[Release] asmCoD2 1.3.3p Detected Public Edition

*BlackDove* · 11th October 2006, 06:50

asmCoD2 1.3.3p by BlackDove

THIS HACK IS DETECTED ON PURPOSE.
YOU WILL GET KICKED FOR CORRUPTED FILE / MEMORY + OTHER VIOLATIONS.

THIS FILE MAY NOT APPEAR ELSEWHERE WITHOUT BLACKDOVE'S WRITTEN PERMISSION.

Due to the recent suggestion concerning releasing detected private hacks, I decided to release a detected version of my hack.

If you recall, this was the first major hack for CoD 2. Most of it was completed within the first week of CoD 2's release. There were screenshots of it all over the place after the CoD 2 launch.

Updates:

10/13/06 - Improved compatibility problems with chams.

Requirements:

CoD 2 1.3 legal / retail purchased version
Windows XP with SP2 (DEP disabled)
Included d3d9.dll in Windows\system32 folder

Features:

Menu
Aim Assistance
Wall Hack
Crosshair
Clear Scope
Effect Removal
No Recoil
Enemy Compass
Third Person
Chams
No Fog
Corpse Removal
Name / Team ESP
Enemy Player Indicators
Zoom
Health Indicator
Cvar Unlocker
Shellshock Removal
Console Unlocker

Removed in this version:

Code that prevents detection
Clean Screenshots
Server Crasher

Remember:

Don't ask questions about the private version (begging = ban).
I don't take requests.
Read the documentation before posting.
Aim Assistance has no prediction.
Feedback is good.
Ripping code is not nice.

Screenshots:

http://img147.imageshack.us/img147/3134/1uq9.jpg
http://img204.imageshack.us/img204/1731/2pr6.jpg
http://img204.imageshack.us/img204/6065/3hi3.jpg

DOWNLOAD

budbc · 11th October 2006, 08:29

Good job seems to work fine,
but how can I rip code if its in a dll or exe? reverse engineering I assume?

***Virtuosofriend*** · 11th October 2006, 12:50

Very good release althought it is detected. Keep it up

*server123* · 12th October 2006, 00:30

Finaly a great release, Thanks Blackdove

i would kiss you if you where a girl

But maybe it's my problem, but everything works except CHAMS ;(
Fred

*BlackDove* · 12th October 2006, 01:29

Quote:

reverse engineering I assume?

Yes.

Quote:

...althought it is detected.

There won't be an undetected public release. I don't feel like contributing to PB's development for free.

Quote:

but everything works except CHAMS ;(

What kind of video card do you have?

Are you using unofficial drivers?

Did you replace your d3d9.dll file with the one included in the release? It needs to go in Windows\system32. Make sure you are not running any programs that use D3D before replacing.

RedGhost · 12th October 2006, 04:48

I imagine that much fpu code would be very nice/complex.

Which assembler out of curiousity?

I take it you use static virtual methods table indices for Direct3D api calls, unless I mised some kind of d3d headers for MASM.

Does the corpse removal remove just removal the visual aspects, or does it remove the entity entirely, I have been looking for a while for an "is_dead" flag in the player structs and never found one that was updated instantly, infoValid and cent seem to take a while to be updated.

*BlackDove* · 12th October 2006, 05:01

Yes, the world to screen is done entirely in assembly (floating point arithmetic) that I wrote. It's not really world-to-screen - it's the same aiming calculations used in 360 degree bots. It was challenging. I'm not going to post the calculations now though.

I didn't use an assembler - just a program that converts assembly commands into opcodes. Btw, the loader is not written in assembly...

For D3D hooking, I obviously cannot use headers or anything (no compiler used as mentioned). There is no parsing of tables for looking up functions nor hooking DirectDrawCreate either. PB scans functions that are hooked by this hack so that was one of the reasons why I released this version. This is bypassed in the private version.

Funny thing is that DMW hooks d3d9.dll and PB will eventually detect DMW as a hack unless Even Balance is careful (or maybe done on purpose).

RedGhost · 12th October 2006, 08:47

Quote:

Originally Posted by BlackDove

Yes, the world to screen is done entirely in assembly (floating point arithmetic) that I wrote. It's not really world-to-screen - it's the same aiming calculations used in 360 degree bots. It was challenging. I'm not going to post the calculations now though.

I didn't use an assembler - just a program that converts assembly commands into opcodes. Btw, the loader is not written in assembly...

For D3D hooking, I obviously cannot use headers or anything (no compiler used as mentioned). There is no parsing of tables for looking up functions nor hooking DirectDrawCreate either. PB scans functions that are hooked by this hack so that was one of the reasons why I released this version. This is bypassed in the private version.

Funny thing is that DMW hooks d3d9.dll and PB will eventually detect DMW as a hack unless Even Balance is careful (or maybe done on purpose).

XFire also hooks d3d9, it writes a jump (E9->address) right at the start of EndScene, because of this you can hook XFires hook to bypass PunkBuster (aha). Would be useful for Radar/ESP or something drawn in EndScene.

*server123* · 13th October 2006, 01:06

Quote:

Originally Posted by BlackDove

What kind of video card do you have?
Are you using unofficial drivers?
Did you replace your d3d9.dll file with the one included in the release? It needs to go in Windows\system32.
Make sure you are not running any programs that use D3D before replacing.

I have a asus 6600GT 128MB agp, windows xp sp2 ,i put new firmware on it (flashed the 6600gt) and downloaded newest asus/nvidia driver, but still no luck with CHAMS.
I copied your d3d9.ll to the windows/system32 in safemode, but still no luck.

Or is it because d3d9.dll still exists in : C

WINDOWS\system32\dllcache\ ???
May be i give it a try tomorrow ....

[edit] i have chams now with n7wallhack and blackdove's other features

this is realy nice

BIG KISS from me

*BlackDove* · 13th October 2006, 01:24

I know why the chams do not work. The same issue was fixed in my FEAR hack several weeks ago. I never updated asmCoD2 with the fix. Maybe today's the day...

alien56 · 13th October 2006, 05:08

Hey this is really nice
I tried it out on non PB and its really kick ass.
Just out of curiousity could you explain a little how it loads? I mean what happens when You Click the Exe Image? Does it Actually inject ( I assume i does not but what do I know) cuase if it dosent actually inject into the process then why does PB pick up on this? just want to add im not asking about this to try to get it undetected im just curious why PB is able to detect this if it dosent inject

*BlackDove* · 13th October 2006, 06:03

When you click the image, the hack is injected. The memory of the game is altered and that is why PB is able to detect it. It would be impossible to have all those features without modifying something.

[oC]pingu · 13th October 2006, 07:01

omg detected this hack sucks ****ing garbage man!

just kidding, cool beans, blackdove. come on msn more often, you're like a ghost sometimes.

r34LitY · 13th October 2006, 07:44

blackdove you nerd.... lol, nice one man

RedGhost · 13th October 2006, 14:33

Quote:

Originally Posted by dM

omg detected this hack sucks ****ing garbage man!

just kidding, cool beans, blackdove. come on msn more often, you're like a ghost sometimes.

I have to deal with you on my msn, I can see why he doesn't want to talk to you

11th October 2006, 06:50	#1
BlackDove Moderator & Somewhat Evil Join Date: 23rd May 2004 Posts: 3,539	[Release] asmCoD2 1.3.3p Detected Public Edition asmCoD2 1.3.3p by BlackDove THIS HACK IS DETECTED ON PURPOSE. YOU WILL GET KICKED FOR CORRUPTED FILE / MEMORY + OTHER VIOLATIONS. THIS FILE MAY NOT APPEAR ELSEWHERE WITHOUT BLACKDOVE'S WRITTEN PERMISSION. Due to the recent suggestion concerning releasing detected private hacks, I decided to release a detected version of my hack. If you recall, this was the first major hack for CoD 2. Most of it was completed within the first week of CoD 2's release. There were screenshots of it all over the place after the CoD 2 launch. Updates: 10/13/06 - Improved compatibility problems with chams. Requirements: CoD 2 1.3 legal / retail purchased version Windows XP with SP2 (DEP disabled) Included d3d9.dll in Windows\system32 folder Features: Menu Aim Assistance Wall Hack Crosshair Clear Scope Effect Removal No Recoil Enemy Compass Third Person Chams No Fog Corpse Removal Name / Team ESP Enemy Player Indicators Zoom Health Indicator Cvar Unlocker Shellshock Removal Console Unlocker Removed in this version: Code that prevents detection Clean Screenshots Server Crasher Remember: Don't ask questions about the private version (begging = ban). I don't take requests. Read the documentation before posting. Aim Assistance has no prediction. Feedback is good. Ripping code is not nice. Screenshots: http://img147.imageshack.us/img147/3134/1uq9.jpg http://img204.imageshack.us/img204/1731/2pr6.jpg http://img204.imageshack.us/img204/6065/3hi3.jpg DOWNLOAD Last edited by BlackDove; 18th October 2006 at 06:44..

11th October 2006, 08:29	#2
budbc Dark Mage Tournaments Won: 6 Join Date: 5th Oct 2006 Posts: 28	Good job seems to work fine, but how can I rip code if its in a dll or exe? reverse engineering I assume? Last edited by budbc; 11th October 2006 at 10:06..

12th October 2006, 00:30	#4
server123 Moderator Dragon Join Date: 12th Dec 2005 Posts: 755	Finaly a great release, Thanks Blackdove i would kiss you if you where a girl But maybe it's my problem, but everything works except CHAMS ;( Fred __________________ I like hacks, but most of all : i want to use it also promoted to Little helper on the cod sections. Don't flame me for the bad english i wrote, i do the best i can And for the NEW coming members: READ THE FORUM RULES And read the FAQ

12th October 2006, 04:48	#6
RedGhost Knight of Wars Join Date: 14th Apr 2005 Posts: 130	I imagine that much fpu code would be very nice/complex. Which assembler out of curiousity? I take it you use static virtual methods table indices for Direct3D api calls, unless I mised some kind of d3d headers for MASM. Does the corpse removal remove just removal the visual aspects, or does it remove the entity entirely, I have been looking for a while for an "is_dead" flag in the player structs and never found one that was updated instantly, infoValid and cent seem to take a while to be updated. __________________ fancy fasm signature here __________________ http://www.redghost.ca/ Last edited by RedGhost; 12th October 2006 at 04:55..

12th October 2006, 05:01	#7
BlackDove Moderator & Somewhat Evil Join Date: 23rd May 2004 Posts: 3,539	Yes, the world to screen is done entirely in assembly (floating point arithmetic) that I wrote. It's not really world-to-screen - it's the same aiming calculations used in 360 degree bots. It was challenging. I'm not going to post the calculations now though. I didn't use an assembler - just a program that converts assembly commands into opcodes. Btw, the loader is not written in assembly... For D3D hooking, I obviously cannot use headers or anything (no compiler used as mentioned). There is no parsing of tables for looking up functions nor hooking DirectDrawCreate either. PB scans functions that are hooked by this hack so that was one of the reasons why I released this version. This is bypassed in the private version. Funny thing is that DMW hooks d3d9.dll and PB will eventually detect DMW as a hack unless Even Balance is careful (or maybe done on purpose). Last edited by BlackDove; 12th October 2006 at 05:04..

13th October 2006, 01:24	#10
BlackDove Moderator & Somewhat Evil Join Date: 23rd May 2004 Posts: 3,539	I know why the chams do not work. The same issue was fixed in my FEAR hack several weeks ago. I never updated asmCoD2 with the fix. Maybe today's the day...

13th October 2006, 05:08	#11
alien56 Gave Up Long Ago War Titan Join Date: 26th Apr 2006 Posts: 249	Hey this is really nice I tried it out on non PB and its really kick ass. Just out of curiousity could you explain a little how it loads? I mean what happens when You Click the Exe Image? Does it Actually inject ( I assume i does not but what do I know) cuase if it dosent actually inject into the process then why does PB pick up on this? just want to add im not asking about this to try to get it undetected im just curious why PB is able to detect this if it dosent inject

13th October 2006, 06:03	#12
BlackDove Moderator & Somewhat Evil Join Date: 23rd May 2004 Posts: 3,539	When you click the image, the hack is injected. The memory of the game is altered and that is why PB is able to detect it. It would be impossible to have all those features without modifying something.

13th October 2006, 07:44	#14
r34LitY xtreMe visioN Devil of Hell Join Date: 26th Sep 2004 Posts: 329	blackdove you nerd.... lol, nice one man __________________ Signature removed, User warned for breaking the signature rules. (by gil)