
Originally Posted by
Wizdom-X
i need:
Norecoil addys
NoSpread addys
Nametag addys
and all the source codes for them
Code:
void ExchangeData(DWORD Buffer, DWORD Address, DWORD SSize, DWORD ReturnBuffer){
DWORD oldprot = NULL;
DWORD oldprot2 = NULL;
std::string OutString = "Error code: ";
char BBuffer[10] = "";
if( VirtualProtect((void*)Address, SSize, 0x40, &oldprot) == NULL){
sprintf(BBuffer,"%x",GetLastError());
OutString += Buffer;
MessageBox(NULL, OutString.c_str(), "SCHiM", MB_OK);
}
_asm{
cmp ReturnBuffer, 0
je Label3
mov eax, Address
mov ebx, ReturnBuffer
xor esi, esi
xor ecx, ecx
Label1:
mov cl, byte ptr[eax+esi]
mov byte ptr[ebx+esi], cl
inc esi
cmp esi, SSize
jne Label1
Label3:
mov eax, Buffer
mov ebx, Address
xor esi, esi
xor ecx, ecx
Label2:
mov cl, byte ptr[eax+esi]
mov byte ptr[ebx+esi], cl
inc esi
cmp esi, SSize
jne Label2
}
return;
}
ExchangeData((DWORD)&RRecoil1[0], Recoil1, sizeof(ReturnRecoil1)-1, NULL);
ExchangeData((DWORD)&RRecoil2[0], Recoil2, sizeof(ReturnRecoil1)-1, NULL);
ExchangeData((DWORD)&RRecoil3[0], Recoil3, sizeof(ReturnRecoil1)-1, NULL);
ExchangeData((DWORD)&RRecoil4[0], Recoil4, sizeof(ReturnRecoil1)-1, NULL);
ExchangeData((DWORD)&RRecoil5[0], Recoil5, sizeof(ReturnRecoil1)-1, NULL);
#define Recoil1 0x3748983B
#define Recoil2 0x37597669
#define Recoil3 0x3748984F
#define Recoil4 0x37489852
#define Recoil5 0x3748985B
char RRecoil1[] = "\x90\x90\x90";
char RRecoil2[] = "\x90\x90\x90";
char RRecoil3[] = "\x90\x90\x90\x90\x90\x90";
char RRecoil4[] = "\x90\x90\x90";
char RRecoil5[] = "\x90\x90\x90";
char ReturnRecoil1[] = "\x3B\x3C\x3D";
char ReturnRecoil2[] = "\x69\x6A\x6B";
char ReturnRecoil3[] = "\x4F\x50\x51\x52\x53\x54";
char ReturnRecoil4[] = "\x52\x53\x54";
char ReturnRecoil5[] = "\x5B\x5C\x5D";
Note: you can turn them on, but not off (for some reason CA crashes even when replacing the correct bytes back)
Also, Since I've done you a favor, you can help me too.
If you can run Kernel Detective, I'd like to have a dump of engine.exe & Cshell.dll, since I can't run KD on my system, nor have I found a 'working' replacement.
As for the no spread, that is a ptc command. But I haven't got the console address.
Gl, and please dump those files