Detected C++ Game Hacks/Memory Hacks

[J0nathan27]

If anyone could post some outdated/detected game hacks here that would be cool. I want to look at them and learn from them.

[Biesi]

There are coding sections for a bunch of games on mpgh.. you can find sources there

[InunoTaishou]

No Spread -- No Recoil For Combat Arms (I don't have the original Author saved, this is also in the .rar)

//===================
#include <Windows.h>
//===================

//================================================================
void* g_pOriginalGetRecoil = NULL;
void* g_pOriginalGetDeviation = NULL;
void** g_pGetRecoilVTableAddress = (void**)0x020A3ACC;  //adress
void** g_pGetDeviationVTableAddress = (void**)0x020A3AC8; //adress
//================================================================

//================================================================
void __declspec(naked) hkGetRecoil(void) //GetRecoil
{
	__asm
	{
		xor eax, eax
			mov[ecx + 0x164], eax
			mov[ecx + 0x16C], eax
			jmp dword ptr[g_pOriginalGetRecoil]
	}
}


void __declspec(naked) hkGetDeviation(void) //GetDeviation
{
	__asm
	{
		xor eax, eax
			mov[ecx + 0x140], eax
			mov[ecx + 0x13C], eax
			jmp dword ptr[g_pOriginalGetDeviation]
	}
}

unsigned long __stdcall HookThread(void* param) //Hooking
{
	unsigned long flOldProtection;
	if ((int)param == 1)				//Enable Hook
	{
		if (!g_pOriginalGetDeviation)
			g_pOriginalGetDeviation = *g_pGetDeviationVTableAddress;													//Backing up Original Functions
		if (!g_pOriginalGetRecoil)
			g_pOriginalGetRecoil = *g_pGetRecoilVTableAddress;

		if (VirtualProtect(g_pGetDeviationVTableAddress, 8, PAGE_READWRITE, &flOldProtection))							//Removing memory protection
		{
			*g_pGetDeviationVTableAddress = hkGetDeviation;																//Swapping VTable Pointers
			*g_pGetRecoilVTableAddress = hkGetRecoil;
			return VirtualProtect(g_pGetDeviationVTableAddress, 8, flOldProtection, &flOldProtection);						//Readding normal memory protection
		}
		else
		{
			return 0;
		}
	}
	else //Disable Hook
	{
		if (VirtualProtect(g_pGetDeviationVTableAddress, 8, PAGE_READWRITE, &flOldProtection))							//Removing memory protection
		{
			*g_pGetDeviationVTableAddress = g_pOriginalGetDeviation;													//Setting VTable pointers back to original ones
			*g_pGetRecoilVTableAddress = g_pOriginalGetRecoil;
			return VirtualProtect(g_pGetDeviationVTableAddress, 8, flOldProtection, &flOldProtection);						//Readding normal memory protection
		}
		else
		{
			return 0;
		}
	}
	return 1;
}


unsigned long __stdcall DllMain(HMODULE hModule, unsigned long ulReason, void* param)
{
	if (ulReason == DLL_PROCESS_ATTACH)
	{
		CloseHandle(CreateThread(NULL, 0, &HookThread, (void*)1, 0, NULL)); //Enable hook
	}
	else if (ulReason == DLL_PROCESS_DETACH)
	{
		CloseHandle(CreateThread(NULL, 0, &HookThread, NULL, 0, NULL)); //Disable hook
	}
	return 1;
}
//==================================================================================================================