Unwrapped Console.

+ 0x**

Originally Posted by Fabolous

+ 0x**

wasn't right anyways, why bother blocking it?

Originally Posted by Cryptonic

wasn't right anyways, why bother blocking it?

Lol i had the actual numbers for 2 hours then changed it to ** so tough luck if you missed it. This thread was ghost town no one even saw lmaO.

Originally Posted by Fabolous

Lol i had the actual numbers for 2 hours then changed it to ** so tough luck if you missed it. This thread was ghost town no one even saw lmaO.

Yeah, wrong addy. I added what you had there to the old one. Doesn't work.

Originally Posted by Fabolous

Lol i had the actual numbers for 2 hours then changed it to ** so tough luck if you missed it. This thread was ghost town no one even saw lmaO.

Yeah.. I scanned the addy with offsets you provided and idt method works :O

@NOOB, You're CONTRIBUFORCE...
Contributes with us

Originally Posted by Osama B. L.

@NOOB, You're CONTRIBUFORCE...
Contributes with us

Contribuforce is about releasing a lot of hacks. Nothing else.

Originally Posted by NOOB

Contribuforce is about releasing a lot of hacks. Nothing else.

ok.
But not can makes this goodness?

Originally Posted by Osama B. L.

ok.
But not can makes this goodness?

Learn to get it yourself. Don't depend on others for your problems.

There are TUTS for sure, but if you actually tried googling and searched a bit harder, im sure you would find it.

Originally Posted by Osama B. L.

ok.
But not can makes this goodness?

Originally Posted by SNal2F

Fuckin obvioulsy how would i have gotten that without knowing the jmp to the real .......

real +208

Code:

0046FA40 A1 3C001037 MOV EAX,DWORD PTR DS:[3710003C] 0046FA45 8B88 2C001037 MOV ECX,DWORD PTR DS:[EAX+3710002C] 0046FA4B 8B1424 MOV EDX,DWORD PTR SS:[ESP] 0046FA4E 05 00001037 ADD EAX,37100000 0046FA53 81C1 00001037 ADD ECX,37100000 0046FA59 3BD1 CMP EDX,ECX 0046FA5B 72 0E JB SHORT Engine.0046FA6B 0046FA5D 8B40 50 MOV EAX,DWORD PTR DS:[EAX+50] 0046FA60 03C1 ADD EAX,ECX 0046FA62 3BD0 CMP EDX,EAX 0046FA64 73 05 JNB SHORT Engine.0046FA6B 0046FA66 E9 A5630100 JMP Engine.00485E10 //1st one 0046FA6B C3 RETN

Code:

00485E10 8B4424 04 MOV EAX,DWORD PTR SS:[ESP+4]//can see szcommand parameter moved and pushed below 00485E14 50 PUSH EAX 00485E15 68 F0038000 PUSH Engine.008003F0 00485E1A E8 A1EDFFFF CALL Engine.00484BC0 //sub function can do here (unsigned long, szCommand) 00485E1F 83C4 08 ADD ESP,8 00485E22 C3 RETN

O no wai another way to do ooooooo itttttt

Code:

00484BC0 8B4424 08 MOV EAX,DWORD PTR SS:[ESP+8] 00484BC4 8B4C24 04 MOV ECX,DWORD PTR SS:[ESP+4] 00484BC8 6A 00 PUSH 0 00484BCA 6A 00 PUSH 0 00484BCC 50 PUSH EAX 00484BCD 51 PUSH ECX 00484BCE E8 2DF8FFFF CALL Engine.00484400(unsigned long,szcommand,int,int) //can do here 00484BD3 83C4 10 ADD ESP,10 00484BD6 C3 RETN

Code:

00484AB0 8B4424 0C MOV EAX,DWORD PTR SS:[ESP+C] 00484AB4 8B4C24 08 MOV ECX,DWORD PTR SS:[ESP+8] 00484AB8 8B5424 04 MOV EDX,DWORD PTR SS:[ESP+4] 00484ABC 6A 00 PUSH 0 00484ABE 50 PUSH EAX 00484ABF 51 PUSH ECX 00484AC0 52 PUSH EDX 00484AC1 E8 3AF9FFFF CALL Engine.00484400 00484AC6 83C4 10 ADD ESP,10 00484AC9 C3 RETN

pfffffffff stupid shit bro. also all of thos are faster since they are all wrapped anyways ...many more ways to do it.

.

Originally Posted by CAFlames

You are alessandro :O

u mad ?

afff

I know update...

Try this: 0x485F90

Originally Posted by Alessandro10

Try this: 0x485F90

-rep for you.
why are you so dumb?

Code:

#define RunConsoleCommand 0x46FBC0

Originally Posted by NOOB

Code:

#define RunConsoleCommand 0x46FBC0

Code:

Down o sub_474BA0-34E mov dword ptr [ecx+208h], offset sub_46FBC0 Down o ___:007DB200 dd offset sub_46FBC0

we are the contribuforce..

Post a Reply

Tags for this Thread