Blast Hack v1.2

Blast Hack v1.2
Credit: Topblast, Jeffrey(RagerZ)

[PHP]
#include <windows.h>
#include <defs.h>

//-------------------------------------------------------------------------
// Data declarations

extern char aShowperformanc[28]; // weak
extern char aWeaponsway1[13]; // weak
extern char aShowbreath1[13]; // weak
extern char aShowfps0[10]; // weak
extern char aShowperforma_0[28]; // weak
extern char aScreenglowenab[19]; // weak
extern char aWireframemodel[18]; // weak
extern char aModeldebug_dra[26]; // weak
extern char aWireframe0[12]; // weak
extern char aWindowed0[11]; // weak
extern char aFullbright0[13]; // weak
extern char aModeldebug_d_0[23]; // weak
extern char aSkelmodelstenc[19]; // weak
extern char aWeaponsway0[13]; // weak
extern char aShowbreath0[13]; // weak
extern char aCammaxposyoffs[28]; // weak
extern char aDuckdowncamoff[30]; // weak
extern char aCammaxposyof_0[30]; // weak
extern char aDuckdowncamo_0[29]; // weak
extern char aShowfirepath0[15]; // weak
extern char aShowfirepath1[15]; // weak
extern char aPerturbrotatio[31]; // weak
extern char aPerturbincreas[30]; // weak
extern char aPerturbdecreas[30]; // weak
extern char aPerturbwalkper[28]; // weak
extern char aPerturbrotat_0[32]; // weak
extern char aPerturbincre_0[30]; // weak
extern char aPerturbwalkp_0[28]; // weak
extern char aPerturbfiringi[36]; // weak
extern char aScreenglowen_0[19]; // weak
extern char aWireframemod_0[18]; // weak
extern char aModeldebug_d_1[26]; // weak
extern char aWireframe1[12]; // weak
extern char aFullbright1[13]; // weak
extern char aModeldebug_d_2[23]; // weak
extern char aSkelmodelste_0[19]; // weak
extern char aFogenable0[12]; // weak
extern char aPlayergravity8[18]; // weak
extern char aPlayergravit_0[19]; // weak
extern char aShowfps1[10]; // weak
extern char aBasemoveaccel4[28]; // weak
extern char aStartaccel4000[23]; // weak
extern char aMaxaccel4000_0[21]; // weak
extern char aAccelinc4000_0[21]; // weak
extern char aWalkvel4000_00[20]; // weak
extern char aFrunvel4000_00[20]; // weak
extern char aBrunvel4000_00[20]; // weak
extern char aSrunvel4000_00[20]; // weak
extern char aBasemoveaccel3[26]; // weak
extern char aStartaccel500_[22]; // weak
extern char aMaxaccel3000_0[21]; // weak
extern char aAccelinc6000_0[21]; // weak
extern char aWalkvel70_0000[18]; // weak
extern char aFrunvel285_000[19]; // weak
extern char aBrunvel285_000[19]; // weak
extern char aSrunvel285_000[19]; // weak
extern char aBasemoveaccel9[27]; // weak
extern char aStartaccel9000[24]; // weak
extern char aMaxaccel90000_[22]; // weak
extern char aAccelinc90000_[22]; // weak
extern char aWalkvel90000_0[21]; // weak
extern char aFrunvel90000_0[21]; // weak
extern char aBrunvel90000_0[21]; // weak
extern char aSrunvel90000_0[21]; // weak
extern char aJumpvel330_000[20]; // weak
extern char aJumpvel990_000[20]; // weak
extern char aJumpvel660_000[20]; // weak
extern char ModuleName[]; // idb
extern char aClientfx_fxd[]; // idb
extern char aCshell_dll[]; // idb
extern _UNKNOWN unk_100037B8; // weak
extern int dword_10004000; // weak
extern _UNKNOWN unk_10004344; // weak
extern char byte_1000445D; // weak
extern char byte_1000445E; // weak
extern char byte_1000445F; // weak
extern char byte_10004460; // weak

//-------------------------------------------------------------------------
// Function declarations

#define __thiscall __cdecl // Test compile in C mode

void __cdecl sub_10001000();
DWORD __stdcall loc_10001990(LPVOID); // idb
int __stdcall StartAddress(int a1);
BOOL __stdcall DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved);
int __thiscall sub_10001A84(void *this, char a2);
// _DWORD __thiscall __report_gsfailure(_DWORD ecx0, _BYTE _4); weak
int __cdecl sub_10001F47();
int (*__cdecl sub_1000200F())(void);
// int __cdecl _clean_type_info_names_internal(_DWORD); weak
// void __stdcall Sleep(DWORD dwMilliseconds);
// BOOL __stdcall DisableThreadLibraryCalls(HMODULE hLibModule);
// HMODULE __stdcall GetModuleHandleA(LPCSTR lpModuleName);
// HANDLE __stdcall CreateThread(LPSECURITY_ATTRIBUTES lpThreadAttributes, SIZE_T dwStackSize, LPTHREAD_START_ROUTINE lpStartAddress, LPVOID lpParameter, DWORD dwCreationFlags, LPDWORD lpThreadId);
// SHORT __stdcall GetAsyncKeyState(int vKey);

//----- (10001000) --------------------------------------------------------
void __cdecl sub_10001000()
{
while ( 1 )
{
if ( GetAsyncKeyState(101) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ShowPerformanceStatistics 1");
if ( GetAsyncKeyState(96) < 0 )
{
byte_1000445D = 0;
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WeaponSway 1");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ShowBreath 1");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ShowFps 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ShowPerformanceStatistics 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ScreenGlowEnable 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WireframeModels 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ModelDebug_DrawSkeleton 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WireFrame 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("Windowed 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("FullBright 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ModelDebug_DrawBoxes 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("SkelModelStencil 0");
}
if ( GetAsyncKeyState(98) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WeaponSway 0");
if ( GetAsyncKeyState(103) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ShowBreath 0");
if ( GetAsyncKeyState(38) < 0 )
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("CamMaxPosYOffset 200.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("DuckDownCamOffSet 1000.000000");
}
if ( GetAsyncKeyState(40) < 0 )
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("CamMaxPosYOffset -1000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("DuckDownCamOffSet -13.000000");
}
if ( GetAsyncKeyState(109) < 0 )
{
if ( byte_1000445E )
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ShowFirePath 0");
byte_1000445E = 0;
}
else
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ShowFirePath 1");
byte_1000445E = 1;
}
}
if ( GetAsyncKeyState(107) < 0 )
{
if ( byte_1000445F )
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PerturbRotationEffect 3.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PerturbIncreaseSpeed 3.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PerturbDecreaseSpeed 9.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PerturbWalkPercent 0.500000");
byte_1000445F = 0;
}
else
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PerturbRotationEffect 0.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PerturbIncreaseSpeed 0.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PerturbWalkPercent 0.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PerturbFiringIncreaseSpeed 0.000000");
byte_1000445F = 1;
}
}
if ( GetAsyncKeyState(104) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ScreenGlowEnable 1");
if ( GetAsyncKeyState(105) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WireframeModels 1");
if ( GetAsyncKeyState(102) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ModelDebug_DrawSkeleton 1");
if ( GetAsyncKeyState(100) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WireFrame 1");
if ( GetAsyncKeyState(99) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("FullBright 1");
if ( GetAsyncKeyState(97) < 0 )
{
if ( byte_10004460 )
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ModelDebug_DrawBoxes 0");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("SkelModelStencil 0");
byte_10004460 = 0;
}
else
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ModelDebug_DrawBoxes 1");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("SkelModelStencil 1");
byte_10004460 = 1;
}
}
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("FogEnable 0");
if ( GetAsyncKeyState(32) >= 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PlayerGravity -800");
else
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("PlayerGravity 800");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("ShowFps 1");
Sleep(0x32u);
if ( GetAsyncKeyState(16) >= 0 )
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("BaseMoveAccel 3000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("StartAccel 500.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("MaxAccel 3000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("AccelInc 6000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WalkVel 70.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("FRunVel 285.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("BRunVel 285.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("SRunVel 285.000000");
}
else
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("BaseMoveAccel 4+6000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("StartAccel 4000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("MaxAccel 4000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("AccelInc 4000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WalkVel 4000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("FRunVel 4000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("BRunVel 4000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("SRunVel 4000.000000");
}
if ( GetAsyncKeyState(88) < 0 )
{
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("BaseMoveAccel 90000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("StartAccel 90000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("MaxAccel 90000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("AccelInc 90000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("WalkVel 90000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("FRunVel 90000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("BRunVel 90000.000000");
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("SRunVel 90000.000000");
}
if ( GetAsyncKeyState(35) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("JumpVel 330.000000");
if ( GetAsyncKeyState(33) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("JumpVel 990.000000");
if ( GetAsyncKeyState(34) < 0 )
(*(void (__cdecl **)(_DWORD))(v37731cb0 + 520))("JumpVel 660.000000");
}
}
// 1000445D: using guessed type char byte_1000445D;
// 1000445E: using guessed type char byte_1000445E;
// 1000445F: using guessed type char byte_1000445F;
// 10004460: using guessed type char byte_10004460;

//----- (100019E0) --------------------------------------------------------
int __stdcall StartAddress(int a1)
{
while ( !GetModuleHandleA("d3d9.dll") || !GetModuleHandleA("ClientFX.fxd") || !GetModuleHandleA("CShell.dll") )
Sleep(0x1F4u);
if ( GetModuleHandleA("d3d9.dll") )
{
if ( GetModuleHandleA("ClientFX.fxd") )
GetModuleHandleA("CShell.dll");
}
return 0;
}

//----- (10001A40) --------------------------------------------------------
BOOL __stdcall DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
{
DisableThreadLibraryCalls(hinstDLL);
if ( fdwReason == 1 )
{
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)StartAddress, 0, 0, 0);
CreateThread(0, 0, loc_10001990, 0, 0, 0);
}
return 1;
}

//----- (10001A84) --------------------------------------------------------
int __thiscall sub_10001A84(void *this, char a2)
{
if ( this == (void *)dword_10004000 )
__asm { rep retn }
return __report_gsfailure(this, a2);
}
// 10001E41: using guessed type _DWORD __thiscall __report_gsfailure(_DWORD ecx0, _BYTE _4);
// 10004000: using guessed type int dword_10004000;

//----- (10001F47) --------------------------------------------------------
int __cdecl sub_10001F47()
{
return _clean_type_info_names_internal(&unk_10004344);
}
// 100022E2: using guessed type int __cdecl _clean_type_info_names_internal(_DWORD);

//----- (1000200F) --------------------------------------------------------
int (*__cdecl sub_1000200F())(void)
{
int (*result)(void); // eax@1
unsigned int v1; // edi@1

result = (int (*)(void))&unk_100037B8;
v1 = (unsigned int)&unk_100037B8;
if ( &unk_100037B8 < &unk_100037B8 )
{
do
{
result = *(int (**)(void))v1;
if ( *(_DWORD *)v1 )
result = (int (*)(void))result();
v1 += 4;
}
while ( v1 < (unsigned int)&unk_100037B8 );
}
return result;
}[/PHP]

Blast Hack v1.2

Post a Reply

Tags for this Thread