OldSchoolHack

Register / Login English
deutschDeutsch
englishEnglish
New Posts Advanced Search

Norecoil/Nospread Source


icon Norecoil/Nospread Source #1

Join Date: May 2014

Posts: 411

User-Rating:

20 positive
11 negative
 Norecoil/spread - a poor man version because you have to disable it every time you die and re-enable after spawn. I guess some bits get squished somewhere.

I don't think that there is anything new here coding wise to learn for those who have contributed here with their remarkable reversing skills but this might come in handy to those who have no idea how to compile with notepad.exe.

Heres The One For Norecoil/Nospread
=====================================================
TEXT Code:
  1. [ENABLE]
  2. //code from here to '[DISABLE]' will be used to enable the cheat
  3. alloc(newmem24,2048) //2kb should be enough
  4. label(returnhere24)
  5. label(originalcode24)
  6. label(exit24)
  7.  
  8. newmem24: //this is allocated memory, you have read,write,execute access
  9. //place your code here
  10.  
  11. originalcode24:
  12. jmp PlanetSide2.exe+BC7B82
  13. push esi
  14. mov esi,[ebx+04]
  15.  
  16. exit24:
  17. jmp returnhere24
  18.  
  19. "PlanetSide2.exe"+BC7B46:
  20. jmp newmem24
  21. nop
  22. returnhere24:
  23.  
  24. alloc(newmem17,2048) //2kb should be enough
  25. label(returnhere17)
  26. label(originalcode17)
  27. label(exit17)
  28.  
  29. newmem17: //this is allocated memory, you have read,write,execute access
  30. //place your code here
  31.  
  32. originalcode17:
  33. mov [esi+000000D4],0
  34.  
  35. exit17:
  36. jmp returnhere17
  37.  
  38. "PlanetSide2.exe"+BC658A:
  39. jmp newmem17
  40. nop
  41. returnhere17:
  42.  
  43. alloc(newmem11,2048) //2kb should be enough
  44. label(returnhere11)
  45. label(originalcode11)
  46. label(exit11)
  47.  
  48. newmem11: //this is allocated memory, you have read,write,execute access
  49. //place your code here
  50.  
  51. originalcode11:
  52. movss xmm3,[esi+000000D4]
  53. xorps xmm3, xmm3
  54.  
  55. exit11:
  56. jmp returnhere11
  57.  
  58. "PlanetSide2.exe"+BC6533:
  59. jmp newmem11
  60. nop
  61. nop
  62. nop
  63. returnhere11:
  64.  
  65. alloc(newmem6,2048) //2kb should be enough
  66. label(returnhere6)
  67. label(originalcode6)
  68. label(exit6)
  69.  
  70. newmem6: //this is allocated memory, you have read,write,execute access
  71. //place your code here
  72. xorps xmm0, xmm0
  73.  
  74. originalcode6:
  75. movss [ecx+04],xmm0
  76.  
  77. exit6:
  78. jmp returnhere6
  79.  
  80. "PlanetSide2.exe"+16C7218:
  81. jmp newmem6
  82. returnhere6:
  83.  
  84. alloc(newmem2,2048) //2kb should be enough
  85. label(returnhere2)
  86. label(originalcode2)
  87. label(exit2)
  88.  
  89. newmem2: //this is allocated memory, you have read,write,execute access
  90. //place your code here
  91. xorps xmm1, xmm1
  92.  
  93. originalcode2:
  94. ucomiss xmm1,[esi+54]
  95. lahf 
  96.  
  97. exit2:
  98. jmp returnhere2
  99.  
  100. "PlanetSide2.exe"+1679954:
  101. jmp newmem2
  102. returnhere2:
  103.  
  104. alloc(newmem,2048) //2kb should be enough
  105. label(returnhere)
  106. label(originalcode)
  107. label(exit)
  108.  
  109. newmem: //this is allocated memory, you have read,write,execute access
  110. //place your code here
  111. xorps xmm0, xmm0
  112.  
  113. originalcode:
  114. ucomiss xmm0,[esi+08]
  115. lahf 
  116.  
  117. exit:
  118. jmp returnhere
  119.  
  120. "PlanetSide2.exe"+C71385:
  121. jmp newmem
  122. returnhere:
  123. --------------------------------------------------------------------
  124. [DISABLE]
  125. //code from here till the end of the code will be used to disable the cheat
  126. dealloc(newmem24)
  127. "PlanetSide2.exe"+BC7B46:
  128. jle PlanetSide2.exe+BC7B82
  129. push esi
  130. mov esi,[ebx+04]
  131. //Alt: db 7E 3A 56 8B 73 04
  132. dealloc(newmem17)
  133. "PlanetSide2.exe"+BC658A:
  134. mov [esi+000000D4],edx
  135. //Alt: db 89 96 D4 00 00 00
  136. dealloc(newmem11)
  137. "PlanetSide2.exe"+BC6533:
  138. movss xmm3,[esi+000000D4]
  139. //Alt: db F3 0F 10 9E D4 00 00 00
  140. dealloc(newmem6)
  141. "PlanetSide2.exe"+16C7218:
  142. movss [ecx+04],xmm0
  143. //Alt: db F3 0F 11 41 04
  144. dealloc(newmem2)
  145. "PlanetSide2.exe"+1679954:
  146. ucomiss xmm1,[esi+54]
  147. lahf 
  148. //Alt: db 0F 2E 4E 54 9F
  149. dealloc(newmem)
  150. "PlanetSide2.exe"+C71385:
  151. ucomiss xmm0,[esi+08]
  152. lahf 
  153. //Alt: db 0F 2E 46 08 9F
  154. ========================================================================
  155.  
  156. And the speedhack. Haven't tested it after spawning. Change the ESP to 
  157. whatever floating point value (in hex) - currently its set to 15. If 
  158. you set it too high the physics engine will go nuts and kill/crash you.
  159. ------------------------------------------------------------------------
  160. [ENABLE]
  161. //Speedhack
  162. //code from here to '[DISABLE]' will be used to enable the cheat
  163. alloc(newmem,2048) //2kb should be enough
  164. label(returnhere)
  165. label(originalcode)
  166. label(exit)
  167.  
  168. newmem: //this is allocated memory, you have read,write,execute access
  169. //place your code here
  170.  
  171. //Push xmm0
  172. sub esp, 16
  173. movdqu dqword [esp], xmm0
  174.  
  175. mov [esp], 41200000
  176.  
  177. //Pop xmm0
  178. movdqu xmm0, dqword [esp]
  179. add esp, 16
  180.  
  181. originalcode:
  182. movss [esi+000000C8],xmm0
  183.  
  184. exit:
  185. jmp returnhere
  186.  
  187. "PlanetSide2.exe"+BC8D86:
  188. jmp newmem
  189. nop
  190. nop
  191. nop
  192. returnhere:
  193. -----------------------------------------------------------------------------
  194. [DISABLE]
  195. //code from here till the end of the code will be used to disable the cheat
  196. dealloc(newmem)
  197. "PlanetSide2.exe"+BC8D86:
  198. movss [esi+000000C8],xmm0
  199. //Alt: db F3 0F 11 86 C8 00 00 00
==============================================================================
The base address for recoil/movement speed is at PlanetSide2.exe+2A661F0
and some other stuff (I think I saw coordinates but unsure and too
stupid to reverse it all).



Feel free to make a better sig. This one currently points to the
instructions dealing with recoil from where you can obtain the base.



Code:

\x57\x51\xD9\x1C\x24\x8D\x45\xEC\xF3\x0F\x5C\xCA\x
F3\x0F\x5C\xC3\x50\xF3\x0F\x11\x4D\xEC\xF3\x0F\x11
\x45\xF0\xE8\x00\x00\x00\x00\x8B\x4D\xF4\x8B\x55\x
F8\x89\x8E\x00\x00\x00\x00\x89\x96\x00\x00\x00\x00

__________________

AIMBOT????

https://i.chzbgr.com/maxW500/4551215616/hA0AA39D4/

I DONT SEE ANY AIMBOT

http://data.sinhvienit.net/2011/T05/img/SinhVienIT.NET---aimboto.gif

JUST SKILLS MY FRIEND!!!
Last edited by KN4CK3R (Sun 27. Jul 2014, 20:07)

Reason: no reason given
Fotic is offline