 |
Cheat Engine The Official Site of Cheat Engine
|
| View previous topic :: View next topic |
| Author |
Message |
SalvationD Expert Cheater
Reputation: 0
Joined: 26 Jun 2006 Posts: 148
|
Posted: Fri Aug 29, 2008 1:24 pm Post subject: Requesting help with AA // Code Caving |
|
|
Alright so I'm looking at Rohan, there's a few hacks that can be done in Ollydbg, and are being done, but I don't know how to bypass the hack protection using Ollydbg (straight up in the .exe) so using an UCE, can someone tell me how I would go about adding a few things into a script.
For example it's wrote:
To Start Code Cave
Do THIS b4 anythin else
Go to 00426DF0 and change the command to RETN.
Now highlight and select from address 00426DF1 to 00426F69, right click, Binary -> Fill with NOPs.
AND I also wanna do..
PART of what is suppose to go in the code cave goes like this
Go to 00426E04 and put:
MOV EDX,DWORD PTR DS:[0AF32E4]
MOV EAX,DWORD PTR DS:[0AF32E0]
PUSH EDX
PUSH EAX
go to the address 00410775 you should see this:
MOVZX EAX,BYTE PTR SS:[ESP+A9]
Change the code at 00410775 to CALL 00426DF2 .
Go to 00426DF2 and write this code:
MOV BYTE PTR SS:[ESP+0A9],0FA
MOVZX EAX,BYTE PTR SS:[ESP+0A9]
RETN
bypass the cus filter
Change code at 004D29EC to JMP SHORT 004D2A0A .
Since I can open Rohan and play it., how in the world would I actually inject those or assemble those in Rohan while the game is going (Using Cheat Engine)? I know Maplestory use to do a vac with some code caving, but I need some noob guidance here, please  |
|
| Back to top |
|
 |
sponge I'm a spammer
Reputation: 1
Joined: 07 Nov 2006 Posts: 6009
|
Posted: Fri Aug 29, 2008 6:28 pm Post subject: |
|
|
| Code: | [enable]
00426DF0:
retn
nop the rest
[disable]
original command |
| Code: | [enable]
426df1:
dd 90909090 //copy this line and make sure there are 94 lines of dd 90909090
[disable]
// so big that just restart to restore it |
| Code: | [enable]
426e04:
MOV EDX,[0AF32E4]
MOV EAX,[0AF32E0]
PUSH EDX
PUSH EAX
00410775:
call 00426df2
00426df2:
MOV [ESP+0A9],0FA
MOVZX EAX,[ESP+0A9]
RETN
[disable]
//ill leave you to do the disabling. |
| Code: | [enable]
004D29EC:
JMP 004D2A0A
[disable]
// same thing. |
_________________
|
|
| Back to top |
|
 |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
|