Results 1 to 15 of 15
  1. #1
    Kenshin13's Avatar
    Join Date
    May 2011
    Gender
    male
    Location
    Cloud 9
    Posts
    3,473
    Reputation
    564
    Thanks
    5,883
    My Mood
    Psychedelic

    [Source] Round Ender Code

    This is the code that is used to end the game in: TEKNOMW3 1.4.382 ONLY
    Thanks -InSaNe- for the origional hint which led me to find Hooch's code. So thanks Hooch for the Magic Number Pattern/Mask

    Code:
    #include <Windows.h>
    #include <iostream>
    
    //PATTERN INFO FOR MAGIC NUMBER
    #define MAGIC_NUMBER_PATTERN    "\xa1\x00\x00\x00\x00\x8d\x94\x24\x04\x08\x00\x00\x52\x56\x50\x68\x00\x00\x00\x00\xe8\x00\x00\x00\x00\x8b\x8c\x24\x18\x0c\x00\x00\x50\x51\xe8\x00\x00\x00\x00\x83\xc4\x18"
    #define MAGIC_NUMBER_MASK        "x????xxxxxxxxxxx????x????xxxxxxxxxx????xxx" // +1  
    
    //Definitions for PROCESSCOMMAND
    typedef int (__cdecl *ProcessCommandCode)(int *defArg, char *Command);
    ProcessCommandCode ProcessCommand = (ProcessCommandCode)0x00429920;
    
    //Required for FIND PATTERN
    bool bDataCompare( const BYTE* pData, const BYTE* bMask, const char* szMask ) 
    	{ 
    	for( ; *szMask; ++szMask, ++pData, ++bMask ) 
    		if( *szMask == 'x' && *pData != *bMask )  
    			return false; 
    	return ( *szMask ) == NULL; 
    	} 
    
    //General FIND PATTERN Function
    DWORD FindPattern( DWORD baseAddress, DWORD sizeOfModule, BYTE *bMask, char* szMask ) 
    	{ 
    	for( DWORD i=0; i < sizeOfModule; i++ ) 
    		if( bDataCompare( ( BYTE* )( baseAddress + i ), bMask, szMask) ) 
    			return ( DWORD )( baseAddress + i ); 
    	return NULL; 
    	} 
    
    //Make Sure Module is injected into the right process or do nothing.
    bool IsModuleReady()
    	{
    	if( GetModuleHandleA( "iw5mp.exe" ) != NULL )
    		return true;
    
    	return false;
    	}
    
    //FindMagicNumber
    DWORD WINAPI GetMagicNumberAddress()
    	{
    	while( !IsModuleReady()) Sleep(50);
    	DWORD *MagicNumber = (DWORD*)*(DWORD*)(FindPattern((DWORD)GetModuleHandleA("iw5mp.exe"), 0xFFFFFFFF, (BYTE*)MAGIC_NUMBER_PATTERN, MAGIC_NUMBER_MASK) + 1);
    	return *MagicNumber;
    
    	}
    
    //RoundEnder Activates on END Button
    DWORD WINAPI EndRound(LPVOID threadArgs)
    	{
    	char buffer[32];
    	while(1)
    		{
    		if(GetAsyncKeyState(VK_END))
    			{
    			sprintf(buffer, "mr %d -1 endround;", (DWORD)GetMagicNumberAddress());
    			ProcessCommand(0, buffer);
    			Sleep(200);
    			}
    		}
    	return 0;
    	}
    
    //Main() Function
    BOOL APIENTRY DllMain(HANDLE hDllHandle, DWORD dwReason, LPVOID lpreserved)
    	{
    	DWORD threadID;
    	switch(dwReason)
    		{
    	case DLL_PROCESS_ATTACH:
    		CreateThread(NULL, 0, EndRound, NULL, 0, &threadID); //Create Round End Thread.
    	case DLL_PROCESS_DETACH:
    		break;
    		}
    	return true;
    	}
    Last edited by Kenshin13; 09-20-2012 at 09:00 PM.

  2. #2
    noname65's Avatar
    Join Date
    Sep 2012
    Gender
    male
    Location
    Hell
    Posts
    193
    Reputation
    15
    Thanks
    20
    My Mood
    Devilish
    Quote Originally Posted by Kenshin13 View Post
    This is the code that is used to end the game in: TEKNOMW3 1.4.382 ONLY
    Thanks -InSaNe- for the origional hint CodMaster for the Magic Number Pattern/Mask

    Code:
    #include <Windows.h>
    #include <iostream>
    
    //PATTERN INFO FOR MAGIC NUMBER
    #define MAGIC_NUMBER_PATTERN    "\xa1\x00\x00\x00\x00\x8d\x94\x24\x04\x08\x00\x00\x52\x56\x50\x68\x00\x00\x00\x00\xe8\x00\x00\x00\x00\x8b\x8c\x24\x18\x0c\x00\x00\x50\x51\xe8\x00\x00\x00\x00\x83\xc4\x18"
    #define MAGIC_NUMBER_MASK        "x????xxxxxxxxxxx????x????xxxxxxxxxx????xxx" // +1  
    
    //Definitions for PROCESSCOMMAND
    typedef int (__cdecl *ProcessCommandCode)(int *defArg, char *Command);
    ProcessCommandCode ProcessCommand = (ProcessCommandCode)0x00429920;
    
    //Required for FIND PATTERN
    bool bDataCompare( const BYTE* pData, const BYTE* bMask, const char* szMask ) 
    	{ 
    	for( ; *szMask; ++szMask, ++pData, ++bMask ) 
    		if( *szMask == 'x' && *pData != *bMask )  
    			return false; 
    	return ( *szMask ) == NULL; 
    	} 
    
    //General FIND PATTERN Function
    DWORD FindPattern( DWORD baseAddress, DWORD sizeOfModule, BYTE *bMask, char* szMask ) 
    	{ 
    	for( DWORD i=0; i < sizeOfModule; i++ ) 
    		if( bDataCompare( ( BYTE* )( baseAddress + i ), bMask, szMask) ) 
    			return ( DWORD )( baseAddress + i ); 
    	return NULL; 
    	} 
    
    //Make Sure Module is injected into the right process or do nothing.
    bool IsModuleReady()
    	{
    	if( GetModuleHandleA( "iw5mp.exe" ) != NULL )
    		return true;
    
    	return false;
    	}
    
    //FindMagicNumber
    DWORD WINAPI GetMagicNumberAddress()
    	{
    	while( !IsModuleReady()) Sleep(50);
    	DWORD *MagicNumber = (DWORD*)*(DWORD*)(FindPattern((DWORD)GetModuleHandleA("iw5mp.exe"), 0xFFFFFFFF, (BYTE*)MAGIC_NUMBER_PATTERN, MAGIC_NUMBER_MASK) + 1);
    	return *MagicNumber;
    
    	}
    
    //RoundEnder Activates on END Button
    DWORD WINAPI EndRound(LPVOID threadArgs)
    	{
    	char buffer[32];
    	while(1)
    		{
    		if(GetAsyncKeyState(VK_END))
    			{
    			sprintf(buffer, "mr %d -1 endround;", (DWORD)GetMagicNumberAddress());
    			ProcessCommand(0, buffer);
    			Sleep(200);
    			}
    		}
    	return 0;
    	}
    
    //Main() Function
    BOOL APIENTRY DllMain(HANDLE hDllHandle, DWORD dwReason, LPVOID lpreserved)
    	{
    	DWORD threadID;
    	switch(dwReason)
    		{
    	case DLL_PROCESS_ATTACH:
    		CreateThread(NULL, 0, EndRound, NULL, 0, &threadID); //Create Round End Thread.
    	case DLL_PROCESS_DETACH:
    		break;
    		}
    	return true;
    	}
    It would be Helpful if you compile that avoid the name hider code for us because i do not know how to do.

  3. #3
    noname65's Avatar
    Join Date
    Sep 2012
    Gender
    male
    Location
    Hell
    Posts
    193
    Reputation
    15
    Thanks
    20
    My Mood
    Devilish
    attach file with MPGH, then will work.

  4. #4
    barata55's Avatar
    Join Date
    Sep 2010
    Gender
    male
    Posts
    120
    Reputation
    12
    Thanks
    2,907
    My Mood
    Lonely
    Quote Originally Posted by Kenshin13 View Post
    This is the code that is used to end the game in: TEKNOMW3 1.4.382 ONLY
    Thanks -InSaNe- for the origional hint CodMaster for the Magic Number Pattern/Mask

    Code:
    #include <Windows.h>
    #include <iostream>
    
    //PATTERN INFO FOR MAGIC NUMBER
    #define MAGIC_NUMBER_PATTERN    "\xa1\x00\x00\x00\x00\x8d\x94\x24\x04\x08\x00\x00\x52\x56\x50\x68\x00\x00\x00\x00\xe8\x00\x00\x00\x00\x8b\x8c\x24\x18\x0c\x00\x00\x50\x51\xe8\x00\x00\x00\x00\x83\xc4\x18"
    #define MAGIC_NUMBER_MASK        "x????xxxxxxxxxxx????x????xxxxxxxxxx????xxx" // +1  
    
    //Definitions for PROCESSCOMMAND
    typedef int (__cdecl *ProcessCommandCode)(int *defArg, char *Command);
    ProcessCommandCode ProcessCommand = (ProcessCommandCode)0x00429920;
    
    //Required for FIND PATTERN
    bool bDataCompare( const BYTE* pData, const BYTE* bMask, const char* szMask ) 
    	{ 
    	for( ; *szMask; ++szMask, ++pData, ++bMask ) 
    		if( *szMask == 'x' && *pData != *bMask )  
    			return false; 
    	return ( *szMask ) == NULL; 
    	} 
    
    //General FIND PATTERN Function
    DWORD FindPattern( DWORD baseAddress, DWORD sizeOfModule, BYTE *bMask, char* szMask ) 
    	{ 
    	for( DWORD i=0; i < sizeOfModule; i++ ) 
    		if( bDataCompare( ( BYTE* )( baseAddress + i ), bMask, szMask) ) 
    			return ( DWORD )( baseAddress + i ); 
    	return NULL; 
    	} 
    
    //Make Sure Module is injected into the right process or do nothing.
    bool IsModuleReady()
    	{
    	if( GetModuleHandleA( "iw5mp.exe" ) != NULL )
    		return true;
    
    	return false;
    	}
    
    //FindMagicNumber
    DWORD WINAPI GetMagicNumberAddress()
    	{
    	while( !IsModuleReady()) Sleep(50);
    	DWORD *MagicNumber = (DWORD*)*(DWORD*)(FindPattern((DWORD)GetModuleHandleA("iw5mp.exe"), 0xFFFFFFFF, (BYTE*)MAGIC_NUMBER_PATTERN, MAGIC_NUMBER_MASK) + 1);
    	return *MagicNumber;
    
    	}
    
    //RoundEnder Activates on END Button
    DWORD WINAPI EndRound(LPVOID threadArgs)
    	{
    	char buffer[32];
    	while(1)
    		{
    		if(GetAsyncKeyState(VK_END))
    			{
    			sprintf(buffer, "mr %d -1 endround;", (DWORD)GetMagicNumberAddress());
    			ProcessCommand(0, buffer);
    			Sleep(200);
    			}
    		}
    	return 0;
    	}
    
    //Main() Function
    BOOL APIENTRY DllMain(HANDLE hDllHandle, DWORD dwReason, LPVOID lpreserved)
    	{
    	DWORD threadID;
    	switch(dwReason)
    		{
    	case DLL_PROCESS_ATTACH:
    		CreateThread(NULL, 0, EndRound, NULL, 0, &threadID); //Create Round End Thread.
    	case DLL_PROCESS_DETACH:
    		break;
    		}
    	return true;
    	}
    This code is by Hooch, not Insane or CodMaster, please correct the credits.

    Thanks Barata...

  5. #5
    dirt31996's Avatar
    Join Date
    Aug 2012
    Gender
    male
    Posts
    12
    Reputation
    10
    Thanks
    1
    Is this a aimbot?

  6. #6
    Instrumental's Avatar
    Join Date
    Jul 2012
    Gender
    male
    Location
    Global
    Posts
    1,220
    Reputation
    59
    Thanks
    705
    My Mood
    Cheerful
    yes Hooch is the creator of the following code.
    Quote Originally Posted by dirt31996 View Post
    Is this a aimbot?
    no its end round.
    Last edited by Instrumental; 09-21-2012 at 01:59 AM.

  7. #7
    Kenshin13's Avatar
    Join Date
    May 2011
    Gender
    male
    Location
    Cloud 9
    Posts
    3,473
    Reputation
    564
    Thanks
    5,883
    My Mood
    Psychedelic
    Yea guys I know Hooch was the main one for this. I just decided to post the source because his wasn't working. Plus it could help some people out. I mistook him for CodMaster and was too lazy to research for it. Thanks @barata55 for doing my homework for me
    Oh, here's the DLL that I couldn't upload:

    VirusTotal
    Jotti's Virus Scan
    <b>Downloadable Files</b> Downloadable Files
    Last edited by Kenshin13; 09-22-2012 at 12:37 AM.

  8. The Following 4 Users Say Thank You to Kenshin13 For This Useful Post:

    davidfc (09-26-2012),nagendhrabanoth (09-22-2012),tintapatron (02-11-2014),tret (09-23-2012)

  9. #8
          ( ° ͜ʖ͡°)╭∩╮
    Former Staff
    MarkHC's Avatar
    Join Date
    Nov 2011
    Gender
    male
    Location
    127.0.0.1
    Posts
    2,751
    Reputation
    66
    Thanks
    14,311
    My Mood
    Angelic
    /File approved
    Use at your own risk


    CoD Minion from 09/19/2012 to 01/10/2013

  10. #9
    tret's Avatar
    Join Date
    Sep 2012
    Gender
    male
    Posts
    1
    Reputation
    10
    Thanks
    0
    WHICH BUTTON SHOULD I PRESS TO END THE ROUND??\

  11. #10
          ( ° ͜ʖ͡°)╭∩╮
    Former Staff
    MarkHC's Avatar
    Join Date
    Nov 2011
    Gender
    male
    Location
    127.0.0.1
    Posts
    2,751
    Reputation
    66
    Thanks
    14,311
    My Mood
    Angelic
    Quote Originally Posted by tret View Post
    WHICH BUTTON SHOULD I PRESS TO END THE ROUND??\
    END.. I guess


    CoD Minion from 09/19/2012 to 01/10/2013

  12. #11
    Kenshin13's Avatar
    Join Date
    May 2011
    Gender
    male
    Location
    Cloud 9
    Posts
    3,473
    Reputation
    564
    Thanks
    5,883
    My Mood
    Psychedelic
    Quote Originally Posted by tret View Post
    WHICH BUTTON SHOULD I PRESS TO END THE ROUND??\
    Yea you press the end button :P simple enough right?

  13. #12
    xxcrusherxx's Avatar
    Join Date
    Jun 2012
    Gender
    male
    Posts
    35
    Reputation
    10
    Thanks
    175
    My Mood
    Amused
    I love this one lol thanks

  14. #13
    Kenshin13's Avatar
    Join Date
    May 2011
    Gender
    male
    Location
    Cloud 9
    Posts
    3,473
    Reputation
    564
    Thanks
    5,883
    My Mood
    Psychedelic
    Yea, used it in my server crasher Detour style.

  15. #14
          ( ° ͜ʖ͡°)╭∩╮
    Former Staff
    MarkHC's Avatar
    Join Date
    Nov 2011
    Gender
    male
    Location
    127.0.0.1
    Posts
    2,751
    Reputation
    66
    Thanks
    14,311
    My Mood
    Angelic
    Quote Originally Posted by Kenshin13 View Post
    Yea, used it in my server crasher Detour style.
    You know you actually doesn't need a detour for this right?


    CoD Minion from 09/19/2012 to 01/10/2013

  16. #15
    Kenshin13's Avatar
    Join Date
    May 2011
    Gender
    male
    Location
    Cloud 9
    Posts
    3,473
    Reputation
    564
    Thanks
    5,883
    My Mood
    Psychedelic
    Quote Originally Posted by -InSaNe- View Post
    You know you actually doesn't need a detour for this right?
    LoL bro ik!! I just wanted to test this out.

Similar Threads

  1. [Solved] Is there way way of getting round "key code in use"?
    By ophelimity in forum Call of Duty Modern Warfare Help
    Replies: 5
    Last Post: 07-27-2011, 09:23 PM
  2. Replies: 12
    Last Post: 05-29-2010, 06:50 AM
  3. [Release] ****** DLL Source Code
    By OneWhoSighs in forum WarRock - International Hacks
    Replies: 20
    Last Post: 10-25-2007, 08:41 AM
  4. keylogger source code
    By obsedianpk in forum WarRock - International Hacks
    Replies: 8
    Last Post: 10-24-2007, 03:31 PM
  5. HALO 2 (XBOX) Source Code
    By mirelesmichael in forum General Game Hacking
    Replies: 12
    Last Post: 09-23-2006, 05:35 AM