Make your Own DLL HACKS !

//03/11/10 16:24
/*
Name: RCD
Copyright: RCD
Author: RCD
Date: 03/11/10 16:24
Description: Hack pinball with pointer (DEVCPP++)
*/
// Gunakan Strip Executable untuk memperkecil size DLL
#include <windows.h>
#include <stdio.h>
#include <stdlib.h>
#include "cBase.h"

LPTSTR theModule = "PINBALL.EXE"; // Menentukan proses yang akan diambil code-nya


// Write Pointer = Credit by abujafar
// Thx untuk abujafar karena proses porting kode dari MSVC ke DevCPP
void WritePointer(unsigned long ulBase, int iOffset, int iValue)
{
if (!IsBadReadPtr((VOID*)ulBase, sizeof(unsigned long)))
{
if (!IsBadWritePtr((void*)(*(unsigned long*)ulBase + iOffset), sizeof(unsigned long)))
{
*(int*)(*(unsigned long*)ulBase + iOffset) = iValue;
}
}
}
// -------------------------------FUNGSI UTAMA HACKS-------------------------------
void ScoreHack(void)
{
DWORD DoCatchTheBase = (DWORD)GetModuleHandleA(theModule);
if (DoCatchTheBase > 0) {
Beep (100,1000); // Berikan beep untuk mengetahui aktif/tidak
// Misalkan saya mempunya address dasar PINBALL yaitu = PINBALL.EXE+00025040 dan 0x52 maka tuliskan seperti ini !
// WritePointer(<base module> + (DWORD)<base address>, <offset>, <hasil>);
WritePointer(DoCatchTheBase + (DWORD)PBALL_BASE, (PBALL_SCORE_OFS), (PBALL_FINAL_SCORE));
MessageBox (0, "Sukses menjalankan procedur ScoreHack();", "", MB_OK + MB_ICONINFORMATION);
// Karena ini hanyalah function untuk ScoreHack(); maka tidak diperlukan nilai kembali
}
}

void LifeHack(void)
{
DWORD DoCatchTheBase = (DWORD)GetModuleHandleA(theModule);
if (DoCatchTheBase > 0) {
Beep (100,1000); // Berikan beep untuk mengetahui aktif/tidak
// Misalkan saya mempunya address dasar PINBALL yaitu = PINBALL.EXE+00025040 dan 0x52 maka tuliskan seperti ini !
// WritePointer(<base module> + (DWORD)<base address>, <offset>, <hasil>);
WritePointer(DoCatchTheBase + (DWORD)PBALL_BASE, (PBALL_LIFE_OFS), (PBALL_FINAL_LIFE));
MessageBox (0, "Sukses menjalankan procedur LifeHack();", "", MB_OK + MB_ICONINFORMATION);
// Karena ini hanyalah function untuk LifeHack(); maka tidak diperlukan nilai kembali
}
}

void ShowAbout(void)
{
MessageBox (0, "Dibuat oleh blablabla\nTanggal blablabla\nVersi blablabla\n\nThx to RCD", "About", MB_OK + MB_ICONINFORMATION);
}
// --------------------------------------------------------------------------------
DWORD WINAPI LoopHacks(LPVOID param)
{
while (1) {
if (GetAsyncKeyState(VK_F12)&1) {
MessageBox (0, "Sukses menjalankan procedur GetAsyncKeyState F12();", "", MB_OK + MB_ICONINFORMATION);
Beep(100,1000); // Berikan Beep
ScoreHack();
MessageBeep(0);

}
if (GetAsyncKeyState(VK_F11)&1) {
MessageBox (0, "Sukses menjalankan procedur GetAsyncKeyState F11();", "", MB_OK + MB_ICONINFORMATION);
Beep(100,1000); // Berikan Beep
MessageBeep (0);
LifeHack();
}
if (GetAsyncKeyState(VK_INSERT)&1) {
Beep(100,1000); // Berikan Beep
ShowAbout();
MessageBeep (0);
}
// -----------------------------
Sleep(100); // Berikan jeda agar CPU tidak overload / terlalu membebani
}
return (0);
}

// --------------------Main DLL-------------------------------------------
BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls(hDll); // Disable pemanggilan thread dari DLL agar membebani
if (dwReason == DLL_PROCESS_ATTACH) {
Beep(100,1000);
MessageBox(0,"DLL Injected","PINBALL_HACKS", MB_OK + MB_ICONINFORMATION );
MessageBox(0,"Hotkeys :\n>ScoreHack [F12]\n>LifeHack [F11]\n\nCredits by:\n>RCD\n>abujafar","PINBALL_HACKS", MB_OK + MB_ICONINFORMATION );
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)LoopHacks, 0, 0, 0);
}
if (dwReason == DLL_PROCESS_DETACH) {
Beep(100,1000);
MessageBox(0,"DLL telah TerUnload. Thx telah mencoba Hack ini !","PINBALL_HACKS", MB_OK + MB_ICONINFORMATION );
}
return TRUE;
}
// ----------------------------------------------------------------------

/*
Name: RCD
Copyright: RCD
Author: RCD
Date: 03/11/10 16:25
Description: Code for PBALLPointerHack
*/
#ifndef __PBALL_BASE_H // Berikan nama DLL
#define __PBALL_BASE_H
#define WIN32_LEAN_AND_MEAN // Set untuk ke mode DLL win32 yang bisa menjalankan runtime code
DWORD WINAPI LoopHacks(LPVOID param); // berikan privilege ke LoopHacks()
#endif

#define PBALL_BASE 0x25040 // 25040
#define PBALL_SCORE_OFS 0x52 // 52
#define PBALL_LIFE_OFS 0x // 146
#define PBALL_FINAL_SCORE 0x98967F // 98967F (HEX) = 99999999 (DEC)
#define PBALL_FINAL_LIFE 0x98967F // 98967F (HEX) = 99999999 (DEC)

/*
Name: RCD
Copyright: RCD
Author: RCD
Date: 17/11/10 16:39
Description: Major Mission Hack by RCD
*/

// Gunakan Strip Executable untuk memperkecil size DLL
// Jangan lupa berikan version infoya
#include
#include
#include
#include "cBase.h"

LPTSTR theModule = "PointBlank.i3Exec"; // HANDLE PointBlank Module
// Write Pointer = Credit by abujafar
// Thx untuk abujafar karena proses porting kode dari MSVC ke DevCPP
// HEHEHE, write pointer masih lom kedetek
void WritePointer(unsigned long ulBase, int iOffset, int iValue)
{
if (!IsBadReadPtr((VOID*)ulBase, sizeof(unsigned long)))
{
if (!IsBadWritePtr((void*)(*(unsigned long*)ulBase + iOffset), sizeof(unsigned long)))
{
*(int*)(*(unsigned long*)ulBase + iOffset) = iValue;
}
}
}

int __stdcall HSBypass(void){
// Kosong
// HS Bypass Credit by DRACHE and ME [ RCD ] !!!
return 0; // unhook
}
// -------------------------------FUNGSI UTAMA HACKS-------------------------------


int __stdcall RankPointHack(void)
{
DWORD DoCatchTheBase = (DWORD)GetModuleHandleA(theModule);
if (DoCatchTheBase > 0) {
MessageBeep(0); // Berikan beep untuk mengetahui aktif/tidak
// Misalkan saya mempunyai Pointer untuk Point yaitu = PointBlank.i3exec+4C2F38 dan 0xA9D maka tuliskan seperti ini !
// WritePointer( + (DWORD), , );
WritePointer(DoCatchTheBase + (DWORD)PLAYER_BASE, (PLAYER_POINT_OFS), 0xC350); // POINT = 50000
WritePointer(DoCatchTheBase + (DWORD)PLAYER_BASE, (PLAYER_RANK_OFS), 0x32); // GRADE = Commander
return 0; // unhook biar gk kedeteck HACKSHIELD
}
}
// --------------------------------------------------------------------------------
DWORD WINAPI LoopHacks(LPVOID param) // THREAD telah dipatch agar terhindar dari pendeteksian HACKSHIELD tested 17 Nov 2010
{
while (1) {
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
if (GetAsyncKeyState(VK_F12)&1) {
MessageBeep(0); // Berikan Beep
RankPointHack();
}
// -----------------------------
Sleep(10); // Berikan jeda agar CPU tidak overload / terlalu membebani
}
return (0); // unhook biar gk ketangkep satpam
}

// --------------------Main DLL-------------------------------------------
BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls(hDll); // Disable pemanggilan thread dari DLL agar TIDAK membebani
if (dwReason == DLL_PROCESS_ATTACH) {
MessageBeep(0);
MessageBox(0,"DLL Injected\nCredit by RCD","MISMAY HACK", MB_OK + MB_ICONINFORMATION ); //berikan notifikasi
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)LoopHacks, 0, 0, 0); // jalanin thread
}
return TRUE;
}
// ----------------------------------------------------------------------

/*
Tolong gan, sertakan credit ke
- abujafar
- drache
- rcd

kalau sudah jadi DLL nya
*/

/*
Name: RCD
Copyright: RCD
Author: RCD
Date: 17/11/10 16:39
Description: Major Mission Hack by RCD
*/
#ifndef __MISMAY_HACK_H // Berikan nama DLL biar gk salah sasaran
#define __MISMAY_HACK_H
#define WIN32_LEAN_AND_MEAN // Set untuk ke mode DLL win32 yang bisa menjalankan runtime code
DWORD WINAPI LoopHacks(LPVOID param); // berikan privilege ke LoopHacks()
#endif

#define PLAYER_RANK_OFS 0xXXX // offsetnya bisa anda lihat di dalam source code ( download )
#define PLAYER_POINT_OFS 0xXXX// offsetnya bisa anda lihat di dalam source code ( download )
#define PLAYER_BASE 0xXXX// offsetnya bisa anda lihat di dalam source code ( download )

/*
Name: RCD Base
Copyright: RCD
Author: RCD
Date: 22/11/10 15:37
Description: SC Dasar untuk lebih mudah menggunakan RCD Logger
===============================================================
MOHON DESKRIPSI INI JANGAN DIBUANG !
*/
#include "addys.h" // sumber offset dan deklarasi dll
#include // include untuk createthread
#include
#include

LPTSTR PBlankExec = "PointBlank.PBlankExec"; // handle PointBlank.i3Exec
DWORD adrMNZ1, adrMNZ2, adrWallOn, adrWallOff, adrAmmoOn, adrAmmoOff, adrBombermanOn, adrBombermanOff, adrGrenadeOn, adrGrenadeOff = 0; // deklarasi dulu yow

void WriteASM(void *adr, void *ptr, int size) // modul untuk melakukan penulisan ke address asm
{
DWORD OldProtection;
VirtualProtect(adr,size,PAGE_EXECUTE_READWRITE, &OldProtection);
memcpy(adr,ptr,size);
VirtualProtect(adr,size,OldProtection, &OldProtection);
}

int __stdcall HSBypass(void){
// Kosong
// HS Bypass Credit by DRACHE and ME [ RCD ] !!!
return 0; // unhook
}


DWORD WINAPI HackThread(LPVOID param) // Perulangan
{
while (1) { // Jika nilai 1 atau True jalankan fungsi dibawah ini !
// PASSING HACKSHIELD DETECT GAMEHACK
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
HSBypass();
// Minimize ON
if (GetAsyncKeyState(VK_INSERT)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrMNZ1 = dwPBlankModule + (DWORD)OFS_Minimize1;
WriteASM((void *)(adrMNZ1),(void*)(PBYTE)"\x00", 1);
adrMNZ2 = dwPBlankModule + (DWORD)OFS_Minimize2;
WriteASM((void *)(adrMNZ2),(void*)(PBYTE)"\x00", 1);

}
}
// Minimize OFF
if (GetAsyncKeyState(VK_DELETE)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrMNZ1 = dwPBlankModule + (DWORD)OFS_Minimize1;
WriteASM((void *)(adrMNZ1),(void*)(PBYTE)"\x01", 1);
adrMNZ2 = dwPBlankModule + (DWORD)OFS_Minimize2;
WriteASM((void *)(adrMNZ2),(void*)(PBYTE)"\x01", 1);

}
}
// WALLSHOT ON
if (GetAsyncKeyState(VK_F5)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrWallOn = dwPBlankModule + (DWORD)ADR_Wallshot;
WriteASM((void *)(adrWallOn),(void*)(PBYTE)"\xC3", 1);

}
}
// WALLSHOT OFF
if (GetAsyncKeyState(VK_F7)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrWallOff = dwPBlankModule + (DWORD)ADR_Wallshot;
WriteASM((void *)(adrWallOff),(void*)(PBYTE)"\x55", 1);

}
}
// AMMO ON
if (GetAsyncKeyState(VK_HOME)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrAmmoOn = dwPBlankModule + (DWORD)ADR_Ammo;
WriteASM((void *)(adrAmmoOn),(void*)(PBYTE)"\xC3", 1);
}
}
// AMMO OFF
if (GetAsyncKeyState(VK_DELETE)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrAmmoOff = dwPBlankModule + (DWORD)ADR_Ammo;
WriteASM((void *)(adrAmmoOff),(void*)(PBYTE)"\x55", 1);

}
}
//BOMBERMAN ON
if (GetAsyncKeyState(VK_F1)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrBombermanOn = dwPBlankModule + (DWORD)OFS_Bomberman;
WriteASM((void *)(adrBombermanOn),(void*)(PBYTE)"\x00", 1);

}
}
//BOMBERMAN OFF
if (GetAsyncKeyState(VK_F2)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrBombermanOff = dwPBlankModule + (DWORD)OFS_Bomberman;
WriteASM((void *)(adrBombermanOff),(void*)(PBYTE)"\x01", 1);

}
}
// Unlimited Grenade ON
if (GetAsyncKeyState(VK_PRIOR)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrGrenadeOn = dwPBlankModule + (DWORD)ADR_UnlmtdGrnade;
// Unlimited Grenade type nya beda dari yang lain
// Untuk on : 01 81 50 03 00 00
// Cheat ini akan menambah jumlah grenade setiap lempar, have fun !
WriteASM((void *)(adrBombermanOff),(void*)(PBYTE)"???", 1);// ??? <= pikir sendiri
}
}
// Unlimited Grenade Off
if (GetAsyncKeyState(VK_NEXT)&1) {
MessageBeep(0);
DWORD dwPBlankModule = (DWORD)GetModuleHandleA(PBlankExec);
if (dwPBlankModule > 0) {
adrGrenadeOff = dwPBlankModule + (DWORD)ADR_UnlmtdGrnade;
// Untuk off. Offset Bytes nya adalah = 89 81 50 03 00 00
WriteASM((void *)(adrBombermanOff),(void*)(PBYTE)"???", 1); // ??? <= pikir sendiri
}
}
Sleep(5); // Berikan jeda
}
return (0); // unhook
}
BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls(hDll); // meringankan kerja dll
if (dwReason == DLL_PROCESS_ATTACH) {
MessageBox (0,"Simple DLL Hack\nPowered by RCD Logger 2.0","RCD Base", MB_OK | MB_ICONINFORMATION);
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)HackThread, 0, 0, 0);
}
return TRUE;
}

/*
Name: RCD Base
Copyright: RCD
Author: RCD
Date: 22/11/10 15:37
Description: SC Dasar untuk lebih mudah menggunakan RCD Logger
===============================================================
MOHON DESKRIPSI INI JANGAN DIBUANG !
*/
#ifndef __RCD_BASE_H
#define __RCD_BASE_H

#define WIN32_LEAN_AND_MEAN
#include

void WriteASM(void *adr, void *ptr, int size);
DWORD WINAPI HackThread(LPVOID param);
#endif
// ADDYS TEMPELKAN DISINI !!!

/*
Name: RCDBase2
Copyright: RCD
Author: RCD
Date: 18/12/10 14:27
Description: Base dasar agar lebih mudah membuat Hack dengan RCDLogger3
ChangLog : Perubahan pada beberapa string yang telah terdeteksi
*/
#include "cbase2.h"
#include "addys.h"
LPTSTR i3engine = "PointBlank.i3Exec"; // handle PointBlank.i3Exec
DWORD adrWSOn, adrWSOff, OldProtection; // deklarasi variabel
BYTE RET[] = {0xC3}; //deklarasi byte untuk RET
BYTE PUSH_EBP[]= {0x55}; //deklarasi byte untuk PUSH_EBP

/*
Karena memwrite sudah terdeteksi HACKSHIELD, maka saya berupaya membuatkan
fungsi alternative selain memwrite dan undetected bernama MEMpatch
*/

//Check Apakah address tersebut di protect ?
void UnProtectAndModify(DWORD Offset, DWORD Pointer, DWORD Length){
VirtualProtect((void *)Offset, Length, PAGE_EXECUTE_READWRITE, &OldProtection); // check apakah address tsb dikunci / protected ? kalau iya, lakukan unprotect
RtlMoveMemory((void *)Offset, (const void*)Pointer, Length); // ubah address tsb menjadi writeable, dan lakukan patch dengan MEMpatch
VirtualProtect((void *)Offset, Length, OldProtection, &OldProtection); // protect lagi address tsb biar gk kena satpam
}

// Lakukan patch terhadap memory
void MEMpatch( BYTE *Offset, BYTE *ByteArray, DWORD Length){
UnProtectAndModify((DWORD)Offset , (DWORD)ByteArray , 1);
}

DWORD WINAPI InitAllHacks(LPVOID param) // thread telah dipatch. undetected 6 desember 2010
{
while (1) { // jika thread telah aktif
if (GetAsyncKeyState(VK_INSERT)&1) { // jika hotkey ditekan.
DWORD dwI3CubeExec = (DWORD)GetModuleHandleA(i3engine); // dapatkan entry point module i3exec
if (dwI3CubeExec > 0) { // jika PointBlank.i3exec telah di inject ke PointBlank.exe
adrWSOn = dwI3CubeExec + (DWORD)ADR_WALLSHOT_NOBT;
MEMpatch((BYTE*)adrWSOn, RET, sizeof(RET)); // lakukan hack terhadap memory
MessageBeep(1); // Beritahukan jika cheat telah sukses di eksekusi
}
}
if (GetAsyncKeyState(VK_DELETE)&1) { // jika hotkey ditekan.
DWORD dwI3CubeExec = (DWORD)GetModuleHandleA(i3engine); // dapatkan entry point module i3exec
if (dwI3CubeExec > 0) { // jika PointBlank.i3exec telah di inject ke PointBlank.exe
adrWSOff = dwI3CubeExec + (DWORD)ADR_WALLSHOT_NOBT;
MEMpatch((BYTE*)adrWSOff, PUSH_EBP, sizeof(PUSH_EBP)); // lakukan hack terhadap memory
MessageBeep(1); // Beritahukan jika Hack telah sukses di eksekusi
}
}
Sleep(10); // jeda untuk menghindari overheat / kelebihan beban
}
return (0); // kembalikan nilai ke 0 agar thread menjadi loop selama-nya
}

BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls(hDll); // mencegah boros memori. SAVE Resource
if (dwReason == DLL_PROCESS_ATTACH) { // jika dll ter-attach
MessageBox (0,"[PointBlank] Simple Hack powered by RCD Logger 3 and RCD Base 2 !\nCredits to :\n-MEMpatch [Credit RCD]\n-RCD Logger [Credit RCD]\n-RCD Base 2 [Credit RCD]\n-Check Handle I3Exec [hrd]\n\nYang gak ngasih credit leecher permanen hohohohoho","Welcome", MB_OK | MB_ICONINFORMATION); // berikan salam pembuka jika dll telah ter-attach ke PROCESS
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)InitAllHacks, 0, 0, 0); // jalanin thread-nya
}
return TRUE; // mencoba berulang kali sampai thread ter-attach
}

/*
Name: RCDBase2
Copyright: RCD
Author: RCD
Date: 18/12/10 14:27
Description: Base dasar agar lebih mudah membuat Hack dengan RCDLogger3
ChangLog : Perubahan pada beberapa string yang telah terdeteksi
*/

#ifndef __RCD_BASE2_H
#define __RCD_BASE2_H
#define WIN32_LEAN_AND_MEAN // Exclude rarely-used stuff from Windows headers
#include
DWORD WINAPI InitAllHacks(LPVOID param);
#endif