PhunKeh Chams v.1

04:36 Posted by Unknown
PhunKeh Chams v.1

PhunKeh Chams v.1
Team chams(perfect light chams)
Crosshairs
Nofog

credits, me & Phreaker


Use:
extract PhunKeh.rar to anywhere except cod2 folders.
Double click Phunkeh.exe and inject.

Menu:
Open menu Alt+x (or use numpad7)
Navigate Menu Alt + arrow keys
Uninstall:
Delete PhunKeh folder.
 
Download PhunKeh Chams v.1 

PhunKeh Chams v.1
Team chams(perfect light chams)
Crosshairs
Nofog

credits, me & Phreaker


Use:
extract PhunKeh.rar to anywhere except cod2 folders.
Double click Phunkeh.exe and inject.

Menu:
Open menu Alt+x (or use numpad7)
Navigate Menu Alt + arrow keys
Uninstall:
Delete PhunKeh folder.

Download COD2 External ESP

04:30 Posted by Unknown
Download COD2 External ESP

Feutures:
Esp at Team  - Green
Esp at Enemy - Red

Compatible for:

windows 2000
Windows XP SP1 will Crash don't work!
Windows XP SP2
Windows XP SP3
Windows 7
Windows vista
Call of duty 2 Version 1.3

How to use:
Simple click the COD_ESP.exe you will get a messagebox, press ok(or not) next start COD2
the esp will be auto On

The hack is PB proof by now ( PB version v2.165 )

Notes:
The hack makes log files into cod2 folder if the hack get detected you will need to remove the logs or you will be banned for MD5 Tool
never rename the hack/modify or it stops working

[Release]CoD2 Multihack

03:37 Posted by Unknown
[Release]CoD2 Multihack

Hello everyone i had abit of free time before i go inactive tomorow(school) soo i made little Mutlihack for Call of Duty 2 v1.3.

List of Features:

*Traditional Wallhack (Players,Entityes)
*Name ESP
*Distance ESP
*State ESP
*Granade ESP (Text and Icon)
*Box ESP

*Norecoil
*Cvar Unlocker (all cvars:write,read,cheat)
*Crosshair
*Radar (Movable press F7 Key to move it with your mouse)

All features are automaticly on,didn't wanted to make GUI for this now...

PunkBuster Status:DETECTED

Known Bugs:
*Convert2Dscreen Function is abit fucked up

Big Thanks goes to:t00ny,Shard(for his Targets struct)

I hope you will Enjoy

I repeat:PunkBuster Status:DETECTED
  

COD2 External MultiHack

03:32 Posted by Unknown
COD2 External MultiHack

  • Features
    • Aimbot
    • Name Esp
    • Distance Esp
    • Radar
    • Punkbuster Clean Screenshots and Game Screenshoots are Clean(for clan playing or whatever )
    • X-ray Hide Modules/ProcessList bypass( fakes your ProcessList )
    • X-ray Clean Screenshots(sometimes does not work im to lazy for fixing it)
    • Punkbuster Cvar scan bypass
    • Punkbuster MD5Tool scan bypass



Compatible for:

windows 98 (pb kicks you for unknown program driver)
windows 2000
Windows XP SP2
Windows XP SP3
Windows 7
Windows vista
Call of duty 2 Version 1.3
Punkbuster MUST be up to date.

How to use:
Simple click the EX_COD2Bot.exe you will get a message box, press ok(or not) next start COD2
Press F3 for Enable/Disable - ESP
Press F4 for Enable/Disable - Aimbot

NOTES:The hack does not inject at the first time you need to click it again.


Download EnzymeX v1.2

03:29 Posted by Unknown

Enzyme X v1.2 By siGnaL ©GamesAlter 2009

This Is Public Version Of Hack And It Is Detected By PunkBuster.There Will Be No
Undetected Releases In Public.

•CoD2 Versions Supported:
- 1.0
- 1.3

•Features(Enzyme X v1.0):
- Menu
- Chams(Axis/Allies/All)
- No Recoil(Always on)
- Crosshair
- Wireframe Skins
- In Game WinAmp
- WinAmp Spam
- Clock
- No Fog
- Orange Walls

•v1.2 Updates:
- Wall Hack(Axis/Allies/All)
- Glass Walls
- Name Esp(Axis/Allies/All, Fade Effect)
- Distance Esp(Fade Effect)
- Added Crosshair Styles(Cross/Dot)
- Cvar Unlocker
- Weapon Wireframe
- Console Unlocker(If Console Won't Appear Press F5)
- Updated Menu(Much Nicer Than In First Version)
- Direct Server Connect

•How To Use:
- Make Sure That Your Game Is In DirectX 7-Not In DirectX 9 Or Hack Won't Work!
- Launch Enzyme X v1.2.exe And Point To Your CoD2MP_s.exe
- When You're In Game, Press F3 For Menu
- Use Arrow Keys To Navigate Through The Menu
- Press F5 To Unlock The Console If It's Locked
- Using In Game WinAmp:
  * F6 - Play/Pause Song
  * F7 - Previous Song
  * F8 - Next Song
  * Insert - Volume +
  * Delete - Volume -

•Known Bugs:
- Game Crashes If Minimized

•Credits:
- EncoRe
- Azorbix(Titanium StarterKit)
- 0v3Rr!d3
- Phreaker
- King-OrgY
- t00ny
- wurzil

Download EnzymeX v1.2

cod2bot source

03:26 Posted by Unknown
cod2bot source

Well,since im not motivated to work on cod2 anyomore,im releasing source of cod2bot(not finished,but current features works)Current features are:

Wallhack
Chams
Name,Distance,Box esp
Norecoil
Aimbot
Autoshot


Credits and huge thxz goes to:
King-Orgy
Shard
t00ny
OGC

Have fun
OGC

CoD2 ClientHook

03:24 Posted by Unknown
CoD2 ClientHook

Hey guys,
I haven't released anything in months soo,here is my Call of Duty 2 ClientHook.I would like to thank to all of my friends and tutorials that I found here.
I will be updating this hack with new features if users will be pleased with this hack and will ask for new feature updates.

Here's list of features:
-Wallhack
-ESP(Name,Distance,Weapon,Box,Grenade)
-Aimbot
-Autoshoot
-Customizable VecZ
-Norecoil
-Enemy Radar - Movable
-Simple GUI Menu - Just soo you can toggle on/off your features.

PunkBuster Status: Detected,Screenshot - Dirty
Press F8 to toggle on menu.
Works on 1.3 patch only.

Thanks goes to:
-Crx
-King-OrgY
-Blacklyte
-K@N@VEL
-Learn_more
-Q3 SDK
-IDA Pro

Hope you gonna enjoy,have fun!

CoD2 BaseHook

03:21 Posted by Unknown
CoD2 BaseHook

Cod2 Starter Source
By Inferno216

Includes:
Drawing Functions
RegisterFont
RegisterShader
DrawString
DrawStetchPic
ViewAngles
CG, CGS, ClientInfo, Centity, WeaponInfo, ViewAngles
RenderScene
BeginRegistration/R_RegisterModel
Wallhack
Norecoil
Nade & Pickup ESP - Commented cause of making big FPS drop

Credits:
Blacklyte - This source is based off his CoD4 one.
King-Orgy
Crx
Shard - Hooking GetRefAPI,big thanks goes to him for that.
K@N@VEL
learn_more
aB.net
UC-Forums

cuBot2 Patch 1.0

01:42 Posted by Unknown
 cuBot2 Patch 1.0

  • acii
  • buffalo
  • chaplex
  • crunk-monk
  • kobject_
  • sinner
  • Darawk
  • Rainerstoff
Note: There's also a lot of the stuff in the SDK I wrote which is simply wrong (or mislabelled), so don't rely on it for anything more than I did. If you want to add functionality, you may well have to reverse something yourself (or use someone else's SDK).

And finally, there is no anti-punkbuster code! As it is, this is detected.

Edit: Modified the source and project settings a bit, and included MS detours to make it a bit easier to compile.

Note by Blacklyte: This was mostly downgraded by me, with help to find offsets MUCH easier by KingOrgy and t00ny, and KingOrgy for the refImport and refExport structs from cuBot 1.0 downgrade. Thanks guys!

And huge thanks to Shard for this amazing project!  

cod2bot

01:38 Posted by Unknown
cod2bot

The Helix Hax CoD2 Bot by t00ny includes...
:wallhack
:player boxes
:name esp
:dist, esp
:name steal***
:kill spam
:aimbot***
:prediction
:no recoil
and radar

Download cod2 chams

01:35 Posted by Unknown
Download cod2 chams

UPDATED 15-11-2011 100% UNDETECTED

Codehook cheat Cracked by warlord. Hack is 100% undetected on Punkbuster PB. PB proof, Pb ss cleaner ( Screanshot is clean - No Black pb ss) Hack work on xp, vista, 7

Run cheat as administrator ! (windows vista and 7)

Don't use on xray and uac2 hax is undetected on PB. 29.04.2010r !!! If you want hack with bypasses check other hack on our site www.xscene.pl

Install the cheat. Turn on the hacks. Then enter any password and username (eg username: qwedfgfc password: 123456)
Inject the cheat. Then run as admin call of duty 2.

Hax don't have viruss :-) Download with Eset smart security (Nod32)
Scan the file with antyviruss.

Features:
- Wallhack
- Name esp
- Chams:
- 2D solid chams
- 3D chams Glass
- Non wallhack chams
- Custom colors
- xhair
- Granade esp
- Autobash
- Tbot

CoD2Bot

01:30 Posted by Unknown

CoD2Bot
This is a small hack with few features,since CoD2 is really an old game and barely anyone plays it,but there are still
few good servers to rage shit out of them.

Hack works only on 1.3v
Every feature is auto enabled,soo don't ask me what are the keys,and soo on...
------------------------------------------------------------------------------------------

Features are:
Player wallhack
Aimbot
Norecoil

Punkbuster:
Detected
Dirty screenshot

------------------------------------------------------------------------------------------
DON'T USE IT AT PB SERVERS,BECAUSE YOU WILL GET BANNED!

Please don't post this anywhere else without my permission

Happpy hacking!

~Inferno

[SOH] COD2 v1

01:27 Posted by Unknown
[SOH] COD2 v1


Features :

Player WallHack
Chams
Crosshair
NO RECOIL
NO DAMAGE FEEDBACK
NO BLUR SHELLSHOCK
ESP
-Box
-Name
-Weapon
-Distance
-Entity

Screen Shot Cleaner

===========================================
Hotkeys :

F11 - Crosshair On/Off
F10 - Player WallHack On/Off
F9 - Chams On/Off
F8 - ESP On/Off
F7 - No Recoil/No Feedback/No Shock On/Off

===========================================
Proof : Jan. 11, 2013.

PB

-Undetected

Others

-Try...

===========================================

How to use:

- If Steam , run Steam .
- Run the executable file (.exe) included.
- Run COD2
- Do "NOT" close the loader it will close after randomization.

Use Online:

1. Avoid running other programs.
2. Stop switching to your instant messenger
or other programs.

===========================================

IMPORTANT !

Requirements:

- Update your video driver
- Update your PB

Download from Microsoft:
- Directx Web Update complete
- C++ 2005 Redistributable
- C++ 2008 Redistributable
- C++ 2010 Redistributable
- .Net framework 3.5
- .Net framework 4.0

===========================================
Tested on Vista / Windows 7 32/64 bit .
===========================================

Credits:

Creator : (+)

Credits:
jimster480
MyDooMJr [SOH]
A.I. [SOH] / SirHackAlot [SOH]
AIWNJOO [SOH]
King-Orgy [aBnet]
Shadow [UC]
learn_more [UC]
Roverturbo [UC]
JoshRose [UC]
Drunken Cheetah [UC]
Alkatraz [UC]
CypherPresents [UC]
sycore [UC]
okidoki [UC]
5DollarGuy [UC]
kidebr [UC]
TheFeckless [UC]
Chaser343 [aBnet]
R4z8r [UC]
SystemFiles [UC]
Pinki185 [UC]
.Encore [aBnet]
Sinner [aBnet]
Decor911v[censored] [UC]
sfab [UC]
Reunion [UC]
mkahada [UC]
meilman [UC]
more
UC
GD
aB
SOHForum
SOHSite
 

CoD2 CVar Unlock

01:24 Posted by Unknown
CoD2 CVar Unlock

Hey guys!

Welcome to this thread about my CoD2 1.2 CVar Unlocker.
It's a simple tool that help you to unlock console commands.
Most guys are using this to create videos, monates and stuff.
You can also use this unlocker for development reasons.
Someone asked me to create a cvar unlocker and here it is.

Features:
  • Patched Write Proctection
  • Patched Read Only
  • Patched Cheat Protection

How to use?:
  • Open up the unlocker
  • Open up your Call of Duty²
  • Use F1 to turn it on/off
  • Type console commands
Credits:
  • Grab - reversing & coding

Download WH COD2 1.0

01:22 Posted by Unknown
Download WH COD2 1.0



Hello
This is a hack I have been working on, it's to cod2 1.0.
I can release a demo if someone is interested.
This is my first hack with D3D as well. Tips and feedback is welsome

Features:
-Norecoil
-Wallhack
-Menu (D3D)
-More to come....

Download HDSpoofer_Win2000-XP

01:18 Posted by Unknown
Download HDSpoofer_Win2000-XP

This utility will spoof your hard drive information in order to prevent PB
from enforcing their stupid hardware bans. PB may also ban you by the MAC
address of your network interface card, in which case all you need to do is
find one of the many MAC address spoofers. If PB were capable of doing their
job, they would have no need to try and scare us with this horseshit...

Note that you only need to run this utility once after you have started your
system! Hdspoofer places a patch in the kernel, and if you run it more than
once you will have multiple patches, which may cause problems.

When you start hdspoofer, it will generate a file named hdspoofer.ini, which
contains the information used to spoof your hard drive details. When you need
a new hardware guid, simply delete that file and run hdspoofer again.

After the utility has finished, you should close it before starting your
game, since PB could easily check to see if hdspoofer.exe is running.

If you have questions about this, you can try to email me at
taurine@myrealbox.com

IcuMall v1.1

01:16 Posted by Unknown
IcuMall v1.1

As ever, Place the .exe and .dll file together anywhere EXCEPT the COD folder.

double click the IcUMaLL V1.1 .exe and point to your COD MP .exe (default is usualy c/program files/COD)

AXIS PACKAGE = F5

ALLIED PACKAGE = F6

Ctrl= Panic off //toggle

both packages
//////////////////////////////////////////////////////////////////////
1. no fog
2. team chams
3. clear scope
4. targeting sight when firing
5. target aquired info when enemy killable // in view of your weapon
///////////////////////////////////////////////////////////////////////

you can have both axis and allied together for DM games

clear scope is default RH mouse button, clears scope as you bring it up

target sight is default LH mouse button, fill's the default expanded Xhair

Download inFaNeNt v1.0

00:39 Posted by Unknown
Download inFaNeNt v1.0

Just a basic hack based off of N7s SRC release. No additions just a
little color change in the crosshair. Point of this release is not
to make a ownage hack with 100 features, just is to provide the
community with a undetected hack.

Features- Wallhack, NoFog , Crosshair

Everything on by default.

Thanks to N7, BlackDove, Killzar , sikaflex 

Download qtcod 1.0.0

00:37 Posted by Unknown
Download qtcod 1.0.0



Introduction

Hey all,

I wanted to release a hack for call of duty/united offensive when I had the chance. I just got these old games again and I wanted to have a mess around. Here is a simple wallhack, which should be undetected. However, it will not provide clean screenshots.

I have tested it on Call of duty (NOT UNITED OFFENSIVE) and I played for about 1/2 hours without a kick. Perhaps I will keep updating this hack, I am not sure. I have some features for the future.

If you like my hacks please +REP!


- Quicktime

Credits:

Big Dave... (Crx tut? )
And anyone else that has helped me!

*Updated - Hotkey Removed*



How to / General Usage/ Troubleshooting:

Quote:

Here is a simple list of what to do to use the hack:

1. Extract qtcod1.0.0.dll and qtcod1.exe anywhere but the game folder.

2. Run qtcod.exe, you can either minimise it or leave it as it is. *1

3. Start the game. You should hear a BEEP! And the injector will turn off. If you didnt hear the beep it might be because your computer doesnt have an internal speaker. *2

4. Join a server. The wallhack will now turn on...*3

Trouble shooting:

*1 = If you couldnt start my injector you are probably running vista, try running the program for XP compatability. If you are running xp and are having problems, try updating your .NET framework: http://www.microsoft.com/downloads/d...displaylang=en . If all else fails, try using another injector: http://www.unknowncheats.me/downloads...o=file&id=2834
...

*2 = Some computers are not built with internal speakers. This is more of a debugging property to confirm a sucsessful injection anyway. This doesnt mean the injection was not sucessful, try join a server.

*3. = If you joined a server and couldnt see any hacks (wallhack) then try using another injecter. Other wise this is an undiscovered bug... More injecters: http://www.unknowncheats.me/downloads...o=file&id=2834

Virus Scan (0/33):

Code:
http://www.virustotal.com/analisis/a...98e0e1e4d88c31
 
Antivirus Version Last Update Result 
AhnLab-V3 2008.1.12.10 2008.01.11 - 
AntiVir 7.6.0.46 2008.01.13 - 
Authentium 4.93.8 2008.01.13 - 
Avast 4.7.1098.0 2008.01.13 - 
AVG 7.5.0.516 2008.01.13 - 
BitDefender 7.2 2008.01.13 - 
CAT-QuickHeal 9.00 2008.01.12 - 
ClamAV 0.91.2 2008.01.13 - 
DrWeb 4.44.0.09170 2008.01.13 - 
eSafe 7.0.15.0 2008.01.13 - 
eTrust-Vet 31.3.5451 2008.01.11 - 
Ewido 4.0 2008.01.13 - 
FileAdvisor 1 2008.01.13 - 
Fortinet 3.14.0.0 2008.01.13 - 
F-Prot 4.4.2.54 2008.01.13 - 
F-Secure 6.70.13030.0 2008.01.13 - 
Ikarus T3.1.1.20 2008.01.13 - 
Kaspersky 7.0.0.125 2008.01.13 - 
McAfee 5205 2008.01.11 - 
Microsoft 1.3109 2008.01.13 - 
NOD32v2 2788 2008.01.13 - 
Norman 5.80.02 2008.01.11 - 
Panda 9.0.0.4 2008.01.13 - 
Prevx1 V2 2008.01.13 - 
Rising 20.26.62.00 2008.01.13 - 
Sophos 4.24.0 2008.01.13 - 
Sunbelt 2.2.907.0 2008.01.12 - 
Symantec 10 2008.01.13 - 
TheHacker 6.2.9.187 2008.01.13 - 
VBA32 3.12.2.5 2008.01.13 - 
VirusBuster 4.3.26:9 2008.01.13 - 
Webwasher-Gateway 6.6.2 2008.01.13 - 
Additional information 
File size: 173887 bytes 
MD5: 165df50081a805cbb4f2a2e3448f4ba1 
SHA1: e502b09f2eacbc58b8b96ebb6a1c007223a81be2 
PEiD: -

QTCOD1 Bot Version 1.0.0 By Quictktime...
Released: 13th / January / 2008
Punkbuster: Proof
Screenshots: NOT CLEAN!
Features: Simple wallhack
Game version: 1.5

How to use:

1. Extract qtcod1.0.0.dll and qtcod1.exe anywhere but the game folder.

2. Run the exe (qtcod1.exe)...

3. Start the game. You should hear a BEEP!

4. Join a server, then hit numpad 1 (you may need to have numlock on)

5. The wallhack should be on, enjoy...

CoD External Wallhack Source

00:33 Posted by Unknown
CoD External Wallhack Source

Info/About

Hey,

Some guy called 'plonk' was begging for this, so I made him a new copy. Its basically a VB.NET trainer which writes a very small modification to enable the depth hack. This hack has no proofings of any kind! You have been warned! You may get banned for using this hack and I take no responsibility! To use it, just start the hack then start the game.

Enjoy,

- Quicktime


Credits: Crx, MSDN, Dave

CoD External Wallhack for Plonk

00:31 Posted by Unknown
CoD External Wallhack for Plonk

Info/About

Hey,

Some guy called 'plonk' was begging for this, so I made him a new copy. Its basically a VB.NET trainer which writes a very small modification to enable the depth hack. This hack has no proofings of any kind! You have been warned! You may get banned for using this hack and I take no responsibility! To use it, just start the hack then start the game.

Enjoy,

- Quicktime


Credits: Crx, MSDN, Dave

Download [Release] CoD1Hook v0.2 Undetected!

00:28 Posted by Unknown
Download [Release] CoD1Hook v0.2 Undetected!

To disable the tracker:
Put tracker=false in the config (right below [Tracker])

Install
Follow the instructions at the manual.

Features

* Wallhack
* ESP:

1. player name's
2. player weapon
3. grenade esp
4. enemy visibility cross

* Aimbot:

1. Adjustable Vecs
2. Aimthruobjects
3. advanced prediction algorithm
4. always on option/tap/hold key

* Removals

1. No damage feedback
2. No sniper blackout
3. No recoil

* Additional Crosshair
* Radar
* Statistics (killstats and many more)
* Autoshoot
* 222 (!) Different Aimkeys
* Killsounds (1.5 MB)
* Killspam
* Tracker
* /quit game if other pb version detected
* Menu
* CFG Loading
* Cool CoD1Hook (R) signature (with stats!) included
* Advanced Polymorphic Engine
* 100% Punkbuster proof
* 100% Free, no hidden costs

Updates

* Clean Punkbuster Screenshot
* Bugfix: killsounds
* Bugfix: no damagefeedback

Credits

* Sinner
* Null
* Dani (TM) a.k.a. Ice (R)
* Kobject
* Chaplex
* [censored]
* Topnotch
* King-Orgy
* Kutaki
* Scream (Freelanc3r.org)
* Everyone I forget


PLEASE UPDATE YOUR PB CLIENT IF YOU GET A "Different PB Client Detected - Exitting Game" error.

Download Z-Mod

00:26 Posted by Unknown
Download Z-Mod

DAYZCOMMANDER NOTE:
Dayzcommander is not an officially supported application.
The DayZ team cannot help with or be held accountable for any problems caused by its use.

Download cod1 source

00:12 Posted by Unknown
Download cod1 source
Using our decompiler, these sources were decompiled from the original BSP files
of CoD1 and CoD2. These sources can be used to build maps for CoD.

Each .map source from a decompiled BSP file, looks like this:
- it exports all brushes
- it exports all triangles (terrain, patches, brushes)
- it exports all entities (spawns, lights, models, ...)
- triangles are caulked
- brushes, triangles and entities are in different layers of the .map
- these map source can be opened in CoD1 / 2? / 4 / 5 Radiant

What needs to be done for a full remake:
- retexturing all brushes
- replacing all models
- recreating all terrain and patches using the triangles
- adding portals
- checking all CoD version specific stuff (such as lightgrid etc.)
- at final, removing all triangles (make sure they're not compiled!)
- adding new gametypes, adding more detail, vision files, checking spawns, etc.

Ignore the following warning: "Removed duplicate faces from brush", this is
because we do not rebuild brushes like Radiant does. After a map save this
should be solved.

When using these map sources, please emphasize that you used our decompiled
sources, either put a link to a post about the tool / about us, or put our names
in.

Thanks for using this and good luck remaking ;-)
CoDEmanX and Daevius  

Downloads for CoD1 radiant
CoD1:  Download CoD1
CoD2: Download CoD2
CoD1 map pack: Download CoD1 map Pack

Downloads for CoD4/5 radiant
CoD1: Download CoD1
CoD2: Download CoD2
CoD1 map pack: Download CoD1 map pack

Make sure you have Download 7zip File

Postscript
I want to thank Regolith for his help and great info at the beginning, it got us started. Without you we would've had only Tally's response, who was arrogant, unhelpful and ignorant.
Also thanks to Zeroy, Paulo88 and Cornrow Wallace for testing and / or remaking so far.

CoDEmanX and Daevius

Xfire OpenglHooKy

00:03 Posted by Unknown
Xfire OpenglHooKy

Dunno why i call it cod1 xfire hook maby because i start to test it in cod1
it should works with all Opengl games that supported Xfire
works with lates xfire client
since pb does not scans memory inside xfire should that undetected for a few years

COD1 Xfire HooK Updated

23:59 Posted by Unknown
COD1 Xfire HooK Updated

oD1 Xfire HooK
Features:
Name Esp
Distance Esp
Team Green Color Test
Enemy Red color test
Fade Effect

How to Use:
First of all start the game Without Hacks Then go to the xfire inGame menu and enable FPS Showing it looks somethings like that on the 1st Screenshot.
Next Start the Game with hack and Done you got Name esp and distance esp


Punkbuster Undetected for the lates COD1 Evenbalance client Version.

Problems: Glut32 File missing:
Simple Download glut32.dll from dll-files.com/dllindex/dl...s.shtml?glut32
and put inside C:windows/system32 folder AND NOT in the game folders,.


Credits Goes to Xfire,Learn_more,lsy,deadnesser,msdn,wurzil,crx.sycore, Zero aka Thor,MasterFun and everyone i vergot

Cod & CoDUO CVAR Cheater v2

23:54 Posted by Unknown
Cod & CoDUO CVAR Cheater v2

Cod & CoDUO CVAR Cheater v2
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Coding : G36KV
Credits : King-OrgY (Thanks for this nice method), Sinner (nice injector)
Status : Punkbuster undetected (09-Feb-2010)
Support : CoD v1.5 and CoDUO v1.51


CoD & CoDUO CVARs
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
r_fog -> Disable fog
r_fastsky -> Clean sky
r_lightmap -> remove colors
r_showtris -> like wireframe wallhack
r_showsurfcounts -> like numbers esp
fx_draw -> Disable effects, e.g. disables smoke
r_showCullXModels -> like box esp

CoDUO CVARs
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
r_LightScale -> bright models


Use the cvarcheatc.ini to rename the cvars as you want to bypass punkbuster!!!


Install
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
1. Edit cvarcheatc.ini and rename the cvars as you want
2. Start cvarcheat.exe and choose your COD Multiplayer exe
4. Enjoy playing with cheat protected cvars on PB Servers.

- Press F1 to enable the cheat.
- Open console (F2) and type in "/bs_" and press TAB on your keyboard.
- You should now see all available cvars e.g. bs_fog
- Choose your favorite settings and have fun.
- Maybe you need to press F1 again after map change.
- Hint: Create a key bind with your favorite settings 

Download CoD1 ClientHook

23:50 Posted by Unknown
Download CoD1 ClientHook

Hello everyone,
Ok soo this is last release of my CoD1 clienthook serials and I will be moving on to CoD2,CoD4...
I added few new features including GUI menu,in menu only colors tab isn't in function cause I was having troubles with colour pickers but as soon I have time I will fix them and update it.I hope you enjoyed my hacks and thanks to all for your help,kindness and support.

Full features list:
-Wallhack
-Name/Distance/Weapon/Granade ESP
-Dvar Unlocker
-Enemy Radar
-Norecoil
-Crosshair
-Kill Stats
-Kill Sounds
-Kill Spam
-GUI Menu
-Aimbot
-Autobash
-Autoshoot
-Colour Sliders(Pickers) I haven't finished them due bugs but don't worry will fix that problem asp.

Credits:
Crx
King-Orgy
Buffalo
Blacklyte
-Q3 SDK
-Ollydbg/IDA Pro 5.0
-Game-Deception
-[censored]

CoD 4 Unbanner!

23:46 Posted by Unknown
CoD 4 Unbanner!

How to Unban a Player From "Call of Duty 4"

"Call of Duty 4" online is played by connecting to multiplayer servers. These servers are set up and run by other gamers, and as such come each comes with its own set of rules. Some rules may be no cursing, or no hacking or cheating. If you are running a server and have banned someone for violating one of your rules, you may give that player a second chance by unbanning him while on your server during a multiplayer match. 


bf3ext v1b

00:48 Posted by Unknown
bf3ext v1b

changelog 1b:
----------
- fixed not detecting bf3 on some special bf3 versions


changelog 1a:
----------
- added radar
- fixed keypress bugs


features:
---------
- punkbuster undetected 12/12/2011
- punkbuster clean screenshots
- fully external
- basic esp
- box
- healthbar
- player name
- distance
- crosshair
- radar


prerequisites:
--------------
- visual studio 2010 sp1 runtimes
- windows vista/7 x64 operating system
- aero/desktop composition enabled
- make sure battlefield 3 is configured to run in windowed mode (alt+enter while game is running)
how to use:
-----------
- start hack
- start battlefield 3
- have fun
hotkeys:
--------
- HOME - toggle FULLSCREEN
- INSERT - toggle name esp
- PAGE UP - increase radar range
- PAGE DOWN - decrease radar range

UC Play4Free Release v1.2

00:45 Posted by Unknown
UC Play4Free Release v1.2



Hi all , today , after much work , as i promised i decided to release my play4free cheat , it includes most of features which everyone wants ( atleast i think ) , and remember , without some peoples this release wouldn't be never possible!

Features

*Aimbot

Active
Aim Bone
Auto Aim
Check Visibility
Auto Fire
Aim On Friends
Aim On Enemies
Aim On Vehicles
Anti BulletSpread (No Spread) [zoom in with an lmg then shoot , u will see what i mean xD]
BulletDrop Adjust
BulletSpeed Adjust

*2D Radar

Active
Scale
Show Friends
Show Enemies
Show Vehicles
Show Window
Show Cross
Show Dot
Clip To Window
Center Radar

*3D Radar ( Esp )

Active
Show Friends
Show Enemies
Show Vehicles
Draw Name
Draw Health
Draw Distance

*Protections (Automatic)

Mutated / Obfuscated Code
PB Secure
PB Clean SS

Coming Soon :
BF2 Release
BFHeroes Release
APB Release
BFBC2 Release
MOH 2010 Release


Menu key is DELETE
AimKey is V or MBUTTON

Who Contributed / Helped : (No particular order)
Patrick - the one from GD
shakai
Freeheadshot
TIGERHax
CypherPresents
5$andimyours
ettans
Sfab1
Revolty
Zooom
zoomgod
Drunken Cheatah
learn_more
and everyone who i missed.

Before you download take a look to the contributor list!

Changelog :

Quote:
Version 1.0 RC :
First Release

Version 1.1
Added runtime code obfuscation
Updated to the latest version
Some ninja changes

Version 1.2
Recompiled the cheat
Fixed minor bugs
Now cheat have a loader!
Feel free to say what i have to add / remove / fix any suggestions are welcome.

AutoPwn v2 - Masskill: 9 DLLs

00:41 Posted by Unknown
AutoPwn v2 - Masskill: 9 DLLs

s is a hack exploiting ClientMeleeWeapon::giveDamage to kill all players of the enemy team with the currently equipped weapon if they are in range of the weapon(use snipers to effectively kill the whole team).

Why 9 Dlls? These are all compiled with different compiler options making detection harder. For maximum safety use only one DLL and don't switch, if you're lucky this DLL will stay undetected for a while. If you get kicked try with a different DLL. The hack is PB safe as of now(08.01.2012). Note that the differences are greater between each folder and smaller between each "O-Level".

Once injected the hack will start, the only way to make it stop is to close the game or switch to an unsupported weapon(melee or repair tool/grenade/rpg). This will not work in tanks or vehicles and is likely to crash your game if attempted.
This hack is more an appeal to dice to fix the game than anything. 

Download bf3ext 1.2 BETA

00:37 Posted by Unknown
bf3ext 1.2 BETA

bf3ext v1 - battlefield 3 passive esp ------------------------------------- features: --------- - punkbuster clean screenshots - fully external - basic esp - box - healthbar - player name - distance - crosshair prerequisites: -------------- - visual studio 2010 sp1 runtimes - windows vista/7 x64 operating system - aero/desktop composition enabled - make sure battlefield 3 is configured to run in windowed mode (alt+enter while game is running) how to use: ----------- - start hack - start battlefield 3 - press HOME key to toggle FULLSCREEN mode - have fun.

Clubhouse Hook 4.2

00:33 Posted by Unknown
Clubhouse Hook 4.2

Fixed radar position
Fixed some menu toggling issues
[Instructions for Release 4]
1. Download to any folder, but the BF3
root directory
2. Load the game, wait till spawn
screen ish
4. Find a dll injector and inject
5. If you don't use any FXAA,
Borderless BF3 utils, overlays,
msi afterburner, performance
boosters you should be okay

[MENU Keys]
Numpad 8 - MOVE UP, Numpad 5 - MOVE DOWN, Numpad 6/4 - TOGGLE, Num 2 - HIDE MENU
[Features shrooms 4.2]
Name tags, Distance Tags, Health tags, Visible checks, No recoil, No spread, Health Bars, Head ESP, PB SS block, Skeleton ESP, Radar
Thanks to my testers: bacs2001, AMDJack, Swishee Locksm1th, 0srn (sorry if I missed someone) - See more at: http://ncheats.blogspot.co.uk/2013/03...
Fixed radar position
Fixed some menu toggling issues
[Instructions for Release 4]
1. Download to any folder, but the BF3
root directory
2. Load the game, wait till spawn
screen ish
4. Find a dll injector and inject
5. If you don't use any FXAA,
Borderless BF3 utils, overlays,
msi afterburner, performance
boosters you should be okay

[MENU Keys]
Numpad 8 - MOVE UP, Numpad 5 - MOVE DOWN, Numpad 6/4 - TOGGLE, Num 2 - HIDE MENU
[Features shrooms 4.2]
Name tags, Distance Tags, Health tags, Visible checks, No recoil, No spread, Health Bars, Head ESP, PB SS block, Skeleton ESP, Radar
Thanks to my testers: bacs2001, AMDJack, Swishee Locksm1th, 0srn (sorry if I missed someone) - See more at: http://ncheats.blogspot.co.uk/2013/03...
Fixed radar position
Fixed some menu toggling issues
[Instructions for Release 4]
1. Download to any folder, but the BF3
root directory
2. Load the game, wait till spawn
screen ish
4. Find a dll injector and inject
5. If you don't use any FXAA,
Borderless BF3 utils, overlays,
msi afterburner, performance
boosters you should be okay

[MENU Keys]
Numpad 8 - MOVE UP, Numpad 5 - MOVE DOWN, Numpad 6/4 - TOGGLE, Num 2 - HIDE MENU
[Features shrooms 4.2]
Name tags, Distance Tags, Health tags, Visible checks, No recoil, No spread, Health Bars, Head ESP, PB SS block, Skeleton ESP, Radar
Thanks to my testers: bacs2001, AMDJack, Swishee Locksm1th, 0srn (sorry if I missed someone) - S Fixed radar position
Fixed some menu toggling issues
[Instructions for Release 4]
1. Download to any folder, but the BF3
root directory
2. Load the game, wait till spawn
screen ish
4. Find a dll injector and inject
5. If you don't use any FXAA,
Borderless BF3 utils, overlays,
msi afterburner, performance
boosters you should be okay

[MENU Keys]
Numpad 8 - MOVE UP, Numpad 5 - MOVE DOWN, Numpad 6/4 - TOGGLE, Num 2 - HIDE MENU
[Features shrooms 4.2]
Name tags, Distance Tags, Health tags, Visible checks, No recoil, No spread, Health Bars, Head ESP, PB SS block, Skeleton ESP, Radar
Thanks to my testers: bacs2001, AMDJack, Swishee Locksm1th, 0srn sorry if I missed someone.

Download bf3ext 1.3

00:30 Posted by Unknown
Download bf3ext 1.3

On a side note, please do not longer post that it is detected.

heyho fellow cheaters

due to some free time i decided to update bf3ext and release a new version.
the hack is x64 only now and should stay undetected for quite a while like the older versions.
most of the visual stuff is still the same except there are visibility checks added.

every information you need in order to to use it should be in the readme. the most common problems/questions that show up will be added to a faq in this post later.
if you are used to the older versions you probably don't need to read the readme.
i had only 1 tester so if you find any bugs or problems let me know and i see what i can do.

README:
Code:
 
On a side note, please do not longer post that it is detected.

heyho fellow cheaters

due to some free time i decided to update bf3ext and release a new version.
the hack is x64 only now and should stay undetected for quite a while like the older versions.
most of the visual stuff is still the same except there are visibility checks added.

every information you need in order to to use it should be in the readme. the most common problems/questions that show up will be added to a faq in this post later.
if you are used to the older versions you probably don't need to read the readme.
i had only 1 tester so if you find any bugs or problems let me know and i see what i can do.

README:
Code:
 
UPDATE 1b:
hopefully fixed not getting a bf3 window handle on some special bf3 versions using EnumWindows() instead of FindWindow()


UPDATE 1a:
i did a quick update to 1a. not using GetAsyncKeyState anymore so it should fix the keypress problems.
also added a radar and made a name esp toggle

bf3ext v1a - battlefield 3 passive esp
-------------------------------------

changelog:
----------
- added radar
- fixed keypress bugs


features:
---------
- punkbuster undetected 12/12/2011
- punkbuster clean screenshots
- fully external
- basic esp
- box
- healthbar
- player name
- distance
- crosshair
- radar


prerequisites:
--------------
- visual studio 2010 sp1 runtimes
- windows vista/7 x64 operating system
- aero/desktop composition enabled
- make sure battlefield 3 is configured to run in windowed mode (alt+enter while game is running)


how to use:
-----------
- start hack
- start battlefield 3
- have fun


hotkeys:
--------
- HOME - toggle FULLSCREEN
- INSERT - toggle name esp
- PAGE UP - increase radar range
- PAGE DOWN - decrease radar range

Download bf3ext 1.3
 

Parachute mod

00:25 Posted by Unknown
Parachute mod

Ok, I searched For a parachute mod on the forum and i don't found any so i created this thread sharing the files and Good luck by the Way [undetectable]


How tu use :
  1. Add the controll.con in folder battlefield play4free in my documents !
  2. open mouse Scroller (only one time ) Nothing will apear !
  3. enter the game : go to your setting and check if movment keys have changed
  4. try in empty server first ( advice karkand Assault "A" roof ) Jump and scroll down (fast) don't -touch any other key
  5. Enjoy

BF3 External Radar Source

00:14 Posted by Unknown
BF3 External Radar Source

Hey guys!

Here i gonna release my BF3 Radar Source, have fun with it.
It's a clean source with the only needed features for a radar.
It's a external overlay, mark thats was my first good structured project.

Anyways if you download this source don't forget to give me a rep for my work...
It's better to get motivated to release more stuff.

Supported:
  • Windows 7 / 8 x32 / x64
  • Windows Vista x32 / x64

Features:
  • Basic Radar - Overlay
  • Player on Radar (Team & Enemy)
  • Rotation Radar (Rotating with view)
  • External Checks no WPM

Credits:
  • smallC - for his snippet to read out values of BF3 (i'm was a css programer)
  • s0beit - Drawing stuff
  • gr33w - Searching fails in my source (programing fails not program fails)

Battlefield 4™ Beta hax Release Update

00:09 Posted by Unknown
Battlefield 4™ Beta hax Release Update

SP:
Esp Box - NUMPAD 1
Esp Name,Distance, Health - NUMPAD 2
Esp Line - NUMPAD 3

1) Run the game
2) put process name .exe
3) add .dll
4) Inject Enjoy!

1.Turn off DEP.
2.Turn off UAC.
3.Maybe your AntiVirus block injector.
4.Start as admin(Injector,Game, Origin).

credits:
Kozmo and ReUnioN thx for Engine Draw.
smallC - thx w2s matrices .
sd333221 - some offset
CypherPresents - thx for swapchain <3
master131 - thx for injector x64.

Download bf3 hackly hack

23:53 Posted by Unknown
Download bf3 hackly hack

Hello felas, i just wandering if could be possible a hack for the snipers, principally the long ranges ones like me, with a reducion of bullet drop of the bolt action and kill with a one hit

and a precise esp with the distance from you to te target..(that steves aimboot does very well) but the bullet drop still being a problem.. even for m98b..

what do you guys say? about it?

Battlefield HardLine Hack v0.2.2

23:43 Posted by Unknown
Battlefield HardLine Hack v0.2.2

 How to use:
  1. Start the game
  2. Set video settings to "Borderless" or some other (not "Full Screen")
  3. Run hack ("Delete" to show / hide menu)


Features:
  • MENU - show / hide menu
  • ESP - like wallhack
  • No Recoil - disable Recoil
  • No Breath - disable breath for snipers (NEW)
  • 1 Hit Kill - one shot one hit (aka. instant kill) (NEW)
  • Crosshair - show crosshair (red)
  • Distance -show the distance to the players
  • Health - show health of players
  • Name - show names of players
  • Info - show information about ammo and health (NEW)

Changes:
  • Added "No Breath"
  • Added "1 Hit Kill" (aka. instant kill)
  • Added "Info"
  • Fixed for "windowed" mode.
  • Fixed ESP, when not shows "dot" in head
  • Fixed Crosshair, disable / enable now works

PB Status:Undetected (19.06.2014)
 

Clear Vision - Battlefield Heroes

23:38 Posted by Unknown
 Clear Vision - Battlefield Heroes



Hey guys!

Just a small and simple thread of my unfinished internal Battlefield Heroes hack.
I'm not working on this since 2-3 weeks now this is why i release it.

Features:
* Object Oriented Coded
* Simple DirectX Hook through Engine
* Crosshair & Simple Drawings (D3D)
* Clean Code
* Undetected

Dizzy 0.5c

00:15 Posted by Unknown
Hello, Welcome to my Thread for the Dizzy Client. This is the original all others are fakes and/or reuploads.

Contributors:
PurpleDizzy
glenn332
And Many Many Others!

Upcoming additions:
(-+) Radar GUI
(+) Waypoints
(-) Nearby Player Tracers (draws a line from the xhair to the person within 50m)
(+) Friends/Enemys List for ESP/Radar

(+) Complete
(-) Incomplete
(-+) Semi-Complete
(?) Unsure if I can do this or not

HOW TO BYPASS CHEATPUNCH:
Steps:
1. Download Take Ownership
2. Install Take Ownership.reg
3. Navigate to C:\Windows\System32\drivers\etc
4. Right-Click "hosts" and click "Take Ownership"
5. Edit the file with your favorite text editor
6. Add the line
Code:
Code:
127.0.0.1 gsin256345.elasticbeanstalk.com
 7. Save the file
8. Reboot for good measures

--------------------------------------------------------------------------------------------------------
Releases:

Dizzy 1.0 (Titanium Build)
RUST VERSION: 8.20.14(WORKS ON STEAM VERSION)
VAC Status: UNDETECTED!

Features:
  • Hack Menus (Toggle "F2")
  • ESP
    • Players
    • Animals
    • Resources
    • Lootables & Airdrop
    • Sleepers
    • Raid Helper
  • Player
    • Speed
    • Jump
    • Fly
    • Light
    • No Fall Damage
    • No Recoil/Spread
    • No Reload
    • Unlock All Blueprints
  • Aimbot
    • Aim FOV
    • Aim At Head
    • Aim At Animals
    • Visible Check
    • Silent/Noclip Aim
    • Auto Aim/Kill
  • UI
    • Client Watermark
    • Crosshair
    • FPS

Download Xray Freeze

00:10 Posted by Unknown
Download Xray Freeze

Mortal Kombat KE Freezed XRAY C
Simple Infinite XRAY for Mortal Kombat Komplete Edition.

This game version is the one found in ThePirateBay with the following name:

Mortal Kombat Komplete Edition Steam-Rip MULTi6 RG-GameWorks
(If you find two of them, it's the one with most seeders)

1. Open MKKE
2. Open the Cheat Table
3. Select MKKE Process
4. Press Numpad 1
5. Enjoy


Download GenericDX.7z

00:06 Posted by Unknown
Download GenericDX.7z

Surprisingly I haven't found any existing information about this type of hooking and decided to implement it myself. The whole idea I believe belongs to Indy(Clerk), but there wasn't any code back then.

The point of this approach is to destroy some pointer value then catch generated exception and trace code up to target function. Full tracing can add significant performance hit, so trace engine skips function calls by invalidating return address upon entering each new function and waiting for exception on function return.

Pros:
- No code or page protection modifications. Even pointers in the heap can be used
- Harder to detect than other methods
- Hooking point may belong to virtually any function involved in target function execution path

Cons:
- Hard to implement
- Each hook must be carefully analyzed beforehand
- Can add noticeable performance hit

Also my implementation has multithreading issues and I still haven't found stable way to distinguish different hook tracing paths in exception handler.



Example:

I took Text3D.exe sample from directx SDK to demonstrate how it all works. Target functions are BeginScene and EndScene.

Application execution flow:
DXUTRender3DEnvironment9->OnFrameRender->BeginScene...EndScene.

Although it is possible to hook functions directly from OnFrameRender, I've chosen to destroy pointer to OnFrameMove for the sake of demonstration.

DXUTRender3DEnvironment9 fragment:
PHP Code:
 
v15 = GetDXUTState();
  v40 = DXUTState::GetFrameMoveFunc(v15);
  if ( !v40
    || (v16 = GetDXUTState(),
        v17 = DXUTState::GetFrameMoveFuncUserContext(v16),
        ((void (__stdcall *)(_DWORD, _DWORD, _DWORD, int))v40)(LODWORD(v37), HIDWORD(v37), LODWORD(v39), v17),  // OnFrameMove
        (v1 = DXUTGetD3D9Device()) != 0) )
  {
    v18 = GetDXUTState();
    if ( !(unsigned __int8)DXUTState::GetRenderingPaused(v18) )
    {
      v19 = GetDXUTState();
      v40 = DXUTState::GetD3D9FrameRenderFunc(v19);
      if ( v40 )
      {
        v20 = GetDXUTState();
        v21 = DXUTState::GetD3D9FrameRenderFuncUserContext(v20);
        ((void (__stdcall *)(int, _DWORD, _DWORD, _DWORD, int))v40)(v1, LODWORD(v37), HIDWORD(v37), LODWORD(v39), v21);  // OnFrameRender   
 
 
 After pointer to OnFrameMove is destroyed exception will occur upon execution of invalid address. Tracing path will be the following:

1. Return from OnFrameMove
2. Single-step and skip function calls until OnFrameRender is invoked.
3. Single-step and skip function calls until BeginScene and EndScene are invoked.

Now to the code.

Hook installation (dllmain.cpp):
PHP Code:
 
#include "HookMgr.h"
using namespace hook;
#ifdef _M_AMD64
#define STORAGE_OFST 0x70EF8
#define HOOK_OFST    0x420//0x468
#define FUNC_PTR     0x47B58
#else
#define STORAGE_OFST 0x67F8C
#define HOOK_OFST    0x370//0x394
#define FUNC_PTR     0x45F73
#endif
typedef HRESULT( __stdcall* fnEndScene )(IDirect3DDevice9*); fnEndScene pEndScene = nullptr; fnEndScene pBeginScene = nullptr;
HRESULT __stdcall hkEndScene( IDirect3DDevice9* arg )
{
    OutputDebugStringA( "hkEndScene called\n" );
    return pEndScene( arg );
}
HRESULT __stdcall hkBeginScene( IDirect3DDevice9* arg )
{
    OutputDebugStringA( "hkBeginScene called\n" );
    return pBeginScene( arg );
}
void Hook()
{
    uintptr_t hMain = (uintptr_t)GetModuleHandleW( NULL );
    uint8_t* pDxStorage = *(uint8_t**)(hMain + STORAGE_OFST);
    uintptr_t* pDxDevice = *(uintptr_t**)(pDxStorage + sizeof(void*));

    pEndScene = *(fnEndScene*)(*pDxDevice + 0x2A * sizeof(void*));
    pBeginScene = *(fnEndScene*)(*pDxDevice + 0x29 * sizeof(void*));

    HookContext::vecState path{ TS_StepOut, { TS_StepInto, hMain + FUNC_PTR }, TS_Step };

    HookMgr::Instance().ApplyHook( pEndScene, &hkEndScene, pDxStorage + HOOK_OFST, path );
    HookMgr::Instance().ApplyHook( pBeginScene, &hkBeginScene, pDxStorage + HOOK_OFST );
}
void Unhook()
{
    HookMgr::Instance().RemoveHook( pEndScene );
    HookMgr::Instance().RemoveHook( pBeginScene );

    Sleep( 100 );
}
BOOL APIENTRY DllMain( HMODULE /*hModule*/, DWORD ul_reason_for_call, LPVOID /*lpReserved*/ )
{
    switch (ul_reason_for_call)
    {
    case DLL_PROCESS_ATTACH:
        Hook();
        break;

    case DLL_PROCESS_DETACH:
        Unhook();
        break;
    }

    return TRUE;
}   
 
 Trace engine sources:
Hookmgr.h:
PHP Code:
 
#pragma once

#include "WinHeaders.h"

#include <stdint.h>
#include <vector>
#include <map>
#include <unordered_map>
namespace hook { enum TraceState {
    TS_Start,       // Initial state. Internal use only
    TS_Step,        // Do single-step
    TS_StepOut,     // Break on function return
    TS_StepInto,    // Step into specific function
    TS_WaitReturn,  // Wait for break-on-return };
struct PathNode {
    TraceState action;
    uintptr_t arg;

    PathNode( TraceState  _action, uintptr_t _arg = 0 )
        : action( _action )
        , arg( _arg ) { }
};

/// <summary>
/// Hook-related data
/// </summary> struct HookContext {
    typedef std::unordered_map<uintptr_t, std::pair<uintptr_t, bool>> mapHooks;
    typedef std::vector<PathNode> vecState;

    uintptr_t lastIP = 0;       // Previous EIP/RIP value
    uintptr_t lastSP = 0;       // Previous ESP/RSP value
    uintptr_t targetPtr = 0;    // Address causing exception
    uintptr_t origPtrVal = 0;   // Original pointer value
    uintptr_t checkIP = 0;      // Address of instruction that checks target pointer
    uintptr_t breakValue = 0;   // Value used to generate exception
    uintptr_t stateIdx = 0;     // Current state index in state vector

    TraceState state = TS_Start;    // Current tracing state
    vecState tracePath;             // Function trace path
    mapHooks hooks;                 // List of hooks associated with current pointer


    /// <summary>
    /// Reset tracing state
    /// </summary>
    void reset()
    {
        state = TS_Start;
        lastIP = lastSP = 0;
        stateIdx = 0;

        // Mark hooks as non-called
        for (auto& item : hooks)
            item.second.second = false;
    }
};

class HookMgr {

public:
    typedef std::map<uintptr_t, HookContext> mapContext;
    typedef std::vector <std::pair<uintptr_t, uintptr_t>> vecStackFrames;

public:
    ~HookMgr();
    static HookMgr& Instance();

    /// <summary>
    /// Setup hook
    /// </summary>
    /// <param name="targetFunc">Target function to be hooked</param>
    /// <param name="hookFunc">New function</param>
    /// <param name="ptrAddress">Address of pointer to destroy</param>
    /// <param name="tracePath">Function tracing path</param>
    /// <param name="checkIP">Optional. Address of instruction that checks target pointer</param>
    /// <returns>true on success, false if already hooked</returns>
    bool ApplyHook( void* targetFunc, 
                    void* hookFunc, 
                    void* ptrAddress, 
                    const HookContext::vecState& tracePath = HookContext::vecState(),
                    void* checkIP = 0 );

    /// <summary>
    /// Remove existing hook
    /// </summary>
    /// <param name="targetFunc">Target function ptr</param>
    /// <returns>true on success, false if not found</returns>
    bool RemoveHook( void* targetFunc );

private:
    // 
    // Singleton
    //
    HookMgr();
    HookMgr( const HookMgr& ) = delete;
    HookMgr& operator =( const HookMgr& ) = delete;

    //
    // Exception handlers
    //
    static LONG __stdcall VecHandler( PEXCEPTION_POINTERS ExceptionInfo );
    LONG VecHandlerP( PEXCEPTION_POINTERS ExceptionInfo );

    /// <summary>
    /// Capture stack frames
    /// </summary>
    /// <param name="ip">Current instruction pointer</param>
    /// <param name="sp">Current stack pointer</param>
    /// <param name="results">Found frames.</param>
    /// <param name="depth">Frame depth limit</param>
    /// <returns>Number of found frames</returns>
    size_t StackBacktrace( uintptr_t ip, uintptr_t sp, vecStackFrames& results, uintptr_t depth = 10 );

    /// <summary>
    /// Setup exception upon function return
    /// </summary>
    /// <param name="ExceptionInfo">The exception information</param>
    inline void BreakOnReturn( uintptr_t sp );

    /// <summary>
    /// Check if last instruction caused branching
    /// </summary>
    /// <param name="ctx">Current hook info</param>
    /// <param name="ip">Instruction pointer</param>
    /// <param name="sp">Stack pointer</param>
    /// <returns>True if branching has occurred</returns>
    bool CheckBranching( const HookContext& ctx, uintptr_t ip, uintptr_t sp );

    /// <summary>
    /// Handle branching
    /// </summary>
    /// <param name="ctx">Current hook context</param>
    /// <param name="exptContex">Thread context</param>
    void HandleBranch( HookContext& ctx, PCONTEXT exptContex );

    /// <summary>
    /// Restore original pointer value
    /// </summary>
    /// <param name="ctx">The CTX.</param>
    /// <param name="ExceptionInfo">The exception information</param>
    /// <returns>true on success, false if no invalid register was found</returns>
    bool RestorePtr( const HookContext& ctx, PEXCEPTION_POINTERS ExceptionInfo );

private:
    PVOID       _pExptHandler = nullptr;        // Exception handler
    mapContext  _contexts;                      // Hook contexts
    uintptr_t   _breakPtr = 0x2000;             // Exception pointer generator
    uintptr_t   _lastCtx = 0;
};

}   
 
 HookMgr.cpp:
PHP Code:
 
#define BEA_USE_STDCALL
#include "BeaEngine/headers/BeaEngine.h"

#include <algorithm>

#define HIGHEST_BIT_SET     (1LL << (sizeof(void*) * 8 - 1))
#define HIGHEST_BIT_UNSET  ~HIGHEST_BIT_SET
#define SingleStep          0x100

// Architecture-specific
#ifdef _M_AMD64
#define Nip Rip
#define Nsp Rsp
#define Ndi Rdi
#define Nax Rax

#define ADDR_MASK 0xFFFFFFFFFFFFF000

#else
#define Nip Eip
#define Nsp Esp
#define Ndi Edi
#define Nax Eax

#define ADDR_MASK 0xFFFFF000
#endif
namespace hook {
HookMgr::HookMgr()
{
}
HookMgr::~HookMgr()
{
    if (_pExptHandler != nullptr)
        RemoveVectoredExceptionHandler( _pExptHandler );
}
HookMgr& HookMgr::Instance()
{
    static HookMgr instance;  
    return instance;
}
/// <summary>
/// Setup hook
/// </summary>
/// <param name="targetFunc">Target function to be hooked</param>
/// <param name="hookFunc">New function</param>
/// <param name="ptrAddress">Address of pointer to destroy</param>
/// <param name="tracePath">Function tracing path</param>
/// <param name="checkIP">Optional. Address of instruction that checks target pointer</param>
/// <returns>true on success, false if already hooked</returns> bool HookMgr::ApplyHook( void* targetFunc, 
                         void* hookFunc, 
                         void* ptrAddress, 
                         const HookContext::vecState& tracePath /*= HookContext::vecState()*/,
                         void* chekcIP /*= 0*/)
{
    // Pointer already present
    if (_contexts.count( (uintptr_t)ptrAddress ))
    {
        HookContext& ctx = _contexts[(uintptr_t)ptrAddress];

        // Already hooked
        if (ctx.hooks.count( (uintptr_t)targetFunc ))
            return false;
        else
            ctx.hooks.emplace( std::make_pair( (uintptr_t)targetFunc, std::make_pair( (uintptr_t)hookFunc, false ) ) );
    }
    // Create new context
    else
    {
        HookContext ctx;

        // Setup context
        ctx.targetPtr = (uintptr_t)ptrAddress;
        ctx.checkIP = (uintptr_t)chekcIP;
        ctx.origPtrVal = *(uintptr_t*)ptrAddress;
        ctx.breakValue = _breakPtr;
        ctx.tracePath = tracePath;

        ctx.hooks.emplace( std::make_pair( (uintptr_t)targetFunc, std::make_pair( (uintptr_t)hookFunc, false ) ) );
        _contexts.emplace( std::make_pair( (uintptr_t)ptrAddress, std::move( ctx ) ) );

        if (_pExptHandler == nullptr)
            _pExptHandler = AddVectoredExceptionHandler( 0, &HookMgr::VecHandler );

        // Setup exception
        *(uintptr_t*)ptrAddress = ctx.breakValue;
        _breakPtr += 0x10;
    }

    return true;
}
/// <summary>
/// Remove existing hook
/// </summary>
/// <param name="targetFunc">Target function ptr</param>
/// <returns>true on success, false if not found</returns> bool HookMgr::RemoveHook( void* targetFunc )
{
    auto findfn = [targetFunc]( const mapContext::value_type& val ) { 
        return val.second.hooks.count( (uintptr_t)targetFunc );
    };

    // Get context containing target function
    auto iter = std::find_if( _contexts.begin(), _contexts.end(), findfn );
                              
    if (iter != _contexts.end())
    {
        auto& ctx = iter->second;

        // Remove function from list
        ctx.hooks.erase( (uintptr_t)targetFunc );

        if (ctx.hooks.empty())
        {
            // Remove hook itself
            *(uintptr_t*)ctx.targetPtr = ctx.origPtrVal;
            _contexts.erase( iter );
        }

        // Before handler is removed we need to make sure no thread will 
        // generate exception again
        Sleep( 10 );

        // Remove exception handler
        if (_contexts.empty() && _pExptHandler != nullptr)
        {
            RemoveVectoredExceptionHandler( _pExptHandler );
            _pExptHandler = nullptr;
        }

        return true;
    }

    return false;
}

/// <summary>
/// Exception handler
/// </summary>
/// <param name="ExceptionInfo">The exception information</param>
/// <returns>Handling status</returns> LONG __stdcall HookMgr::VecHandler( PEXCEPTION_POINTERS ExceptionInfo )
{
    return Instance().VecHandlerP( ExceptionInfo );
}
/// <summary>
/// Exception handler
/// </summary>
/// <param name="ExceptionInfo">The exception information</param>
/// <returns>Handling status</returns> LONG HookMgr::VecHandlerP( PEXCEPTION_POINTERS ExceptionInfo )
{
    auto exptContex = ExceptionInfo->ContextRecord;
    auto exptRecord = ExceptionInfo->ExceptionRecord;
    auto exptCode   = exptRecord->ExceptionCode;

    // TODO: Somehow determine current hook context
    HookContext* ctx = &_contexts.begin()->second;

    // Check if exception should be handled
    if (exptCode != EXCEPTION_SINGLE_STEP && exptCode != EXCEPTION_ACCESS_VIOLATION)
    {
        return EXCEPTION_CONTINUE_SEARCH;
    }
    else if (exptCode == EXCEPTION_ACCESS_VIOLATION && (ctx->state == TS_Step || ctx->state == TS_StepInto))
    {
        if ((exptRecord->ExceptionInformation[1] & ADDR_MASK) != (ctx->breakValue & ADDR_MASK))
            return EXCEPTION_CONTINUE_SEARCH;

        // Pointer accessed by non-target address 
        if (ctx->checkIP != 0 && exptContex->Nip != ctx->checkIP)
        {
            exptContex->EFlags |= SingleStep;

            RestorePtr( *ctx, ExceptionInfo );
            return EXCEPTION_CONTINUE_EXECUTION;
        }
    }
    
    switch (ctx->state)
    {
        // Start of tracing
        case TS_Start:
            {
                ctx->state = ctx->tracePath[ctx->stateIdx].action;

                RestorePtr( *ctx, ExceptionInfo );
                return VecHandlerP( ExceptionInfo );
            }
            break;

        // Single step
        case TS_Step:
            {
                // Function call occurred. Queue break on return.
                if (CheckBranching( *ctx, exptContex->Nip, exptContex->Nsp ))
                {
                    // Target function reached
                    if (ctx->hooks.count( exptContex->Nip ))
                    {
                        HandleBranch( *ctx, exptContex );
                        return EXCEPTION_CONTINUE_EXECUTION;
                    }
                    else
                    {
                        ctx->state = TS_WaitReturn;
                        BreakOnReturn( exptContex->Nsp );
                    }
                }
                // Step further
                else
                    exptContex->EFlags |= SingleStep;
            }
            break;

        // Step out from function
        case TS_StepOut:
            {
                // Get current stack frame
                vecStackFrames frames;
                StackBacktrace( exptContex->Nip, exptContex->Nsp, frames, 1 );

                if (frames.size() > 1)
                {
                    ctx->stateIdx++;
                    ctx->state = TS_WaitReturn;
                    BreakOnReturn( frames.back().first );
                }
            }
            break;

        // Step into specific function
        case TS_StepInto:
            {
                // Check if step into path function has occurred
                if (CheckBranching( *ctx, exptContex->Nip, exptContex->Nsp ))
                {
                    if (exptContex->Nip == ctx->tracePath[ctx->stateIdx].arg)
                    {
                        ctx->stateIdx++;
                        ctx->state = ctx->tracePath[ctx->stateIdx].action;
                    }
                }

                exptContex->EFlags |= SingleStep;
            }
            break;

        // Break on 'ret' instruction
        case TS_WaitReturn:
            {
                exptContex->Nip &= HIGHEST_BIT_UNSET;

                // Restore stack for x64
            #ifdef _M_AMD64
                *(uintptr_t*)exptContex->Nsp &= HIGHEST_BIT_UNSET;
            #endif // _M_AMD64

                // Continue stepping
                exptContex->EFlags |= SingleStep;
                ctx->state = ctx->tracePath[ctx->stateIdx].action;
            }
            break;

        default:
            break;
    }

    ctx->lastIP = exptContex->Nip;
    ctx->lastSP = exptContex->Nsp;
    
    return EXCEPTION_CONTINUE_EXECUTION;
}

/// <summary>
/// Check if last instruction caused branching
/// </summary>
/// <param name="ctx">Current hook info</param>
/// <param name="ip">Instruction pointer</param>
/// <param name="sp">Stack pointer</param>
/// <returns>True if branching has occurred</returns> bool HookMgr::CheckBranching( const HookContext& ctx, uintptr_t ip, uintptr_t sp )
{
    // Not yet initialized
    if (ctx.lastIP == 0 || ctx.lastSP == 0)
        return false;

    // Difference in instruction pointer more than possible 'call' length
    // Stack pointer changed
    if (ip - ctx.lastIP >= 8 && sp != ctx.lastSP)
    {
        DISASM info = { 0 };
        info.EIP = ctx.lastIP;

    #ifdef _M_AMD64
        info.Archi = 64;
    #endif  

        // Double-check call instruction using disasm
        if (Disasm( &info ) > 0 && info.Instruction.BranchType == CallType)
            return true;
    }

    return false;
}
/// <summary>
/// Handle branching
/// </summary>
/// <param name="ctx">Current hook context</param>
/// <param name="exptContex">Thread context</param> void HookMgr::HandleBranch( HookContext& ctx, PCONTEXT exptContex )
{
    // Mark this hook as called
    ctx.hooks[exptContex->Nip].second = true;

    // Reset tracing state if all hooks were called
    auto iter = std::find_if( ctx.hooks.begin(), ctx.hooks.end(),
                              []( const decltype(ctx.hooks)::value_type& val ){ return (val.second.second == false); } );

    // Break after hook execution
    if (iter != ctx.hooks.end())
    {
        ctx.state = TS_WaitReturn;
        BreakOnReturn( exptContex->Nsp );
    }
    // Reset state
    else
        ctx.reset();

    // Reroute to hook function
    exptContex->Nip = ctx.hooks[exptContex->Nip].first;
}

/// <summary>
/// Setup exception upon function return
/// </summary>
/// <param name="ExceptionInfo">The exception information</param> inline void HookMgr::BreakOnReturn( uintptr_t sp )
{
    *(DWORD_PTR*)sp |= HIGHEST_BIT_SET;
}
/// <summary>
/// Restore original pointer value
/// </summary>
/// <param name="ctx">The CTX.</param>
/// <param name="ExceptionInfo">The exception information</param>
/// <returns>true on success, false if no invalid register was found</returns> bool HookMgr::RestorePtr( const HookContext& ctx, PEXCEPTION_POINTERS ExceptionInfo )
{
    bool found = false;
    auto expCtx = ExceptionInfo->ContextRecord;

    // Exception on execute
    if (ExceptionInfo->ExceptionRecord->ExceptionInformation[0] == 8)
    {
        expCtx->Nip = ctx.origPtrVal;
        return true;
    }

    // Exception on read/write
#ifdef _M_AMD64
    for (DWORD_PTR* pRegVal = &expCtx->Rax; pRegVal <= &expCtx->R15; pRegVal++) #else
    for (DWORD_PTR* pRegVal = &expCtx->Ndi; pRegVal <= &expCtx->Nax; pRegVal++)   #endif
    {
        // Compare high address parts
        if ((*pRegVal & ADDR_MASK) == (ExceptionInfo->ExceptionRecord->ExceptionInformation[1] & ADDR_MASK))
        {
            *pRegVal = ctx.origPtrVal;
            found = true;
        }
    }

    return found;
}
/// <summary>
/// Capture stack frames
/// </summary>
/// <param name="ip">Current instruction pointer</param>
/// <param name="sp">Current stack pointer</param>
/// <param name="results">Found frames.</param>
/// <param name="depth">Frame depth limit</param>
/// <returns>Number of found frames</returns> size_t HookMgr::StackBacktrace( uintptr_t ip, uintptr_t sp, vecStackFrames& results, uintptr_t depth /*= 10 */ )
{
    SYSTEM_INFO sysinfo = { 0 };
    uintptr_t stack_base = (uintptr_t)((PNT_TIB)NtCurrentTeb())->StackBase;

    GetNativeSystemInfo( &sysinfo );

    // Store exception address
    results.emplace_back( std::make_pair( 0, ip ) );

    // Walk stack
    for (uintptr_t stackPtr = sp; stackPtr < stack_base && results.size() <= depth; stackPtr += sizeof(void*))
    {
        uintptr_t stack_val = *(uintptr_t*)stackPtr;
        MEMORY_BASIC_INFORMATION meminfo = { 0 };

        // Decode value
        uintptr_t original = stack_val & HIGHEST_BIT_UNSET;

        // Invalid value
        if ( original < (uintptr_t)sysinfo.lpMinimumApplicationAddress ||
             original > (uintptr_t)sysinfo.lpMaximumApplicationAddress)
        {
            continue;
        }

        // Check if memory is executable
        if (VirtualQuery( (LPVOID)original, &meminfo, sizeof(meminfo) ) != sizeof(meminfo))
            continue;

        if ( meminfo.Protect != PAGE_EXECUTE_READ &&
             meminfo.Protect != PAGE_EXECUTE_WRITECOPY &&
             meminfo.Protect != PAGE_EXECUTE_READWRITE)
        {
            continue;
        }

        // Detect 'call' instruction
        for (uintptr_t j = 1; j < 8; j++)
        {
            DISASM info = { 0 };
            info.EIP = original - j;

        #ifdef _M_AMD64
            info.Archi = 64;
        #endif  

            if (Disasm( &info ) > 0 && info.Instruction.BranchType == CallType)
            {
                results.emplace_back( std::make_pair( stackPtr, stack_val ) );
                break;
            }
        }

    }

    return results.size();
}

}  

The code probably has some bugs and is subject to improve.
 
Download GenericDX.7z