Blast Hack v1.2

[topblast]

Blast Hack v1.2
Credit: Topblast, Jeffrey(RagerZ)

[PHP]
#include <windows.h>
#include <defs.h>


//-------------------------------------------------------------------------
// Data declarations

extern char aShowperformanc[28]; // weak
extern char aWeaponsway1[13]; // weak
extern char aShowbreath1[13]; // weak
extern char aShowfps0[10]; // weak
extern char aShowperforma_0[28]; // weak
extern char aScreenglowenab[19]; // weak
extern char aWireframemodel[18]; // weak
extern char aModeldebug_dra[26]; // weak
extern char aWireframe0[12]; // weak
extern char aWindowed0[11]; // weak
extern char aFullbright0[13]; // weak
extern char aModeldebug_d_0[23]; // weak
extern char aSkelmodelstenc[19]; // weak
extern char aWeaponsway0[13]; // weak
extern char aShowbreath0[13]; // weak
extern char aCammaxposyoffs[28]; // weak
extern char aDuckdowncamoff[30]; // weak
extern char aCammaxposyof_0[30]; // weak
extern char aDuckdowncamo_0[29]; // weak
extern char aShowfirepath0[15]; // weak
extern char aShowfirepath1[15]; // weak
extern char aPerturbrotatio[31]; // weak
extern char aPerturbincreas[30]; // weak
extern char aPerturbdecreas[30]; // weak
extern char aPerturbwalkper[28]; // weak
extern char aPerturbrotat_0[32]; // weak
extern char aPerturbincre_0[30]; // weak
extern char aPerturbwalkp_0[28]; // weak
extern char aPerturbfiringi[36]; // weak
extern char aScreenglowen_0[19]; // weak
extern char aWireframemod_0[18]; // weak
extern char aModeldebug_d_1[26]; // weak
extern char aWireframe1[12]; // weak
extern char aFullbright1[13]; // weak
extern char aModeldebug_d_2[23]; // weak
extern char aSkelmodelste_0[19]; // weak
extern char aFogenable0[12]; // weak
extern char aPlayergravity8[18]; // weak
extern char aPlayergravit_0[19]; // weak
extern char aShowfps1[10]; // weak
extern char aBasemoveaccel4[28]; // weak
extern char aStartaccel4000[23]; // weak
extern char aMaxaccel4000_0[21]; // weak
extern char aAccelinc4000_0[21]; // weak
extern char aWalkvel4000_00[20]; // weak
extern char aFrunvel4000_00[20]; // weak
extern char aBrunvel4000_00[20]; // weak
extern char aSrunvel4000_00[20]; // weak
extern char aBasemoveaccel3[26]; // weak
extern char aStartaccel500_[22]; // weak
extern char aMaxaccel3000_0[21]; // weak
extern char aAccelinc6000_0[21]; // weak
extern char aWalkvel70_0000[18]; // weak
extern char aFrunvel285_000[19]; // weak
extern char aBrunvel285_000[19]; // weak
extern char aSrunvel285_000[19]; // weak
extern char aBasemoveaccel9[27]; // weak
extern char aStartaccel9000[24]; // weak
extern char aMaxaccel90000_[22]; // weak
extern char aAccelinc90000_[22]; // weak
extern char aWalkvel90000_0[21]; // weak
extern char aFrunvel90000_0[21]; // weak
extern char aBrunvel90000_0[21]; // weak
extern char aSrunvel90000_0[21]; // weak
extern char aJumpvel330_000[20]; // weak
extern char aJumpvel990_000[20]; // weak
extern char aJumpvel660_000[20]; // weak
extern char ModuleName[]; // idb
extern char aClientfx_fxd[]; // idb
extern char aCshell_dll[]; // idb
extern _UNKNOWN unk_100037B8; // weak
extern int dword_10004000; // weak
extern _UNKNOWN unk_10004344; // weak
extern char byte_1000445D; // weak
extern char byte_1000445E; // weak
extern char byte_1000445F; // weak
extern char byte_10004460; // weak

//-------------------------------------------------------------------------
// Function declarations

#define __thiscall __cdecl // Test compile in C mode

void __cdecl sub_10001000();
DWORD __stdcall loc_10001990(LPVOID); // idb
int __stdcall StartAddress(int a1);
BOOL __stdcall DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved);
int __thiscall sub_10001A84(void *this, char a2);
// _DWORD __thiscall __report_gsfailure(_DWORD ecx0, _BYTE _4); weak
int __cdecl sub_10001F47();
int (*__cdecl sub_1000200F())(void);
// int __cdecl _clean_type_info_names_internal(_DWORD); weak
// void __stdcall Sleep(DWORD dwMilliseconds);
// BOOL __stdcall DisableThreadLibraryCalls(HMODULE hLibModule);
// HMODULE __stdcall GetModuleHandleA(LPCSTR lpModuleName);
// HANDLE __stdcall CreateThread(LPSECURITY_ATTRIBUTES lpThreadAttributes, SIZE_T dwStackSize, LPTHREAD_START_ROUTINE lpStartAddress, LPVOID lpParameter, DWORD dwCreationFlags, LPDWORD lpThreadId);
// SHORT __stdcall GetAsyncKeyState(int vKey);


//----- (10001000) --------------------------------------------------------
void __cdecl sub_10001000()
{
while ( 1 )
{
if ( GetAsyncKeyState(101) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ShowPerformanceStatistics 1");
if ( GetAsyncKeyState(96) < 0 )
{
byte_1000445D = 0;
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WeaponSway 1");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ShowBreath 1");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ShowFps 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ShowPerformanceStatistics 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ScreenGlowEnable 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WireframeModels 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ModelDebug_DrawSkeleton 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WireFrame 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("Windowed 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("FullBright 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ModelDebug_DrawBoxes 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("SkelModelStencil 0");
}
if ( GetAsyncKeyState(98) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WeaponSway 0");
if ( GetAsyncKeyState(103) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ShowBreath 0");
if ( GetAsyncKeyState(38) < 0 )
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("CamMaxPosYOffset 200.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("DuckDownCamOffSet 1000.000000");
}
if ( GetAsyncKeyState(40) < 0 )
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("CamMaxPosYOffset -1000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("DuckDownCamOffSet -13.000000");
}
if ( GetAsyncKeyState(109) < 0 )
{
if ( byte_1000445E )
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ShowFirePath 0");
byte_1000445E = 0;
}
else
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ShowFirePath 1");
byte_1000445E = 1;
}
}
if ( GetAsyncKeyState(107) < 0 )
{
if ( byte_1000445F )
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PerturbRotationEffect 3.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PerturbIncreaseSpeed 3.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PerturbDecreaseSpeed 9.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PerturbWalkPercent 0.500000");
byte_1000445F = 0;
}
else
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PerturbRotationEffect 0.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PerturbIncreaseSpeed 0.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PerturbWalkPercent 0.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PerturbFiringIncreaseSpeed 0.000000");
byte_1000445F = 1;
}
}
if ( GetAsyncKeyState(104) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ScreenGlowEnable 1");
if ( GetAsyncKeyState(105) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WireframeModels 1");
if ( GetAsyncKeyState(102) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ModelDebug_DrawSkeleton 1");
if ( GetAsyncKeyState(100) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WireFrame 1");
if ( GetAsyncKeyState(99) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("FullBright 1");
if ( GetAsyncKeyState(97) < 0 )
{
if ( byte_10004460 )
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ModelDebug_DrawBoxes 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("SkelModelStencil 0");
byte_10004460 = 0;
}
else
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ModelDebug_DrawBoxes 1");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("SkelModelStencil 1");
byte_10004460 = 1;
}
}
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("FogEnable 0");
if ( GetAsyncKeyState(32) >= 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PlayerGravity -800");
else
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PlayerGravity 800");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ShowFps 1");
Sleep(0x32u);
if ( GetAsyncKeyState(16) >= 0 )
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("BaseMoveAccel 3000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("StartAccel 500.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("MaxAccel 3000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("AccelInc 6000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WalkVel 70.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("FRunVel 285.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("BRunVel 285.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("SRunVel 285.000000");
}
else
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("BaseMoveAccel 4+6000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("StartAccel 4000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("MaxAccel 4000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("AccelInc 4000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WalkVel 4000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("FRunVel 4000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("BRunVel 4000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("SRunVel 4000.000000");
}
if ( GetAsyncKeyState(88) < 0 )
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("BaseMoveAccel 90000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("StartAccel 90000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("MaxAccel 90000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("AccelInc 90000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WalkVel 90000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("FRunVel 90000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("BRunVel 90000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("SRunVel 90000.000000");
}
if ( GetAsyncKeyState(35) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("JumpVel 330.000000");
if ( GetAsyncKeyState(33) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("JumpVel 990.000000");
if ( GetAsyncKeyState(34) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("JumpVel 660.000000");
}
}
// 1000445D: using guessed type char byte_1000445D;
// 1000445E: using guessed type char byte_1000445E;
// 1000445F: using guessed type char byte_1000445F;
// 10004460: using guessed type char byte_10004460;

//----- (100019E0) --------------------------------------------------------
int __stdcall StartAddress(int a1)
{
while ( !GetModuleHandleA("d3d9.dll") || !GetModuleHandleA("ClientFX.fxd") || !GetModuleHandleA("CShell.dll") )
Sleep(0x1F4u);
if ( GetModuleHandleA("d3d9.dll") )
{
if ( GetModuleHandleA("ClientFX.fxd") )
GetModuleHandleA("CShell.dll");
}
return 0;
}

//----- (10001A40) --------------------------------------------------------
BOOL __stdcall DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
{
DisableThreadLibraryCalls(hinstDLL);
if ( fdwReason == 1 )
{
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)StartAddress, 0, 0, 0);
CreateThread(0, 0, loc_10001990, 0, 0, 0);
}
return 1;
}

//----- (10001A84) --------------------------------------------------------
int __thiscall sub_10001A84(void *this, char a2)
{
if ( this == (void *)dword_10004000 )
__asm { rep retn }
return __report_gsfailure(this, a2);
}
// 10001E41: using guessed type _DWORD __thiscall __report_gsfailure(_DWORD ecx0, _BYTE _4);
// 10004000: using guessed type int dword_10004000;

//----- (10001F47) --------------------------------------------------------
int __cdecl sub_10001F47()
{
return _clean_type_info_names_internal(&unk_10004344);
}
// 100022E2: using guessed type int __cdecl _clean_type_info_names_internal(_DWORD);

//----- (1000200F) --------------------------------------------------------
int (*__cdecl sub_1000200F())(void)
{
int (*result)(void); // eax@1
unsigned int v1; // edi@1

result = (int (*)(void))&unk_100037B8;
v1 = (unsigned int)&unk_100037B8;
if ( &unk_100037B8 < &unk_100037B8 )
{
do
{
result = *(int (**)(void))v1;
if ( *(_DWORD *)v1 )
result = (int (*)(void))result();
v1 += 4;
}
while ( v1 < (unsigned int)&unk_100037B8 );
}
return result;
}[/PHP]

[[MPGH]AVGN]

leeched.

i posted this last week

[topblast]

leeched.

i posted this last week

Can never be a leeched. and how could u of posted this :P

[Sydney]

leeched.

i posted this last week

Then show proof as a Link ?

[budman78]

mind if i take this post to another site? i think this could be used by more people. i will give proper credits to you and i will pm the link to the post to you so you can review it. the site is not a hack site its a site for coders to learn from each other. sorry if this post is not aloud. please don't bann me just looking to help others out.

[Flash]

Good job
Thanked

[topblast]

mind if i take this post to another site? i think this could be used by more people. i will give proper credits to you and i will pm the link to the post to you so you can review it. the site is not a hack site its a site for coders to learn from each other. sorry if this post is not aloud. please don't bann me just looking to help others out.

sure once credit is given and i can review

[Alessandro10]

ModelDebug_DrawBoxes Work ? ...

[Boomdocks]

ModelDebug_DrawBoxes Work ? ...

No, ModelDe.... does not work

[Mr.Magicman]

Why making it so god damn complicated?? There must be ways that are alot easier... why using adresses from the .dll itself instead of calling em the normal way?

Rating: 4 / 10

[_Fk127_]

Why making it so god damn complicated?? There must be ways that are alot easier... why using adresses from the .dll itself instead of calling em the normal way?

Rating: 4 / 10

Bacuz l00kz smrt
But good job!

[Mr.Magicman]

Bacuz l00kz smrt
But good job!

It doesnt. It looks like brainfuxks.

[Fabolous]

Good job. Although people would go crazy looking at the key #'s.

[topblast]

Good job. Although people would go crazy looking at the key #'s.

it is like this because this is not c++, it is just C

[seeplusplus]

No, ModelDe.... does not work

GTFO! THIS IS STEVE! ALSO KNOWN AS ULTAHACKER!