dimanche 16 mars 2014

[Release] Call Of Shit -- CT Hack topic




Hey UnKnoWnCheaTs-Community

I thought I could share my Cheat Table for another crap game. So here my CT.

Features:

Code:


-- Speedhack
-- Superjump
-- No Recoil
-- Unlimited Breath
-- Pointered Player Position Y - Address
-- Pointered Movement Speed - Address (Such useless)


For everyone who have no clue what Player Position Y is here a tutorial how to use it:

Player Position Y is the position in height. Which means, if you increase the value (also the height) you will automatically moved higher. It's like a simple tactical overview.

Here some example-pictures:






The Scripts:


Speedhack:

Code:


[ENABLE]
/*code from here to '[DISABLE]' will be used to enable the cheat
Static Address of this opcode --> 0137D53E
*/

alloc(SpeedCode,2048)
label(return_Speedhack)
label(original_MovementSpeed)
label(exit_Speedhack)

aobscan(Speedhack, F3 0F 10 9F 7C 08 00 00)
label(_Speedhack)
registersymbol(_Speedhack)

SpeedCode: //this is allocated memory, you have read,write,execute access
//place your code here
cmp dword ptr [edi+0000087C],(float)0.1
jng original_MovementSpeed
mov dword ptr [edi+0000087C],(float)35

original_MovementSpeed:

movss xmm3,[edi+0000087C]

exit_Speedhack:
jmp return_Speedhack

Speedhack:
_Speedhack:
jmp SpeedCode
nop
nop
nop
return_Speedhack:


 
 
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
_Speedhack:
movss xmm3,[edi+0000087C]
//Alt: db F3 0F 10 9F 7C 08 00 00


Superjump:

Code:


[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(JumpCode,2048)
label(return_SuperJump)
label(original_SuperJump)
label(exit_SuperJump)

aobscan(SuperJump, F3 0F 11 87 78 08 00 00)
label(_SuperJump)
registersymbol(_SuperJump)

JumpCode://place your code here
mov dword ptr [edi+00000878],(float)25

original_SuperJump:

movss xmm0,[edi+00000878]

exit_SuperJump:
jmp return_SuperJump

SuperJump:
_SuperJump:
jmp JumpCode
nop
nop
nop
return_SuperJump:


 
 
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(JumpCode)
_SuperJump:
movss [edi+00000878],xmm0
//Alt: db F3 0F 11 87 78 08 00 00


No Recoil:

Code:


[ENABLE]
/*code from here to '[DISABLE]' will be used to enable the cheat
Static Address of Recoil Y --> 00E930ED
Static Address of Recoil X --> 00E3DFAB
*/

alloc(NoRecoil1,2048)
alloc(NoRecoil2,2048)
label(return_NoRecoil1)
label(return_NoRecoil2)
label(original_NoRecoilY)
label(original_NoRecoilX)
label(exit_NoRecoil1)
label(exit_NoRecoil2)
//////////Needed for the Aobscan/////////////
aobscan(NoRecoilY, F3 0F 10 9D 4C 08 00 00)//
aobscan(NoRecoilX, F3 0F 7E 83 48 08 00 00)//
/////////////////////////////////////////////
label(_NoRecoilY)                          //
label(_NoRecoilX)                          //
/////////////////////////////////////////////
registersymbol(_NoRecoilY)                //
registersymbol(_NoRecoilX)                //
/////////////////////////////////////////////

///////////////////
//Script Function//
///////////////////

////////////////////////////////////////////////////////////////////////////////

NoRecoil1:
mov dword ptr [ebp+0000084C],(float)0.0
original_NoRecoilY:
movss xmm3,[ebp+0000084C]

exit_NoRecoil1:
jmp return_NoRecoil1

NoRecoilY:
_NoRecoilY:
jmp NoRecoil1
nop
nop
nop
return_NoRecoil1:

////////////////////////////////////////////////////////////////////////////////

NoRecoil2:
mov dword ptr [ebx+00000848],(float)0.0
original_NoRecoilX:
movq xmm0,[ebx+00000848]

exit_NoRecoil2:
jmp return_NoRecoil2

NoRecoilX:
_NoRecoilX:
jmp NoRecoil2
nop
nop
nop
return_NoRecoil2:

////////////////////////////////////////////////////////////////////////////////

[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(NoRecoil1)
dealloc(NoRecoil2)
_NoRecoilY:
_NoRecoilX:
movss xmm3,[ebp+0000084C]
//Alt: db F3 0F 10 9D 4C 08 00 00


Unlimited Breath:

Code:


[ENABLE]
/*code from here to '[DISABLE]' will be used to enable the cheat
Static Address of the opcode --> 0137DB0R
*/

alloc(BreathCode,2048)
label(returnBreath)
label(originalcode)
label(exit_Breath)

aobscan(UnlimitedBreath, 8B 83 D8 07 00 00)
label(_UnlimitedBreath)
registersymbol(_UnlimitedBreath)

BreathCode: //this is allocated memory, you have read,write,execute access
//place your code here
mov dword ptr [ebx+000007D8],(float)14287.94531

originalcode:

mov eax,[ebx+000007D8]

exit_Breath:
jmp returnBreath

UnlimitedBreath:
_UnlimitedBreath:
jmp BreathCode
nop
returnBreath:


 
 
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(BreathCode)
_UnlimitedBreath:
mov eax,[ebx+000007D8]
//Alt: db 8B 83 D8 07 00 00




If you have no clue what to do with these scripts:






Credits:
-- Me (Freakfrash) for the most work
-- DEADspy for supporting





Aucun commentaire:

Enregistrer un commentaire