Results 1 to 10 of 10
  1. #1
    -Bl00d-'s Avatar
    Join Date
    Sep 2011
    Gender
    female
    Location
    Imma girl what about it?
    Posts
    481
    Reputation
    10
    Thanks
    53
    My Mood
    Twisted

    LocalPlayer reversing

    im a bit stuck here/
    i know i probably wont get much help here,
    so ill post her and at UC.
    its ASM so...
    I was reversing LocalPlayer
    (thats where a reliable source told me to work at)
    and i come across this:

    Code:
    loopne  near ptr dword_372CB000+7ECh
    test    ds:0C8D62EF7h, edi
    bound   esp, [eax-3EDE4AE9h]
    les     edx, [ebx+3Ah]
    cmc
    lea     edx, [esi]
    jo      short near ptr dword_372CB000+7F8h
    jo      short loc_372CB8DF
    jle     short loc_372CB853
    and     ebp, 23h
    db      3Eh, 64h
    push    edx
    test    [edx], bl
    imul    esi, [ebp+7E62589h], 77h
    have at it

  2. #2
    Flengo's Avatar
    Join Date
    May 2010
    Gender
    male
    Location
    /admincp/banning.php
    Posts
    20,591
    Reputation
    5180
    Thanks
    14,178
    My Mood
    Inspired
    What were you trying to do and what exactly were you stuck at doing.

    Provide some more information about the situation please.
    I Read All Of My PM's & VM's
    If you need help with anything, just let me know.

     


     
    VM | PM | IM
    Staff Administrator Since 10.13.2019
    Publicist Since 04.04.2015
    Middleman Since 04.14.2014
    Global Moderator Since 08.01.2013
    Premium Since 05.29.2013

    Minion+ Since 04.18.2013

    Combat Arms Minion Since 12.26.2012
    Contributor Since 11.16.2012
    Member Since 05.11.2010


  3. #3
    -Bl00d-'s Avatar
    Join Date
    Sep 2011
    Gender
    female
    Location
    Imma girl what about it?
    Posts
    481
    Reputation
    10
    Thanks
    53
    My Mood
    Twisted
    i kinda figured it out.
    i achieved what i set out to do.
    i was just trying to figure out what
    test [edx], bl
    actually did.
    turns out whatever it does, doesnt matter too much,
    it didnt cause any damage not knowing
    i understand
    test [edx]
    but not understanding the point of "bl" at the end

  4. #4
    Ch40zz-C0d3r's Avatar
    Join Date
    Apr 2011
    Gender
    male
    Posts
    831
    Reputation
    44
    Thanks
    401
    My Mood
    Twisted
    Its same like
    Code:
    test dword ptr [eax], 2000h
    It "tests" with the AND operator if the pointer EAX is pointing to a varibale value which is actually 2000h (8192d), and then set its flags

    Progress with my game - "Disbanded"
    • Fixed FPS lag on spawning entities due to the ent_preload buffer!
    • Edit the AI code to get some better pathfinding
    • Fixed the view bug within the sniper scope view. The mirror entity is invisible now!
    • Added a new silencer for ALL weapons. Also fixed the rotation bugs
    • Added a ton of new weapons and the choice to choose a silencer for every weapon
    • Created a simple AntiCheat, noobs will cry like hell xD
    • The name will be Disbanded, the alpha starts on the 18th august 2014



    Some new physics fun (Serversided, works on every client)



    My new AI
    https://www.youtube.com/watch?v=EMSB1GbBVl8

    And for sure my 8 months old gameplay with 2 friends
    https://www.youtube.com/watch?v=Na2kUdu4d_k

  5. The Following 2 Users Say Thank You to Ch40zz-C0d3r For This Useful Post:

    -Bl00d- (12-04-2012),[MPGH]Flengo (12-04-2012)

  6. #5
    legendy's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Location
    Los Angeles
    Posts
    16
    Reputation
    10
    Thanks
    6
    My Mood
    Aggressive
    The real answer you are looking for is.

    Code:
    test    [edx], bl // Tests the value of edx with BL to see if they match.
    bl comes from ebx which is a 32 bit register bx is 16 bit register so bl come from bx since bx has a bh and bl
    ana base high and base low which means the high 8 bits and low 8 bits so you are using the low 8 bits of ebx which is equivalent to one byte.

    8 bit register can hold up to a value of 255. so your code is comparing if(edx == bl)
    and as hint the value is comparing is less than 255 since ur using an 8bit register have fun.

  7. #6
    -Bl00d-'s Avatar
    Join Date
    Sep 2011
    Gender
    female
    Location
    Imma girl what about it?
    Posts
    481
    Reputation
    10
    Thanks
    53
    My Mood
    Twisted
    Quote Originally Posted by legendy View Post
    The real answer you are looking for is.

    Code:
    test    [edx], bl // Tests the value of edx with BL to see if they match.
    bl comes from ebx which is a 32 bit register bx is 16 bit register so bl come from bx since bx has a bh and bl
    ana base high and base low which means the high 8 bits and low 8 bits so you are using the low 8 bits of ebx which is equivalent to one byte.

    8 bit register can hold up to a value of 255. so your code is comparing if(edx == bl)
    and as hint the value is comparing is less than 255 since ur using an 8bit register have fun.
    so theoretically....
    in this "test"
    if
    exd = bl
    then
    continue
    else
    exit
    .......
    possibly what its for?
    Successful buys: 20
    Successful sells: 4
    Successful trades: 9
    Scammed: 4

     
    https://www.mpgh.net/forum/490-vouches/560562-vouches.html

    ^^^^^^^^^^^
    vouche for me?

  8. #7
    legendy's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Location
    Los Angeles
    Posts
    16
    Reputation
    10
    Thanks
    6
    My Mood
    Aggressive
    it depends on what the rest of the assembly look like but yeah it is a condition. which will set your flags and possible conditional jumps around there.
    if you want add me on skype. teamnonymous i can help you out with what ever your doing since im bored and got nothing to do o:

  9. The Following User Says Thank You to legendy For This Useful Post:

    -Bl00d- (12-06-2012)

  10. #8
    -Bl00d-'s Avatar
    Join Date
    Sep 2011
    Gender
    female
    Location
    Imma girl what about it?
    Posts
    481
    Reputation
    10
    Thanks
    53
    My Mood
    Twisted
    Quote Originally Posted by legendy View Post
    it depends on what the rest of the assembly look like but yeah it is a condition. which will set your flags and possible conditional jumps around there.
    if you want add me on skype. teamnonymous i can help you out with what ever your doing since im bored and got nothing to do o:
    i remember the name legendy but cant remember where it was from.
    Successful buys: 20
    Successful sells: 4
    Successful trades: 9
    Scammed: 4

     
    https://www.mpgh.net/forum/490-vouches/560562-vouches.html

    ^^^^^^^^^^^
    vouche for me?

  11. #9
    Departure's Avatar
    Join Date
    Nov 2010
    Gender
    male
    Posts
    805
    Reputation
    125
    Thanks
    1,794
    My Mood
    Doh
    Registers - SkullSecurity

    In addition to the 8 32-bit registers available, there are also a number of 16-bit and 8-bit registers. The confusing thing about these registers it that they use the same storage space as the 32-bit registers. In other words, every 16-bit register is half of one of the 32-bit registers, so that changing the 16-bit also changes the 32-bit. Furthermore, the 8-bit registers are part of the 16-bit registers.
    For example, eax is a 32-bit register. The lower half of eax is ax, a 16-bit register. ax is divided into two 8-bit registers, ah and al (a-high and a-low).
    There are 8 32-bit registers: eax, ebx, ecx, edx, esi, edi, ebp, esp.
    There are 8 16-bit registers: ax, bx, cx, dx, si, di, bp, sp.
    There are 8 8-bit registers: ah, al, bh, bl, ch, cl, dh, dl.
    Last edited by Departure; 12-08-2012 at 08:27 AM.
    DJector.Lite
    Get the advantages of new injection technology, with 1 click easy to use injector, work for all platforms x86/x64

    Download

    D-Jector
    Get the most advanced and full featured injector around, works for any game and any platform x86/x64, nothing comes even close.
    Download

  12. The Following User Says Thank You to Departure For This Useful Post:

    -Bl00d- (12-08-2012)

  13. #10
    Genesis's Avatar
    Join Date
    Nov 2012
    Gender
    male
    Location
    Terra Australis
    Posts
    4,221
    Reputation
    1391
    Thanks
    2,528
    Quote Originally Posted by -Bl00d- View Post


    i remember the name legendy but cant remember where it was from.
    He's a programmer/coder from like 2009.

Similar Threads

  1. reverse e-mail search
    By ItsMeBrad in forum General
    Replies: 3
    Last Post: 10-11-2008, 11:28 AM
  2. Reversing a game with hackshield
    By Kreeg in forum Programming Tutorial Requests
    Replies: 0
    Last Post: 09-11-2008, 08:11 PM
  3. [Q] Reverse Engeneering
    By moris in forum Combat Arms Hacks & Cheats
    Replies: 7
    Last Post: 08-03-2008, 03:00 PM
  4. Reversed Jingle Bells Message
    By Q in forum General
    Replies: 13
    Last Post: 03-16-2008, 04:52 PM
  5. Reverse Engineering!
    By Jeckels in forum WarRock - International Hacks
    Replies: 13
    Last Post: 11-06-2007, 09:45 PM