OutdatedHeroes & Generals NoRecoil for latest patch + Tutorial

Posts 1–15 of 20 · Page 1 of 2
Heroes & Generals NoRecoil for latest patch + Tutorial
So, finally we found the new address! (with the help of lava )

How to use this:
1.Open your game and launch battle
2.Open cheat engine choose hng.exe
3.Click on add address manually
4.Choose byte
5.In the address type:
Code:
player.dll+1CFF23
6.Click okay! now you got the no recoil address on your cheat engine

How to enable it:
Change the value from:
Code:
117
To:
Code:
235
To disable it:
change it back to 117

I'll release an easier program for newbies who can't use cheat engine soon.
Edit:

If you don't want to use cheat engine just use this external C# Program which does everything in 1 click for u, download it at the end of the post.

Thanks everyone for reading this and have fun with the new no recoil!

https://www.virustotal.com/en/file/a...is/1429746309/
http://virusscan.jotti.org/en/scanre...cb926bdf0b2add
HnG NoRecoil by SnRolls_mpgh.net.rar8 KB · 517 downloads 1/57 malicious
c++ code:

Code:
#include <windows.h>
#include <stdio.h>
#include <tlhelp32.h>
#include <tchar.h>
#include <string>

HWND hwnd;
DWORD pid;
HANDLE handle;

DWORD dw_no_recoil;
DWORD playerDLL;

BYTE b_no_recoil[2] = {0xEB, 0x7C};

DWORD getPlayer(DWORD pid) {
	HANDLE hModuleSnap = CreateToolhelp32Snapshot(TH32CS_SNAPMODULE, pid); 
	MODULEENTRY32 me32;
	me32.dwSize = sizeof(MODULEENTRY32);

	for (;;) {
		Module32Next(hModuleSnap, &me32);

		std::string compare = me32.szModule;
		printf("\n%s", me32.szModule);

		if (compare == "player.dll") {
			printf(" <<-- found you ^^\n");

			break;
		}
	}

    return (DWORD)me32.modBaseAddr;
}


int main() {
	hwnd = FindWindowA(0, "H&G");
	GetWindowThreadProcessId(hwnd, &pid);
	handle = OpenProcess(PROCESS_VM_OPERATION | PROCESS_VM_READ | PROCESS_VM_WRITE, 0, pid);

	if (handle) {
		playerDLL = getPlayer(pid);

		WriteProcessMemory(handle, (LPVOID)(playerDLL + 0x1CFF23), & b_no_recoil, 2, 0);

		printf("there you go .. it should work now.\n");
	} else printf("you downt have enough power to control this pc ^^\n");

	printf("press enter 2x times to exit ...");
	getchar();
	
	return 0;
}
It's like noone is shooting at all anymore...

- - - Updated - - -

+ Any other value i've checked just crashes the game...

But I'm currently chasing some other interesting call that might give us a nice aim-help
look what player.dll+1C00A9 does when you change the code to mov BYTE PTR [esi + DF], 8. ^^
Quote Originally Posted by lala View Post
look what player.dll+1C00A9 does when you change the code to mov BYTE PTR [esi + DF], 8. ^^
Nothing for me, what does it do for u?
Quote Originally Posted by SnRolls View Post
Nothing for me, what does it do for u?
(remove dot after "m")m.ediafire.com/view/w8bctiyg5gmrcaf/IMG_20042015_070018.png
changeing the 1-st person view to 3-rd person view
Quote Originally Posted by lala View Post
(remove dot after "m")m.ediafire.com/view/w8bctiyg5gmrcaf/IMG_20042015_070018.png
changeing the 1-st person view to 3-rd person view
ahmm thanks for sharing! for some weird reason it does nothing for me... maybe ive did something wrong.
btw the cheats you are using are those yours or some other forums VIP hacks?
Quote Originally Posted by SnRolls View Post
ahmm thanks for sharing! for some weird reason it does nothing for me... maybe ive did something wrong.
btw the cheats you are using are those yours or some other forums VIP hacks?
its lavas public one .
its on this forum too: mpgh.net/forum/showthread.php?t=836580&page=2 thanks to lvous and Heisa .
Added an easier program for people who just want to activate the hack within 1 key.
You can also use lava's C++ program aswell. Whatever you wish to use.
Quote Originally Posted by SnRolls View Post
Added an easier program for people who just want to activate the hack within 1 key.
You can also use lava's C++ program aswell. Whatever you wish to use.
Thanks man! There wont be a update for long, So this would be useful.
BTW you need two Virus scans to the Zip folder so we can download it and get it approved by an MPGH Staff!!
Quote Originally Posted by TheGamerCheater View Post
Thanks man! There wont be a update for long, So this would be useful.
BTW you need two Virus scans to the Zip folder so we can download it and get it approved by an MPGH Staff!!
Okay thanks!, didnt know that.
attachment safe approved
c program didn't work for me but the cheat engine manual way worked.

btw: is it just me or is the rate of fire slower?
c++ code:

Code:
#include <windows.h>
#include <stdio.h>
#include <tlhelp32.h>
#include <tchar.h>
#include <string>

HWND hwnd;
DWORD pid;
HANDLE handle;

DWORD playerDLL;

BOOL bl_norecoil = FALSE;
BOOL bl_3rdview = FALSE;
BOOL bl_1stview_when_zoom = FALSE;

BOOL rmouse_down = FALSE;

DWORD getPlayer(DWORD pid) {
	HANDLE hModuleSnap = CreateToolhelp32Snapshot(TH32CS_SNAPMODULE, pid); 
	MODULEENTRY32 me32;
	me32.dwSize = sizeof(MODULEENTRY32);

	for (;;) {
		Module32Next(hModuleSnap, &me32);

		std::string compare = me32.szModule;
		printf("\n%s", me32.szModule);

		if (compare == "player.dll") {
			printf(" <<-- found you ^^\n");

			break;
		}
	}

    return (DWORD)me32.modBaseAddr;
}


int main() {
	hwnd = FindWindowA(0, "H&G");
	GetWindowThreadProcessId(hwnd, &pid);
	handle = OpenProcess(PROCESS_VM_OPERATION | PROCESS_VM_READ | PROCESS_VM_WRITE, 0, pid);

	if (handle) {
		playerDLL = getPlayer(pid);

		for (;; Sleep(10)) {
			if (GetAsyncKeyState(VK_NUMPAD5) & 1) {
				bl_norecoil = !bl_norecoil;

				if (bl_norecoil == TRUE) {
					WriteProcessMemory(handle, (LPVOID)(playerDLL + 0x1CFF23), &"\xEB\x7C", 2, 0);
					printf("there you go .. no recoil should work now.\n");
				} else {
					WriteProcessMemory(handle, (LPVOID)(playerDLL + 0x1CFF23), &"\x75\x7C", 2, 0);
					printf("no recoil disabled.\n");
				}
			} else if (GetAsyncKeyState(VK_NUMPAD4) & 1) {
				bl_3rdview = !bl_3rdview;

				if (bl_3rdview == TRUE) {
					WriteProcessMemory(handle, (LPVOID)(playerDLL + 0x1C00A9), &"\xC6\x86\xDF\x00\x00\x00\x08", 7, 0);
					printf("there you go .. 3-rd person look should work now.\n");
				} else {
					WriteProcessMemory(handle, (LPVOID)(playerDLL + 0x1C00A9), &"\xF6\x86\xDF\x00\x00\x00\x04", 7, 0);
					printf("3-rd person look disabled.\n");
				}
			} else if (GetAsyncKeyState(VK_NUMPAD6) & 1) {
				if (bl_3rdview == TRUE) {
					bl_1stview_when_zoom = !bl_1stview_when_zoom;

					if (bl_1stview_when_zoom == TRUE) {
						printf("there you go .. 1-rd person look when aim enabled.\n");
					} else {
						printf("1-rd person look when aim disabled.\n");
					}
				} else printf("enable 3-rd person look first.\n");
			}

			if (GetAsyncKeyState(VK_RBUTTON) & 0x8000) {
				if (bl_3rdview == TRUE && rmouse_down == FALSE) {
					rmouse_down = TRUE;

					WriteProcessMemory(handle, (LPVOID)(playerDLL + 0x1C00A9), &"\xF6\x86\xDF\x00\x00\x00\x04", 7, 0);
				}
			} else if (bl_3rdview == TRUE && rmouse_down == TRUE) {
				rmouse_down = FALSE;

				WriteProcessMemory(handle, (LPVOID)(playerDLL + 0x1C00A9), &"\xC6\x86\xDF\x00\x00\x00\x08", 7, 0);
			}
		}
	} else printf("you downt have enough power to control this pc ^^\n");

	printf("press enter 2x times to exit ...");
	getchar();
	
	return 0;
}
Posts 1–15 of 20 · Page 1 of 2
This thread is closed for replies.

Similar Threads

Tags for this Thread

None

Talk with us