Sourse

see man
#include<windows.h>



#define WeaponMgr 0xA0F338 // Weapon Pointer , Outdated
#define NoReload 0x2420 // Our No Reload function offset



DWORD WINAPI Hacks(LPVOID)
{
bool reload = false; // Make it true; if you want it to be auto on

while(1)
{
DWORD CShell = (DWORD)GetModuleHandleA("CShell.dll");
DWORD pWeaponMgr = *(DWORD*)(CShell + WeaponMgr);



if(reload)
{
if (pWeaponMgr)
{
for(int i=0; i<445; i++) // Weapon Loop. 445 = the number of the weapons
{
if((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr))+(4*i)) ) != NULL)
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoReload) = 100; // 100 is the value for no reload
}
}
}

Sleep(100);
}
}

bool Ready2Hook()
{
if(GetModuleHandleA("CShell.dll") != NULL
&& GetModuleHandleA("ClientFx.fxd") != NULL)
return 1;
return 0;
}

DWORD WINAPI Wait(LPVOID)
{
while(!Ready2Hook()) Sleep(200);
CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)Hacks, NULL, NULL, NULL);
return 0;
}

BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls(hDll);

if ( dwReason == DLL_PROCESS_ATTACH )
{
//================================== OPTIONAL =========================================\\
MessageBoxA(0, "Message Test","Message Title", 0);
system("start www.mpgh.net")
\\================================================ ====================================//
1>------ Build started: Project: 1, Configuration: Release Win32 ------
1> 1.cpp
1>1.cpp(77): warning C4010: single-line comment contains line-continuation character
1>1.cpp(79): error C2017: illegal escape sequence
1>1.cpp(79): error C2059: syntax error : '=='
1>1.cpp(81): error C2143: syntax error : missing ';' before '{'
1>1.cpp(87): fatal error C1075: end of file found before the left brace '{' at '1.cpp(75)' was matched
========== Build: 0 succeeded, 1 failed, 0 up-to-date, 0 skipped ==========
and this
ReloadAnimRatio - Weapon Reload (No Reload)
ChangeWeaponAnimRatio - Weapon change delay (No weapon change delay)
AmmoDamage - Weapon Damage (One hit kill)
LowerAnimRate - Weapon Recoil (Less Recoil not full No Recoil)
CharacterHiddenAlpha - See Ghost
CharacterHiddenWalkAlpha - See Ghost
CharacterHiddenRunAlpha - See Ghost
MovementHiddenRate - See Ghost
C4PlantTime - Obviously C4 Plant time
C4DefuseTime - Obviously C4 Defuse time
MaxCanDefuseDistance - Distance that you can defuse the bomb
Range -Weapon Range
ShotsPerAmmo - Shotgun Spread
EdgeShotEnabled - Shoot Through Wall
WallShotEnabled - Shoot Through Wall
PerfectWallShotEnabled - Shoot Through Wall

More coming soon ...
1>------ Build started: Project: 1, Configuration: Release Win32 ------
1> 1.cpp
1>1.cpp(20): error C2143: syntax error : missing ';' before '-'
1>1.cpp(20): error C4430: missing type specifier - int assumed. Note: C++ does not support default-int
1>1.cpp(39): error C2143: syntax error : missing ';' before '{'
1>1.cpp(39): error C2447: '{' : missing function header (old-style formal list?)
========== Build: 0 succeeded, 1 failed, 0 up-to-date, 0 skipped ==========
you see?
/* First define No Reload's Offset & Weapon Pointer */

#define WeaponPointer 0x000000 (You have to find the Pointer)
#define NoReload 0x0000 (You have to find the Offset)

/*If you want to make your hack Auto On put this before it */

bool noreload = true; // Dont make it the same name with the defined one.

/* Then add these */

DWORD CShell = (DWORD)GetModuleHandleA("CShell.dll"); // When CShell word will be used , it will understand it is CShell.dll
DWORD pWeaponMgr = *(DWORD*)(CShell + WeaponPointer); // Wehn pWeaponMgr word will be used , it will understand that it is CShell with Weapon Pointer

/* Then add this */

if(noreload)
{
if (pWeaponMgr) // Look above if you dont remember what it is ;p
{
for(int i=0; i<445; i++) // Weapon Loop. 445 = the number of the weapons
{
if((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr))+(4*i)) ) != NULL)
*(float*)((*(DWORD*)((*(DWORD*)(CShell+WeaponMgr)) +(4*i))) + NoReload) = 100; // 100 is the value for no reload
}
}
}

/* You are done. Add this to your base or you can simply make it on your own way */
1>------ Build started: Project: 1, Configuration: Release Win32 ------
1> 1.cpp
1>1.cpp(32): error C2065: 'You' : undeclared identifier
1>1.cpp(32): error C2146: syntax error : missing ')' before identifier 'have'
1>1.cpp(32): warning C4353: nonstandard extension used: constant 0 as function expression. Use '__noop' function intrinsic instead
1>1.cpp(32): error C2059: syntax error : ')'
1>1.cpp(36): error C2059: syntax error : 'if'
1>1.cpp(37): error C2143: syntax error : missing ';' before '{'
1>1.cpp(37): error C2447: '{' : missing function header (old-style formal list?)
========== Build: 0 succeeded, 1 failed, 0 up-to-date, 0 skipped ==========

/* First define No Weapon Change Delay's Offset & Weapon Pointer */

#define WeaponPointer 0x000000 (You have to find the Pointer)
#define WeaponChangeDelay 0x0000 (You have to find the Offset)

/*If you want to make your hack Auto On put this before it */

bool nochange = true; // Dont make it the same name with the defined one.

/* Then add these */

DWORD CShell = (DWORD)GetModuleHandleA("CShell.dll"); // When CShell word will be used , it will understand it is CShell.dll
DWORD pWeaponMgr = *(DWORD*)(CShell + WeaponPointer); // Wehn pWeaponMgr word will be used , it will understand that it is CShell with Weapon Pointer

/* Then add this */

if(nochange)
{
if (pWeaponMgr) // You already know what this is
{
for(int i=0; i<445; i++) // You already know what this is
{
if((*(DWORD*)((*(DWORD*)(CShell+pWeaponMgr))+(4*i) )) != NULL)
*(float*)((*(DWORD*)((*(DWORD*)(CShell+pWeaponMgr) )+(4*i))) + WeaponChangeDelay) = 100; // You already know what this is
}
}
}

/* You are done. Add this to your base or you can simply make it on your own way */
1>------ Build started: Project: 1, Configuration: Release Win32 ------
1> 1.cpp
1>1.cpp(31): error C2065: 'You' : undeclared identifier
1>1.cpp(31): error C2146: syntax error : missing ')' before identifier 'have'
1>1.cpp(31): warning C4353: nonstandard extension used: constant 0 as function expression. Use '__noop' function intrinsic instead
1>1.cpp(31): error C2059: syntax error : ')'
1>1.cpp(35): error C2059: syntax error : 'if'
1>1.cpp(36): error C2143: syntax error : missing ';' before '{'
1>1.cpp(36): error C2447: '{' : missing function header (old-style formal list?)
========== Build: 0 succeeded, 1 failed, 0 up-to-date, 0 skipped ==========
#define AmmoDamage 0xAAC
if (Variaveis->Crash_Room)
{
for (int Loop = 0; Loop <= 25; Loop++)
{
*(float*)(Weapon + AmmoDamage + 4 * Loop) = 9999.9f;
}
}
1>------ Build started: Project: 1, Configuration: Release Win32 ------
1> 1.cpp
1>1.cpp(21): error C2059: syntax error : 'if'
1>1.cpp(22): error C2143: syntax error : missing ';' before '{'
1>1.cpp(22): error C2447: '{' : missing function header (old-style formal list?)
========== Build: 0 succeeded, 1 failed, 0 up-to-date, 0 skipped ==========
#include <windows.h>
#include <math.h>
#include <STDIO.h>
#include <d3dx9.h>
#include <tchar.h>
#pragma comment (lib, "d3d9.lib")
#pragma comment(lib, "d3dx9.lib")
#include <cstdio>
#include <atlstr.h>

void MessageBox(DWORD AAA,LPCSTR lpText)
{
CString str = "";
str.Format("%x", AAA);
MessageBoxA(NULL,str,lpText,0);
}

DWORD org_scp = 0,JMPDZ=0;
__declspec(naked) DWORD __stdcall pDrawIndexedPrimitive(LPDIRECT3DDEVICE9 pDevice, D3DPRIMITIVETYPE Type, INT BaseVertexIndex, UINT MinIndex,UINT NumVertices, UINT StartIndex, UINT PrimitiveCount)
{

__asm {

MOV EDI,EDI
PUSH EBP
MOV EBP,ESP
jmp JMPDZ
}
}
//DrawIndexedPrimitive
HRESULT _stdcall my_DrawIndexedPrimitive(LPDIRECT3DDEVICE9 pDevice, D3DPRIMITIVETYPE Type, INT BaseVertexIndex, UINT MinIndex,UINT NumVertices, UINT StartIndex, UINT PrimitiveCount)
{

UINT iOffsetInBytes,iStride;
IDirect3DVertexBuffer9* pStreamData = NULL;

if(pDevice->GetStreamSource(0,&pStreamData,&iOffsetInBytes,&i Stride)== D3D_OK)
pStreamData->Release();
if (iStride == 40 || iStride == 44)
{
DWORD dwOldZEnable ;
pDevice->GetRenderState(D3DRS_ZENABLE, &dwOldZEnable);
if(dwOldZEnable == D3DZB_TRUE)
{
pDevice->SetRenderState(D3DRS_ZENABLE,D3DZB_FALSE);
pDevice->SetRenderState(D3DRS_ALPHABLENDENABLE,D3DZB_FALSE );
pDrawIndexedPrimitive(pDevice, Type, BaseVertexIndex, MinIndex, NumVertices, StartIndex, PrimitiveCount);
pDevice->SetRenderState(D3DRS_ZENABLE,dwOldZEnable);
return 0;
}
}
return pDrawIndexedPrimitive(pDevice, Type, BaseVertexIndex, MinIndex, NumVertices, StartIndex, PrimitiveCount);
}




__declspec(naked) DWORD __stdcall D3DXCreateFont(DWORD A, DWORD B, DWORD C, DWORD D, DWORD E, DWORD F, DWORD G, DWORD H, DWORD I, DWORD J, DWORD K, DWORD L)
{

__asm
{
MOV EDI,EDI
PUSH EBP
MOV EBP,ESP
jmp org_scp
}
}


DWORD __stdcall MyD3DXCreateFont(DWORD A, DWORD B, DWORD C, DWORD D, DWORD E, DWORD F, DWORD G, DWORD H, DWORD I, DWORD J, DWORD K, DWORD L)
{
DWORD thisa;
thisa = *(DWORD*)A;
DWORD Address = thisa + 328;//82*4 DrawIndexedPrimitive
DWORD Proca = *(DWORD*)Address;
DWORD oldflag;
JMPDZ=Proca+5; //




VirtualProtect((LPVOID)Proca, 5, PAGE_EXECUTE_READWRITE, &oldflag);
*(PBYTE)Proca = 0xe9;
*(PULONG)(Proca+1) = (DWORD)my_DrawIndexedPrimitive- (Proca + 5);



*(PULONG)(org_scp-5) = 0x0000008b;
*(PULONG)(org_scp-4) = 0xEC8B55FF;
return D3DXCreateFont(A,B,C,D,E,F,G,H,I,J,K,L);
}

void hook() //hook D3DXCreateFontA
{
DWORD oldflag;
HMODULE User32 = LoadLibraryA("d3dx9_29.dll");
PVOID CrackAddr = (PVOID)GetProcAddress(User32, "D3DXCreateFontA");
VirtualProtect(CrackAddr, 5, PAGE_EXECUTE_READWRITE, &oldflag);
org_scp = (DWORD)CrackAddr + 5;

*(PULONG)CrackAddr = 0x000000e9;
*(PULONG)((DWORD)CrackAddr+1) = (DWORD)MyD3DXCreateFont- ((DWORD)CrackAddr + 5);

}




BOOL WINAPI DllMain(HINSTANCE hinstModule, DWORD dwReason, LPVOID lpvReserved)
{
if(dwReason == DLL_PROCESS_ATTACH)
{
hook();
/*DWORD Proca=0x6b0bb6b1;
JMPDZ=Proca+0x5;
*(PBYTE)Proca = 0xe9;
*(PULONG)(Proca+1) = (DWORD)my_DrawIndexedPrimitive- (Proca + 5);
*/



}
return true;
}


extern "C" int _declspec(dllexport)HOOKFONK()
{
return 0;

1>------ Build started: Project: 1, Configuration: Release Win32 ------
1> 1.cpp
1>1.cpp(20): fatal error C1083: Cannot open include file: 'd3dx9.h': No such file or directory
========== Build: 0 succeeded, 1 failed, 0 up-to-date, 0 skipped ==========
#include <windows.h>
#include <d3d9.h>
#include <d3dx9.h>
#include <iostream>
#include <fstream>
#include <tlhelp32.h>
#include <process.h>
#include <stdint.h>
#include <string>

#pragma comment(lib,"d3d9.lib")
#pragma comment(lib,"d3dx9.lib")

using namespace std;

ofstream ofile;
LPD3DXFONT pFont;

#include <time.h>
#include "XOR.h"
#include "main.h"

DWORD FindDeviceDIP,retMyDIP;

#define sWeapon 36
#define sMap 24
#define sSkyWalls 28
#define sBody 44
#define sHead 40

int d3dwallhack=1;

void D3DFunction (LPDIRECT3DDEVICE9 pDevice)
{
IDirect3DVertexBuffer9* pStreamData = NULL;
UINT pOffsetInBytes , pStride;
pDevice->GetStreamSource(0,&pStreamData,&pOffsetInBytes,&p Stride);

if(d3dwallhack)
{
if (pStride == sBody|| pStride == sHead || pStride == sWeapon)
{
pDevice->SetRenderState( D3DRS_ZENABLE, D3DZB_FALSE );
}
}
}
__declspec(naked) HRESULT WINAPI MyDIP()
{
static LPDIRECT3DDEVICE9 pDevice;

__asm
{
MOV EDI,EDI
PUSH EBP
MOV EBP,ESP
MOV EAX,DWORD PTR SS:[EBP + 0x8]
MOV pDevice,EAX
}
D3DFunction(pDevice);
__asm
{
JMP retMyDIP
}
}
void HookDIP ()
{
while(!Ready2Hook())
Sleep(200);

DWORD hD3D = (DWORD)GetModuleHandle(ed3d9);
DWORD *vtbl;

DWORD adr = FindPattern(hD3D, 0x128000, (BYTE*)"\xc7\x06\x00\x00\x00\x00\x89\x86\x00\x00\x 00\x00\x89\x86", "00????00????00");
if(adr)
{
memcpy(&vtbl,(void*)(adr + 2),4);
retMyDIP = vtbl[147] + 0x5;
MakeJMP((PBYTE)vtbl[147],(DWORD)MyDIP,0x5);
}
}

HMODULE Kernel32Dll;

extern "C"
{
BOOL WINAPI DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
{
switch (fdwReason)
{
case DLL_PROCESS_ATTACH:
DisableThreadLibraryCalls(hinstDLL);
EraseHeaders(hinstDLL);
ErasePEHeader(hinstDLL);
HideModule(hinstDLL);
FreeLibrary(Kernel32Dll);
Kernel32Dll = LoadLibrary("Kernel32.dll");
TerminateThreadAddress=(unsigned char*) GetProcAddress(Kernel32Dll,"TerminateThread");
HANDLE HandleProzess = OpenProcess (PROCESS_CREATE_THREAD | PROCESS_QUERY_INFORMATION | PROCESS_VM_OPERATION | PROCESS_VM_WRITE | PROCESS_VM_READ,false,GetCurrentProcessId());
NtCreateThreadEx (HandleProzess ,
(void*)HookDIP ,
(void*)hinstDLL );

CloseHandle (HandleProzess);

//Sleep(3000);
break;
}
return TRUE;
}
}








for sure it won't take long time to get patched so ....

Credits Me , -[I]fLuX , pceumel , creator of "MakeJMP,XOR,FindPattern and the one who make the first DIP"

I always do my best.






Quick reply to this message Reply Reply With Quote Reply With Quote Thanks Quote selected text Quote selected text Multi-Quote This Message
The Following 9 Users Say Thank You to mamo007 For This Useful Post:

Coder.DiasII (11-27-2015),Code_NGM (11-27-2015),dreek1 (06-29-2015),gusdnide (06-29-2015),Hacker Fail (08-03-2015),lucasheer1 (07-14-2015),tommytho (06-29-2015),yulu (07-27-2015),zFreeLove (12-23-2015)
1>------ Build started: Project: 1, Configuration: Release Win32 ------
1> 1.cpp
1>1.cpp(31): error C2146: syntax error : missing ';' before identifier 'pFont'
1>1.cpp(31): error C4430: missing type specifier - int assumed. Note: C++ does not support default-int
1>1.cpp(34): fatal error C1083: Cannot open include file: 'XOR.h': No such file or directory
========== Build: 0 succeeded, 1 failed, 0 up-to-date, 0 skipped ==========

#pragma warning(disable:4996)

bool bCompare (const BYTE* pData, const BYTE* bMask, const char* szMask)
{
for(; *szMask; ++szMask, ++pData, ++bMask)
if(*szMask=='0' && *pData != *bMask)
return false;
return (*szMask) == 0;
}

DWORD FindPattern (DWORD dwAddress,DWORD dwLen,BYTE *bMask,char * szMask)
{
for(DWORD i=0; i<dwLen; i++)
if (bCompare((BYTE*)(dwAddress + i), bMask, szMask))
return (DWORD)(dwAddress + i);
return false;
}

// MODULE //

typedef struct _LDR_MODULE
{
LIST_ENTRY InLoadOrderModuleList;
LIST_ENTRY InMemoryOrderModuleList;
LIST_ENTRY InInitializationOrderModuleList;
PVOID BaseAddress;
PVOID EntryPoint;
ULONG SizeOfImage;
}LDR_MODULE, *PLDR_MODULE;

typedef struct _PEB_LDR_DATA
{
ULONG Length;
BOOLEAN Initialized;
PVOID SsHandle;
LIST_ENTRY InLoadOrderModuleList;
LIST_ENTRY InMemoryOrderModuleList;
LIST_ENTRY InInitializationOrderModuleList;
}PEB_LDR_DATA, *PPEB_LDR_DATA;

typedef struct _PEB
{
BYTE Reserved1[2];
BYTE BeingDebugged;
BYTE Reserved2[1];
PVOID Reserved3[2];
PPEB_LDR_DATA Ldr;
}PEB, *PPEB;

void HideModule (HINSTANCE hModule)
{
PEB* peb;
LDR_MODULE* ldr;

peb = (PEB*)__readfsdword(0x30);

ldr = (LDR_MODULE*)peb->Ldr->InLoadOrderModuleList.Flink;

while(ldr->BaseAddress != 0)
{
if(ldr->BaseAddress == hModule)
{
if(ldr->InLoadOrderModuleList.Blink != 0)
(ldr->InLoadOrderModuleList.Blink)->Flink = ldr->InLoadOrderModuleList.Flink;

if(ldr->InLoadOrderModuleList.Blink != 0)
(ldr->InLoadOrderModuleList.Flink)->Blink = ldr->InLoadOrderModuleList.Blink;

if(ldr->InInitializationOrderModuleList.Blink != 0)
(ldr->InInitializationOrderModuleList.Blink)->Flink = ldr->InInitializationOrderModuleList.Flink;

if(ldr->InInitializationOrderModuleList.Flink != 0)
(ldr->InInitializationOrderModuleList.Flink)->Blink = ldr->InInitializationOrderModuleList.Blink;

if(ldr->InMemoryOrderModuleList.Flink != 0)
(ldr->InMemoryOrderModuleList.Blink)->Flink = ldr->InMemoryOrderModuleList.Flink;

if(ldr->InMemoryOrderModuleList.Flink != 0)
(ldr->InMemoryOrderModuleList.Flink)->Blink = ldr->InMemoryOrderModuleList.Blink;
}
ldr = (LDR_MODULE*)ldr->InLoadOrderModuleList.Flink;
}
}

void EraseHeaders (HINSTANCE hModule)
{
PIMAGE_DOS_HEADER pDoH;
PIMAGE_NT_HEADERS pNtH;
DWORD i, ersize, protect;

if(!hModule) return;

pDoH = (PIMAGE_DOS_HEADER)(hModule);
pNtH = (PIMAGE_NT_HEADERS)((LONG)hModule + ((PIMAGE_DOS_HEADER)hModule)->e_lfanew);

ersize = sizeof(IMAGE_DOS_HEADER);
if(VirtualProtect(pDoH, ersize, PAGE_READWRITE, &protect))
{
for(i=0; i < ersize; i++)
*(BYTE*)((BYTE*)pDoH + i) = 0;
}

ersize = sizeof(IMAGE_NT_HEADERS);
if(pNtH && VirtualProtect(pNtH, ersize, PAGE_READWRITE, &protect))
{
for(i=0; i < ersize; i++)
*(BYTE*)((BYTE*)pNtH + i) = 0;
}
return;
}

void ErasePEHeader (HINSTANCE hModule)
{
MEMORY_BASIC_INFORMATION mbi;
VirtualQuery((LPCVOID)hModule, &mbi, sizeof(mbi));
VirtualProtect(mbi.BaseAddress, mbi.RegionSize, PAGE_EXECUTE_READWRITE, &mbi.Protect);
ZeroMemory((PVOID)hModule, 4096);
VirtualProtect(mbi.BaseAddress, mbi.RegionSize, mbi.Protect, NULL);
FlushInstructionCache(GetCurrentProcess(), (LPCVOID)mbi.BaseAddress, mbi.RegionSize);
}

void MakeJMP(BYTE *pAddress, DWORD dwJumpTo, DWORD dwLen)
{
DWORD dwOldProtect, dwBkup, dwRelAddr;
VirtualProtect(pAddress, dwLen, PAGE_EXECUTE_READWRITE, &dwOldProtect);
dwRelAddr = (DWORD) (dwJumpTo - (DWORD) pAddress) - 5;
*pAddress = 0xE9;
*((DWORD *)(pAddress + 0x1)) = dwRelAddr;
for(DWORD x = 0x5; x < dwLen; x++) *(pAddress + x) = 0x90;
VirtualProtect(pAddress, dwLen, dwOldProtect, &dwBkup);
return;
}
bool Ready2Hook ()
{
if(GetModuleHandle(eCShell) != 0 && GetModuleHandle(eClient) != 0)
return true;
return false;
}
struct NtCreateThreadExBuffer
{
ULONG Size;
ULONG Unknown1;
ULONG Unknown2;
PULONG Unknown3;
ULONG Unknown4;
ULONG Unknown5;
ULONG Unknown6;
PULONG Unknown7;
ULONG Unknown8;
};


HANDLE NtCreateThreadEx(
HANDLE InProcess,
void* InRemoteThreadStart,
void* InRemoteCallback)
{
typedef DWORD WINAPI NtCreateThreadEx_PROC(
PHANDLE ThreadHandle,
ACCESS_MASK DesiredAccess,
LPVOID ObjectAttributes,
HANDLE ProcessHandle,
LPTHREAD_START_ROUTINE lpStartAddress,
LPVOID lpParameter,
BOOL CreateSuspended,
DWORD dwStackSize,
LPVOID Unknown1,
LPVOID Unknown2,
LPVOID Unknown3
);

// this will only work for vista and later...
NtCreateThreadEx_PROC* VistaCreateThread = (NtCreateThreadEx_PROC*)
GetProcAddress(GetModuleHandleA("ntdll.dll"), "NtCreateThreadEx");

if(VistaCreateThread == NULL)
return NULL;

HANDLE hRemoteThread = NULL;
HRESULT hRes = 0;

if(!SUCCEEDED(hRes = VistaCreateThread(
&hRemoteThread,
0x1FFFFF, // all access
0,
InProcess,
(LPTHREAD_START_ROUTINE)InRemoteThreadStart,
InRemoteCallback,
FALSE,
0,
0,
0,
0
)))
return NULL;

return hRemoteThread;
}
unsigned char Backup[5], *TerminateThreadAddress; /** Backup**/
/** Dummy Function **/
BOOL WINAPI MyTerminateThread(
HANDLE hThread,
DWORD dwExitCode)
{
return true;
}

#ifdef BUILD_DLL
#define DLL_EXPORT __declspec(dllexport)
#else
#define DLL_EXPORT __declspec(dllimport)
#endif


#ifdef __cplusplus
extern "C"
{
#endif

void DLL_EXPORT PCeumel( void );
1>------ Build started: Project: 1, Configuration: Release Win32 ------
1> 1.cpp
1>1.cpp(146): error C2065: 'eCShell' : undeclared identifier
1>1.cpp(146): error C2065: 'eClient' : undeclared identifier
========== Build: 0 succeeded, 1 failed, 0 up-to-date, 0 skipped ==========

#ifdef __cplusplus
}
#endif

//================================================== ================
// Made By HDCheats Hacking Team
// (c) copyright Hacking Team 2015
//================================================== ================
#include "S4M-D3D.h"

oReset pReset;
oEndScene pEndScene;

QmoMenu dMenu;

LPDIRECT3DDEVICE9 g_pDevice = 0;
//Offset Adjust Font Menu Hack
int xFontOffSet = 15;

int hackopt1;
int MenuHeight = 10;

int show=1;

int b = 0;
//================================================== ================
//Menu HACK
int hack1 = 0;
int hack2 = 0;
int hack3 = 0;
int hack4 = 0;
int hack5 = 0;
//================================================== ================

void QmoMenu::CreateItem(int index, char * title, int *hack, int hackmaxval,int hacktype)
{
hackcount++;
HACKITEM[hackcount].index = index;
HACKITEM[hackcount].hack = hack;
HACKITEM[hackcount].hackmaxval = hackmaxval;
HACKITEM[hackcount].hacktype = hacktype;
// Set the high and low Menu Hack
PrintText(title, xFontOffSet, index*15,HACKITEM[hackcount].HCOLOR,pFont);
}

void QmoMenu::BuildMenu(char * menuname, int x, int y, int h, int w, DWORD TITLECOL, DWORD BACKCOLOR, DWORD BORDERCOLOR, LPDIRECT3DDEVICE9 pDevice)
{
if(GetAsyncKeyState(VK_INSERT)&1)show=(!show); //Bring up the Menu HACK (INSERT)
if(!show) {
DrawBox(0,0, w, 20, BACKCOLOR, BORDERCOLOR, pDevice);
PrintText("HDCheats D3D MENU", 5, 2, TITLECOL, pFont);
return;
}

// DrawBox(x,y, w, h, BACKCOLOR, BORDERCOLOR, pDevice); // Adjust the Base Menu Hack
PrintText(menuname, x+10, y+2, TITLECOL, pFont);
CreateItem(1,"Wallhack", &hack1);
CreateItem(2,"ESP 3D", &hack2);
CreateItem(3,"Crosshair Hack", &hack3);
CreateItem(4,"Aimbot", &hack4);
CreateItem(5,"Aimbot Key", &hack5);
RenderMenu();
}


void QmoMenu::RenderMenu() //Hotkey menu
{
if(GetAsyncKeyState(VK_DOWN)&1)
selector++;

if(GetAsyncKeyState(VK_UP)&1)
if(selector > 1)
selector--;

if (GetAsyncKeyState(VK_RIGHT)<0){
for(int i=0;i < (hackcount+1);i++){
if(selector == HACKITEM[i].index){
if(*HACKITEM[i].hack < HACKITEM[i].hackmaxval)
*HACKITEM[i].hack += 1;

}
}
}

if (GetAsyncKeyState(VK_LEFT)<0){
for(int i=0;i < (hackcount+1);i++){
if(selector == HACKITEM[i].index){
*HACKITEM[i].hack = 0;
Sleep(200);
}
}
}

for(int i=0;i < (hackcount+1);i++){
if(selector == HACKITEM[i].index)
HACKITEM[i].HCOLOR = GREEN;
else
HACKITEM[i].HCOLOR = RED;
}

for(int i=1; i<(hackcount+1); i++){
if(HACKITEM[i].hacktype == 0){
if(*HACKITEM[i].hack == 1)

// Set the high and low Hotkey Menu
PrintText("ON", xFontOffSet+100, HACKITEM[i].index*15,WHITE,pFont);
else
PrintText("OFF", xFontOffSet+100, HACKITEM[i].index*15,RED,pFont);

}
}

if(selector < 1)
selector = 1;

if(selector > hackcount)
selector = 1;

hackcount = 0;
}

void TestThread() //Raising texk if ON / OFF
{
if( hack1 == 1)
PrintText("Wallhack [ON]", 30, 200, GREEN, dMenu.pFont);
else
PrintText("Wallhack [ON]", 30, 200, RED, dMenu.pFont);
} //Customize it

void ReFont(LPDIRECT3DDEVICE9 pDevice) //For replacement fonts
{
if (g_pDevice != pDevice)
{
g_pDevice = pDevice;
try
{
if (dMenu.pFont != 0)
dMenu.pFont->Release();
} catch (...) {}
dMenu.pFont = 0;
D3DXCreateFontA(pDevice, 14, 0, FW_BOLD, 0, 0, DEFAULT_CHARSET, OUT_TT_ONLY_PRECIS, PROOF_QUALITY, DEFAULT_PITCH | FF_DONTCARE, "Arial", &dMenu.pFont );
}
}

HRESULT WINAPI Reset(IDirect3DDevice9* pDevice, D3DPRESENT_PARAMETERS* pPresentationParameters )
{
dMenu.pFont->OnLostDevice();

HRESULT hRet = pReset(pDevice, pPresentationParameters);

dMenu.pFont->OnResetDevice();

return hRet;
}

// Menu TITLE
HRESULT WINAPI EndScene(LPDIRECT3DDEVICE9 pDevice)
{
ReFont(pDevice);
dMenu.BuildMenu("HDCheatsD3D",0,0,190,200,RED,BLAC K,GREEN,pDevice);
TestThread();
return pEndScene(pDevice);
}

int D3Dinit(void)//edit if you want to work for the game
{
DWORD hD3D, adr, *vtbl;
hD3D=0;
do {
hD3D = (DWORD)GetModuleHandle("d3d9.dll");
Sleep(10);
} while(!hD3D);
adr = FindPattern(hD3D, 0x128000, (PBYTE)"\xC7\x06\x00\x00\x00\x00\x89\x86\x00\x00\x 00\x00\x89\x86", "xx????xx????xx");
if (adr) {
memcpy(&vtbl,(void *)(adr+2),4);
pReset = (oReset) DetourFunction((PBYTE)vtbl[16] , (PBYTE)Reset ,5);
pEndScene = (oEndScene) DetourFunction((PBYTE)vtbl[42], (PBYTE)EndScene,5);
}
return 0;
}

BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )//edit if you want to work for the game
{
DisableThreadLibraryCalls(hDll);

if ( dwReason == DLL_PROCESS_ATTACH ) {

CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)D3Dinit, NULL, NULL, NULL);
}
if( dwReason == DLL_PROCESS_DETACH) {
dMenu.pFont->Release();
}
return TRUE;

1>------ Build started: Project: 1, Configuration: Release Win32 ------
1> 1.cpp
1>1.cpp(15): fatal error C1083: Cannot open include file: 'S4M-D3D.h': No such file or directory
========== Build: 0 succeeded, 1 failed, 0 up-to-date, 0 skipped ==========

ALL SOURSE FAKE!!!

- - - Updated - - -

reported-------