINA5 = .0f;}
if(items->menu.player.GmWarning==1){char *gmname = (char *) (ADR_GmWarning);if (strlen(gmname) > 2){ExitProcess(0);}}
if(items->menu.player.GmWarning==2){char *gmmessage = (char *)(ADR_GmWarning);if (strlen(gmmessage) > 2){sprintf(gmmessage,"BlackLegend D3D -> ~%s~ Spectating your Room!!!",ADR_GmWarning); }}
if(items->menu.player.stw){if(GetAsyncKeyState(VK_LBUTTON)) {*(float*)MEM_STW = 200.0f;}else{*(float*)MEM_STW = 0.0f;}}
if(items->menu.player.wtw==0)*(float*)MEM_WTW = 6.0f;
if(items->menu.player.wtw)*(float*)MEM_WTW = -999.0f;

Have Fun

[lukasdermaster]

achja Danke erstmal an euch xDDD kurze Frage... hat wer nen AddyLogger, weil ich keine Addy für PlayerPointer weg war... habt ihr das jetzt schon berrichtigt ??? oder was war jetzt mit dem Source-Code ?=??? xDDD


#EDIT: Habe schon den neuen Playerpointer gefunden... gibts was anderes, was ich verbessern muss ????

[UnknownData]

#request

Actual PlayerInfo & Player Structs

char *GetPlayerStatus(char *str, char *format)
{
DWORD dwServerPointer = *(DWORD*)0x9EEB28;
DWORD dwPlayerPointer = *(DWORD*)0x9EEB8C;
if(dwServerPointer != 0 && dwPlayerPointer == 0){
sprintf(cStatus, "%s", "In Lobby or Shop");
}else{
if (dwPlayerPointer!=0 && dwServerPointer!=0){
sprintf(cStatus, "%s", "In Room / Game");
}else{
sprintf(cStatus, "%s", "Please Login");
}
}return cStatus;
}