| View previous topic :: View next topic |
| Author |
Message |
guy960915 Expert Cheater
Reputation: 2
Joined: 17 Sep 2007 Posts: 168
|
Posted: Thu Jun 05, 2008 8:02 pm Post subject: what else can you put in after [DISABLE] |
|
|
| what else can you put in after [DISABLE]?
|
|
| Back to top |
|
 |
Skeer Newbie cheater
Reputation: 0
Joined: 11 May 2007 Posts: 12
|
Posted: Thu Jun 05, 2008 8:20 pm Post subject: |
|
|
| u can put dealloc, unregistersymbol, and if you changed a address with alloc then u can put what the address function returns to when u untick the code
|
|
| Back to top |
|
 |
guy960915 Expert Cheater
Reputation: 2
Joined: 17 Sep 2007 Posts: 168
|
Posted: Fri Jun 06, 2008 8:13 pm Post subject: |
|
|
dealloc - i've encounter this
unregister symbol - can you elaborate more
i have some ex. below, is this posible, i tried it but it didn't work , maybe i'm missing something?
[ENABLE]
alloc(newmem,1024)
label(returnhere)
label(originalcode)
label(exit)
BF1942.exe+2ADB4D:
jmp newmem
nop
returnhere:
newmem:
mov [edi+38],4CBEBC20 //float=99999999
originalcode:
mov edx,[edi]
mov [esp+10],ecx
exit:
jmp returnhere
[DISABLE]
mov [edi+38],43480000 //float=200
mov edx,[edi]
mov [esp+10],ecx
dealloc(newmem)
BF1942.exe+2ADB4D:
mov edx,[edi]
mov [esp+10],ecx
What i want to do is when i disable the cheat the 99999999 will return to 200.
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 475
Joined: 09 May 2003 Posts: 25987 Location: The netherlands
|
Posted: Sat Jun 07, 2008 7:04 am Post subject: |
|
|
try this:
| Code: |
[ENABLE]
alloc(newmem,1024)
alloc(realaddress,4)
registersymbol(realaddress)
label(returnhere)
label(originalcode)
label(exit)
BF1942.exe+2ADB4D:
jmp newmem
nop
returnhere:
newmem:
push eax
lea eax,[esi+38]
mov [realaddress],eax
pop eax
mov [edi+38],4CBEBC20 //float=99999999
originalcode:
mov edx,[edi]
mov [esp+10],ecx
exit:
jmp returnhere
[DISABLE]
BF1942.exe+2ADB4D:
mov edx,[edi]
mov [esp+10],ecx
realaddress:
dd 43480000
dealloc(newmem)
unregistersymbol(realaddress)
|
Just when adding it to the cheat table, make sure realaddress is already an existing variable (so execute it manually once, or add realaddress to the userdefined symbols (ctrl+u)) else the verifier will complain
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
guy960915 Expert Cheater
Reputation: 2
Joined: 17 Sep 2007 Posts: 168
|
Posted: Mon Jun 09, 2008 5:58 am Post subject: |
|
|
realaddress:
dd 43480000
what does this do and how does this work?
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 475
Joined: 09 May 2003 Posts: 25987 Location: The netherlands
|
Posted: Mon Jun 09, 2008 10:37 am Post subject: |
|
|
"dd 43480000" writes the 4 byte value 43480000 at the current address specifier (in this case that of realaddress, which is set to the address your code cave wrote last time to)
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
guy960915 Expert Cheater
Reputation: 2
Joined: 17 Sep 2007 Posts: 168
|
Posted: Mon Jun 09, 2008 7:57 pm Post subject: |
|
|
is there any tut for this, can you give me a link
thanks
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 475
Joined: 09 May 2003 Posts: 25987 Location: The netherlands
|
Posted: Mon Jun 09, 2008 8:14 pm Post subject: |
|
|
pressing F1 in ce brings up the helpfile (doesn't work if you have vista). Besides that check out the tutoruial section and auto assembler tut section
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
|