Topics

106

Reversing / Find Globals Pointer on Source Engine Games

« on: August 21, 2018, 02:01:57 PM »

achievements/%s.vmt

here r some sigs in kitterengine

Code: [Select]

size_t GlobalsSigGmod = FindSignature("client.dll", "A1 ? ? ? ? C1 E6 08 03 B3 ? ? ? ?");
if (GlobalsSigGmod != 0)
{
s_Globals = **(CGlobals***)(GlobalsSigGmod + 1);
return;
}

size_t GlobalsSigBlackmesa = FindSignature("client.dll", "A1 ? ? ? ? F3 0F 10 40 ? 0F 2F 81 ? ? ? ? 72 03");
if (GlobalsSigBlackmesa != 0)
{
s_Globals = **(CGlobals***)(GlobalsSigBlackmesa + 1);
return;
}

size_t GlobalsSigSynergy = FindSignature("client.dll", "A1 ? ? ? ? F3 0F 10 40 ? 0F 2F C1 76 12");
if (GlobalsSigSynergy != 0)
{
s_Globals = **(CGlobals***)(GlobalsSigSynergy + 1);
return;
}

//"gameui_preventescapetoshow\n" above it is call to globals->curtime + 0.25
size_t GlobalsSigL4D1 = FindSignature("client.dll", "A1 ? ? ? ? 83 78 14 01 74 0C 8B 49 14 85 C9 74 05 E9 ? ? ? ?");
if (GlobalsSigL4D1 != 0)
{
s_Globals = **(CGlobals***)(GlobalsSigL4D1 + 1);
return;
}

107

Reversing / D3D9 Device Signatures for Source Engine Games

« on: August 21, 2018, 01:48:13 PM »

here are all the signatures I found for the DX9 device in shaderapidx9.dll
should work for most if not all sourrce engine games

Code: [Select]

static DWORD FuncAddrGmod = FindSignature("shaderapidx9.dll", "55 8B EC 51 56 8B F1 83 7E 24 00 0F 84 ? ? ? ? 83 3E 00 75 36 8B 0D ? ? ? ? 8B 01 8B 50 08 53 68 ? ? ? ? FF D2 8A D8 A1 ? ? ? ?");
if (FuncAddrGmod)
D3D_VT = **(DWORD***)(FuncAddrGmod + 0x2B + 0x1);

if (!IsValidPointer(D3D_VT))
{
static DWORD FuncAddrTf2 = FindSignature("shaderapidx9.dll", "55 8B EC 51 56 8B F1 83 7E 0C 00 0F 84 ? ? ? ? 83 3E 00 53 57 75 32 8B 0D ? ? ? ? 68 ? ? ? ? 8B 01 8B 40 08 FF D0 FF 35 ? ? ? ?");
if (FuncAddrTf2)
D3D_VT = **(DWORD***)(FuncAddrTf2 + 0x2A + 0x2);

if (!IsValidPointer(D3D_VT))
{
static DWORD FuncAddrCsgo = FindSignature("shaderapidx9.dll", "83 3D ? ? ? ? ? 56 8B F1 74 44");
if (FuncAddrCsgo)
D3D_VT = **(DWORD***)(FuncAddrCsgo + 0x2);

if (!IsValidPointer(D3D_VT))
{
static DWORD FuncAddrCsgoAlternate = FindSignature("shaderapidx9.dll", "B9 ? ? ? ? E8 ? ? ? ? A1 ? ? ? ? 8D 55 FC 52 56 50 8B 08 FF 91 ? ? ? ? 85 C0 78 D8 FF 05 ? ? ? ?");
if (FuncAddrCsgoAlternate)
D3D_VT = **(DWORD***)(FuncAddrCsgoAlternate + 0x2);

if (!IsValidPointer(D3D_VT))
{
static DWORD FuncGmodNew = FindSignature("shaderapidx9.dll", "FF 35 ? ? ? ? 8B CE 8A D8 E8 ? ? ? ? 84 DB 75 0D");
if (FuncGmodNew)
D3D_VT = **(DWORD***)(FuncGmodNew + 0x2);

if (!IsValidPointer(D3D_VT))
{
static DWORD FuncL4D = FindSignature("shaderapidx9.dll", "B9 ? ? ? ? E8 ? ? ? ? 29 3D ? ? ? ?");
if (FuncL4D)
D3D_VT = **(DWORD***)(FuncL4D + 1);
}
}
}
}
}

108

Reversing / ClientModeShared Signatures For Source Engine Games

« on: August 21, 2018, 01:47:00 PM »

here are the clientmode signatures that i'm using
you can use this for hooking createmove

WARNING: Clientmode is not used in L4D/L4D1 L4D2 Portal2

Code: [Select]

static DWORD s_ClientModeCsgo = FindSignature("client.dll", "A1 ? ? ? ? 8B 80 ? ? ? ? 5D");
if (s_ClientModeCsgo)
s_ClientMode = *(DWORD**)(s_ClientModeCsgo + 1);

if (!IsValidPointer(s_ClientMode))
{
static DWORD s_ClientModeSignature = FindSignature("client.dll", "8B 0D ? ? ? ? D9 45 0C 53 51");
if (s_ClientModeSignature)
s_ClientMode = **(DWORD***)(s_ClientModeSignature + 2);

if (!IsValidPointer(s_ClientMode))
{
static DWORD VguiScreensMode = FindSignatureInside("client.dll", "A3 ? ? ? ? E8 ? ? ? ? 8B 10 8B C8 8B 02 68 ? ? ? ? FF D0 5E 83 C4 20");
if (VguiScreensMode)
s_ClientMode = *(DWORD**)(VguiScreensMode + 1);

if (!IsValidPointer(s_ClientMode))
{
static DWORD ClientmodeFunc = FindSignatureInside("client.dll", "E8 ? ? ? ? 8B F8 85 FF 74 14 8B 37 81 C6 ? ? ? ? E8 ? ? ? ?");
if (ClientmodeFunc)
{
static DWORD CallAddr = ExtractCallAddress(ClientmodeFunc);
DbgLog(L"CreateMove function is 0x%X\n", CallAddr);
s_ClientMode = reinterpret_cast<DWORD*(*)()>(CallAddr)();
}
}
}
}

109

Reversing / Left 4 Dead 1 ClientMode CreateMove

« on: August 21, 2018, 01:40:02 PM »

IN SHORT: clientmode is not initialized in L4D1 and L4D2 game, hook CHlClient::CreateMove or SetViewAngles instead (get CUserCmd from ESI ptr)

after a few hrs of reversing clientmode and crap, index 24,25 (truly createmove),26,27 kept crashing in some weird string init function
while the right override view (index 19) did not even get called.

i asked Kelse and he said that it was not initialized.
he even made a forum post in 2015 about it on UC.

sucks because i spent like 4 horus trying to figure out why it didnt work :\



here is the vtable


idx 25 (createmove in l4d  gaemz)

110

Fallout New Vegas / Best Rage Aimbot Ever | Rapid Fire + Fly Hack | Fallout New Vegas BigPackets VIP

« on: August 06, 2018, 05:38:16 PM »

BigPackets.com's Fallout new vegas hack, flying around and owning everybody in the map, no discrimination!

The best fallout: new vegas hack ever made, visibiltiy check in this video is still in Beta so it's not as accurate as the one in our source engine hax.

Aimbot Features
    Aim On Key
    Smooth Aimbot/AimStep
    Jitter Aimbot
    Auto Shoot/Auto Fire
    No Spread
    No Recoil
   Rapid Fire
    Target Lock
    Off After Kill
    Restore Angles
    Vertical Aiming
    Lead Prediction/Projectile Prediction/Projectile Aimbot
Ignore Legion, NCR and other faction npcs
Ignore friendly animals
Visual Features:
    ESP for Enemy Players, Friendly Players, Enemy NPCs, Friendly NPCs, Enemy Projectiles, Friendly Projectiles
Draw Health Text ESP
Draw Skeleton ESP (Bone ESP)
Draw Bone Marks ESP
Draw Distance Text ESP
Draw Nametags ESP
Draw Path Line ESP
Draw Healthbar ESP (Horizontal and Vertical Healthbars)
Draw Line ESP (Top, Center, Bottom)
Draw Box ESP (2D Box ESP and 3D Box ESP)
Customizable Text Color, Bone Color, Front (Visible) color, Back (Invisible) color
Radar ESP

111

News / August 2018

« on: August 04, 2018, 12:52:59 PM »

August 2018
August 25:
Client - Updated
Freezing issue somewhat fixed, it was caused  by slow bigpackets download speeds.
I am rewarding the videos in Media board today!!

August 19:
Left 4 Dead 1 - Updated (NO-SPREAD ADDED)
That's right, no-spread has been added! (Credits: Kelse)

August 19:
Killing Floor 1 ESP (FREE) - Available

Killing floor 1 esp is now available for free in the 32bit loader! use it now, won't be public when i add aimbot and add some more features

August 16:
Half-Life 2 Deathmatch - Updated
Garry's Mod VIP - Available
I will reward Media posts very soon, thank you all for submitting

August 13:
Garry's Mod Public + Garry's Mod Public Light - Updated
* FIX: Spectator features including: Sound on Spectated, Aimbot OFF on Spectated
* FIX: ESP Text being white for no reason

August 11:
Removed 10 post check for our Garry's Mod Hacks - enjoy while the hax last

August 10:
Loader - Updated
64-bit Loader - Added

August 8:
Garry's Mod Public + Garry's Mod Public Light - Updated
- Stacked ESP removed (FOR NOW) because it needs to be improved
- NanoCat's NanoHack 3 white dot crosshair is now the default for bp
- Tahoma is now the default font for gui (instead of Arial)
- Aimbot bit more accurate
- Tetris and snake windows are disabled by default
- FIX: IsAdmin check and added IsSuperAdmin along with it
- FIX: Input box window has been fixed after first one opened
- FIX: Colorbuttons have been fixed
- FIX: Some lag issues

August 5:
Garry's Mod Public - Updated
* Should be working better now

August 4:
Garry's Mod Public + Garry's Mod Public Light - Attempting Update
* Game updated and broke the hack today, working to fix it

112

Battlefield 2 / BF2 VIP Hack Feaures and Cheat Info

« on: July 11, 2018, 01:30:07 AM »

Info

The hack works on every server and every gamemode.
BF2Hub Supported!
No bypass is required.

Anti-Cheat Support (The hack is undetectable on these)
PunkBuster Anti-Cheat - PB Undetected
BF2Hub Anti-Cheat - BF2Hub Undetected

List of Features

• ESP Features
• Player Soldier ESP (Nametag, healthbar, skeleton, lines, boxes, 2d minimap radar)
• Player Soldiers Chams
• Weapons Chams
• Vehicle Chams
• No Hands
• No Fog and Colorized Fog
• No Sky
• GUI Features
• Clock
• Crosshair/Xhair
• Xhair color
• Menu and Master keys
• Config System

More features are being added every update.

This list may be missing some features, as the hack is Always being updated. Some features may be removed without notice.

113

Battlefield 1 / BF1 VIP Hack and Cheat Info

« on: July 11, 2018, 01:22:14 AM »

The hack works on every server and every gamemode.
No bypass is required.

Anti-Cheat Support (The hack is undetectable on these)
Fairfight Anti Cheat - FF Undetected (but if you play blatanty, you will be banned!)

List of Features (Minor ones hidden)

• Visuals/ESP Features
• ESP for Players
• Draw Health Text ESP
• Draw Skeleton ESP (Bone ESP)
• Draw Bone Marks ESP
• Draw Distance Text ESP
• Draw Nametags ESP
• Draw Path Line ESP
• Draw Healthbar ESP (Horizontal and Vertical Healthbars)
• Draw Line ESP (Top, Center, Bottom)
• Draw Box ESP (2D Box ESP and 3D Box ESP)
• Customizable Text Color, Bone Color, Front (Visible) color, Back (Invisible) color
• Radar ESP
• ESP Distance Limit + Draw on Radar
• Aimbot Target Only ESP Settings
• Draw Ammo Pickups ESP
• Draw Weapons ESP
• GUI Features
• Clock
• Shoutbox
• Snake
• Tetris
• Color Picker
• Font Picker
• 2D Radar ESP
• Aimbot Target Information
• Local Healthbar
• Crosshair Picker
• Laptop Battery Healthbar
• Wifi Signal Strength Healthbar
• Message of the Day Window
• More Features
• Custom Save/Load Config System
• Master Key - toggle everything (Default: Insert)
• Menu Key (Default: Delete)
• Unload and Unload Key

WARNING: This list may be missing some features, as the hack is Always being updated. Some features may be removed without notice.


Current Bugs:
Make sure to use DX11 in video settings, DX12 is not supported.
- ESP sometimes wont be drawn on players inside vehicles or turrets
- Autoloading hack at game startup may mess up resolution, try loading hack once ingame

Download

Subscribe to these channels - or you might crash!
https://www.youtube.com/channel/UCHWZyei1g8j_bQgE6kQcWFA
https://www.youtube.com/channel/UCVMQipNvJE-zoC6SSC7Br-g

After subscribing, download the Loader:
https://bigpackets.com/forum/products-3/bigpackets-loaderclientstreamer/
Download the loader, run 64bit loader and choose BF1

If your antivirus is deleting the loader, add the files to exclusions or uninstall the antivirus!!

114

News / July 2018

« on: July 05, 2018, 01:00:21 AM »

July 2018
July 26:
Garry's Mod Public + Public Light - Updated
* Fancy text option removed and enabled by default
* Fancy text will only affects ESP
* Global ESP settings removed
* sv_cheats 1 force button
* sv_allowcslua 1 force button
* ESP names for weapons are now perfect (Credits: UnstucK)
* Lead prediction lines are drawn now when using draw aimbot points
* All sweps are now picked up by the ESP
* ESP not picking some models up now does
working on FPS lag issue now.

July 26:
Forum - Updated
* Everybody has been Unbanned from the forums and our products!
* Accidentally banned Berkayys2004, sorry!

July 25:
Loader - Released
BpJuly5 Loader - Removed
* Goodbye BpJuly5, you helped our members hack the game for 1 year and 20 days!

July 24:
Garry's Mod Public - Updated
* Added crossbow aimbot prediction
* Added beta m9k specialities aimbot prediction

July 22:
Garry's Mod Public - Updated
* Cryllic letters not being displayed properly -- FIXED

July 18:
Garry's Mod Public - Updated
* Anti-Screengrab has been improved!
* Anti-Screengrab is now enabled on default
* Anti-Screengrab is now stable

July 16:
Codename CURE VIP - Added

Day of Defeat Source VIP - Updated
Team Fortress 2 VIP - Updated
Counter-Strike: Source VIP - Updated
Forum - Updated
* Sorted the boards and removed some spam
* Started using DrUnKeN ChEeTaH's monthly news layout
* Media posts have been rewarded their free credits, last call for videos??!

July 15:
Garry's Mod Public - Updated
* Login window serverside is now working
* Fixed WiFi window not showing the network name
* Fixed battery window saying discharging when its plugged in and NOT charging
* Fixed Bonescan feature showing as "Single Bone" and having wrong tooltip
* Bonescan now has a smart system targetting only the best parts of body first

July 12:
VIP/Public Loader - In Progress
https://gfycat.com/ShrillEcstaticHypsilophodon

July 11:
VIP/Public Loader - In Progress

July 10:
Foum - Updated
* A lot of spam threads removed, almost started deleting the accounts that participated in them too.

July 5:
Forum - Updated
Learning how to use PHP/CSS more efficiently
* BP homepage show news, still working on it
* BigPackets discord shut down, another one might go up later.
* Working on new loader that includes two versions of GMod hack, and possibility of relesing paid hacks soon

115

News / June 2018

« on: June 03, 2018, 08:58:44 PM »

June 2018 Updates

June 22
Need a faster windows? Try this custom ISO
https://bigpackets.com/forum/discussion/windows-10-2016-ltsb-modded-download-by-felik/

June 20
Garry's Mod Public - Updated
- Fixed 2d box esp looking bad on pickups, now it rotates
- Added Ignore Spawn Protected Players
- Fixed Accuracy (No Spread)
and got stolen money from paypal back

June 10
Counter-Strike: Source VIP - Updated
- Added engine prediction
- Added no recoil

Garry's Mod Public - Updated
- Cleaned menu
- Radar stuff added back in menu
- Should be a little bit more stable

Current Bugs: sometimes while aiming your screen might go black (trying to figure out whats causing this)


June 3
Garry's Mod Public - Updated
- Aimbot Prediction has been fixed and enabled by default
- Darkrp job name esp added
- Darkrp job color square esp added
- Ignore admins added (UNTESTED)

116

News / May 2018

« on: May 25, 2018, 03:12:18 AM »

May 2018 Updates

May 25
Job names, rectangle with job color are getting added in the next bp gmod update

117

Reversing / Extract address of CALL instruction

« on: May 01, 2018, 10:43:47 PM »

Heres a nice function Syn showed when I was trying to figure out how to find the CALL address when your signature scan lands on a CALL XXXX

uintptr_t get_absolute_address(void* instruction, uint8_t skip = 1, uint8_t size = 5)
{
   unsigned char *memory = (unsigned char *)(instruction);
   int relative = *(int *)(memory + skip);
   uintptr_t absolute = relative + (uintptr_t)(instruction)+size;
   return absolute;
}

118

News / April 2018

« on: April 07, 2018, 10:22:32 PM »

April 2018

April 30:
CatalystHax key menu CLONED by BigPackets!!
Original CatalystHax 2010 Menu:

New BigPackets Clone:

(the tooltip is drawn under the menu!
Have no use for it yet, may add it to the official BP menu as a style or something

April 7:
Gmod Public Hack Updated

April 2:
Combat Arms Hack Started

119

Fallout New Vegas / [Reversing] Weapon Projectile Range

« on: March 09, 2018, 07:32:33 PM »

This is called everytime you shoot a gun (or create a projectile?)

009A7C44 - 89 4D FC  - mov [ebp-04],ecx
009A7C47 - 8B 45 FC  - mov eax,[ebp-04]
009A7C4A - D9 40 6C  - fld dword ptr [eax+6C] <<
009A7C4D - 8B E5  - mov esp,ebp
009A7C4F - 5D - pop ebp

EAX=34014340
EBX=0018FAE4
ECX=34014340
EDX=00000000
ESI=0018F4BC
EDI=0018F5A0
ESP=0018EFF4
EBP=0018EFF8
EIP=009A7C4D

120

Fallout New Vegas / [Reversing] Speed of Weapon Projectile

« on: March 09, 2018, 07:31:55 PM »

Called every tick/frame that a projectile is travelling

0069EF84 - 89 4D FC  - mov [ebp-04],ecx
0069EF87 - 8B 45 FC  - mov eax,[ebp-04]
0069EF8A - D9 40 68  - fld dword ptr [eax+68] <<
0069EF8D - 8B E5  - mov esp,ebp
0069EF8F - 5D - pop ebp

EAX=34014340
EBX=24B6FF04
ECX=34014340
EDX=00000000
ESI=00000000
EDI=00000000
ESP=24B6FCEC
EBP=24B6FCF0
EIP=0069EF8D

Total Registered Members:

2017-2024 BigPackets. All rights reserved. All other trademarks, logos and copyrights are the property of their respective owners. This site is not associated with any company in any way.
Proudly powered by Simple Machines