| View previous topic :: View next topic |
| Author |
Message |
NanoByte
Expert Cheater
![]() Reputation: 1
Joined: 13 Sep 2013
Posts: 222
|
 Posted: Thu Jun 19, 2014 1:44 pm Post subject: Pushad cant be complied WTF |
 |
|
Says Pushad cant be complied and if i click OK and try to activate it, it wont acitvate. Why?
| Code: | pushad
push 12
call GetAsyncKeyState
shr ax,f
cmp ax,1
popad
jne originalcode
mov [rcx+04],40
originalcode:
movsxd rcx,dword ptr [rcx+04]
xor edx,edx |
|
|
| Back to top |
|
 |
Redouane
Master Cheater
![]() Reputation: 3
Joined: 05 Sep 2013
Posts: 363
Location: Algeria
|
| Posted: Thu Jun 19, 2014 2:59 pm Post subject: Re: Pushad cant be complied WTF |
|
|
| NanoByte wrote: | | Says Pushad cant be complied and if i click OK and try to activate it, it wont acitvate. Why? |
Pushad compiles just fine (bytecode is 0x60),The mistake is in your side,where are you injecting the code?it looks like there is no address specifier.
edit 'address' in this script,if you are allocating memory,then declare it by doing alloc(mem,64) or something then remplace address with mem.
| Code: | address:
pushad
push 12 // not sure if you meant #12 or 0x12
call GetAsyncKeyState
shr ax,f
pushfd // save the flags,because you're going to modify them
cmp ax,1
jne originalcode
mov [rcx+04],40
originalcode:
popfd
popad
movsxd rcx,dword ptr [rcx+04]
xor edx,edx |
[/code]
|
|
| Back to top |
|
|
Geri
Moderator
![]() Reputation: 111
Joined: 05 Feb 2010
Posts: 5636
|
| Posted: Thu Jun 19, 2014 3:09 pm Post subject: |
|
|
Because there is no pushad instruction for 64-bit.
_________________
Last edited by Geri on Thu Jun 19, 2014 3:19 pm; edited 2 times in total |
|
| Back to top |
|
|
NanoByte
Expert Cheater
![]() Reputation: 1
Joined: 13 Sep 2013
Posts: 222
|
| Posted: Thu Jun 19, 2014 3:14 pm Post subject: |
|
|
Woot no pushad woot do i do then?
| Code: | [ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048,55CB6CF1)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
push 12
call GetAsyncKeyState
shr ax,f
cmp ax,1
jne originalcode
mov [rcx+04],40
originalcode:
movsxd rcx,dword ptr [rcx+04]
xor edx,edx
exit:
jmp returnhere
55CB6CF1:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
55CB6CF1:
movsxd rcx,dword ptr [rcx+04]
xor edx,edx
//Alt: db 48 63 49 04 33 D2 |
[/code]
Last edited by NanoByte on Thu Jun 19, 2014 3:22 pm; edited 2 times in total |
|
| Back to top |
|
|
simonzack
Newbie cheater
![]() Reputation: 0
Joined: 19 Jun 2014
Posts: 15
|
| Posted: Thu Jun 19, 2014 3:17 pm Post subject: |
|
|
| You gotta push all the registers manually.
|
|
| Back to top |
|
|
Dark Byte
Site Admin
 Reputation: 470
Joined: 09 May 2003
Posts: 25785
Location: The netherlands
|
| Posted: Thu Jun 19, 2014 3:17 pm Post subject: |
 |
|
replace
with
| Code: |
push rax
push rbx
push rcx
push rdx
push rsi
push rdi
push rbp
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
|
and replace
with
| Code: |
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rbp
pop rdi
pop rsi
pop rdx
pop rcx
pop rbx
pop rax
|
or try to figure out which registers could have changed and only do those (search for "windows 64-bit abi")
also,
| Code: |
push 12 // not sure if you meant #12 or 0x12
call GetAsyncKeyState
|
is invalid in 64-bit
you must allocate some stackspace and pass the parameters in registers
http://msdn.microsoft.com/en-us/library/ms235286.aspx
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
|
Geri
Moderator
![]() Reputation: 111
Joined: 05 Feb 2010
Posts: 5636
|
| Posted: Thu Jun 19, 2014 3:19 pm Post subject: |
|
|
Getasynckeystate will change EAX, ECX and EDX registers, in case you want to know. I guess it's the same on 64-bit system with the 64-bit register versions.
_________________
|
|
| Back to top |
|
|
NanoByte
Expert Cheater
![]() Reputation: 1
Joined: 13 Sep 2013
Posts: 222
|
| Posted: Thu Jun 19, 2014 3:25 pm Post subject: |
|
|
Thx Alot Guys. Love CE Community 
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
