hng classic norecoil + source code for 108930 Xylander
1 - open game or cheat as admin, order does not matter
2 - in console you can see what to select
virus scans:
https://virusscan.jotti.org/en-US/fi...job/4vxe9ldwav
https://www.metascan-online.com/#!/r...8193/extracted
2 - in console you can see what to select
Code:
; +-----------------------------------------------------------------+ ; | hereos and generals classic no recoil | ; | started on 9.8.2015(m.d.y) by lava | ; | updated on 9.22.2015(m.d.y) to work with 108930 Xylander | ; | if you want to donate to lava: | ; | BTC: 19X7KKkMZsu4dLC3wd93N3UHiDJdomb6Vd | ; +-----------------------------------------------------------------+ .386 .model flat, stdcall option casemap :none system proto c :dword include windows.inc include user32.inc include kernel32.inc include masm32.inc includelib msvcrt.lib includeLib user32.lib includeLib kernel32.lib includelib masm32.lib .data hellomsg db "heroes and generals no recoil toggler coded in asm by: lava", 0dh, 0ah, "1 - no recoil : OFF", 0dh, 0ah, "enter - exit", 0dh, 0ah, "choice# ", 0 ; 82 bytes to edit off or on choice db ? cmd1 db "CLS", 0 cmd2 db "PAUSE", 0 me32 MODULEENTRY32 <> cmodule32first db "Module32First", 0 ckernel32_dll db "kernel32.dll", 0 cplayer_dll db "player.dll", 0 dw_hng dd ? dw_player dd ? snapshot dd ? pid dd ? dw_var dd ? hwndname db "H&G", 0 waitingmsg db "waiting for H&G...", 0dh, 0ah, 0 hwnd HWND ? h_hng HANDLE ? bytes_to_write db 01h, 00h failmsg db "you dont have enough privileges to edit memory", 0dh, 0ah, 0 ; norecoil variables bo_norecoil db 0 dw_write_norecoil dd ? .code start: push offset waitingmsg call StdOut findwindow_loop: push 100 call Sleep push offset hwndname push 0 call FindWindow test eax,eax je findwindow_loop mov [hwnd], eax push offset pid push eax call GetWindowThreadProcessId push pid push 0 push [8h + 10h + 20h] ; PROCESS_VM_OPERATION + PROCESS_VM_READ + PROCESS_VM_WRITE call OpenProcess test eax, eax je end_failed mov [h_hng], eax call get_hng mov [dw_hng], eax ; getting player.dll base addr mov dw_var, eax add dw_var, 94B04h push 0 push 4 push offset dw_player push dw_var push h_hng call ReadProcessMemory mov eax, dw_player mov dw_write_norecoil, eax add dw_write_norecoil, [1E90A4h + 6] mov dw_var, eax add dw_var, [36466Dh + 3] push 0 push 1 push offset [bytes_to_write] push dw_var push h_hng call WriteProcessMemory begin: push offset cmd1 call system call print_menu push 1 push offset choice call StdIn cmp [choice], 31h je toggle_norecoil jmp end_proc print_menu: push offset hellomsg call StdOut ret toggle_norecoil: call get_2_more_inputs cmp [bo_norecoil], 0 je enable_norecoil mov [bo_norecoil], 0 mov [hellomsg +82], 46h mov [hellomsg +83], 46h push 0 push 1 push offset [bytes_to_write +1] push dw_write_norecoil push h_hng call WriteProcessMemory jmp begin enable_norecoil: mov [bo_norecoil], 1 mov [hellomsg +82], 4Eh mov [hellomsg +83], 20h push 0 push 1 push offset bytes_to_write push dw_write_norecoil push h_hng call WriteProcessMemory jmp begin get_2_more_inputs: push 1 push offset choice call StdIn push 1 push offset choice call StdIn ret get_hng: push pid push 8 ; TH32CS_SNAPMODULE call CreateToolhelp32Snapshot mov snapshot, eax mov ecx, SIZEOF me32 mov me32.dwSize, ecx push offset ckernel32_dll call GetModuleHandle push offset cmodule32first push eax call GetProcAddress push offset me32 push snapshot call eax mov eax, me32.modBaseAddr ret end_failed: push offset failmsg call StdOut push offset cmd2 call system end_proc: push 0 call ExitProcess end start
https://virusscan.jotti.org/en-US/fi...job/4vxe9ldwav
https://www.metascan-online.com/#!/r...8193/extracted
Originally Posted by EX0800_
. I made my own memory writer, after locate these opcodes:
, not banned
