Code:

 

God Mode

[ENABLE]
alloc(MyGod,64)
registersymbol(MyGod)

MyGod:
pushad
mov [ebp+c],0
mov [ebp+8],1
mov [ebp+10],0
popad
cmp [ebp+0c],ebx
jne 006D5660
jmp 006D565B

[disable]
dealloc(MyGod)
unregistersymbol(MyGod)

Add address My God
006D5656 Take addy from MyGod and put it in this eip

UA:

[enable]
alloc(UnlimitedAttack,256)
alloc(CheckIf,256)
registersymbol(CheckIf)

UnlimitedAttack:
mov eax,[00850460]
mov ebx,[eax+644]
sub ebx,00000001
mov [eax+644],ebx
popad
cmp eax,edi
mov [ebp-20],eax
je 0055FA24
jmp 0055F9C5

CheckIf:
pushad
mov eax,[00850460]
mov eax,[eax+14ac]
cmp eax,00000050
jnl UnlimitedAttack
popad
cmp eax,edi
mov [ebp-20],eax
je 0055FA24
jmp 0055F9C5

[disable]
dealloc(UnlimitedAttack)
dealloc(CheckIf)
unregistersymbol(CheckIf)



slowdupex

[ENABLE]
// EIP: SlowDX
// Address: 006DDF42  
alloc(SlowDX,32)
alloc(Pointer,32)
registersymbol(SlowDX)
registersymbol(Pointer)

SlowDX:
push ecx
mov ecx,Pointer
mov [ecx],esi
pop ecx
mov [esi+00000114],edi
jmp 0070FF73

[DISABLE]
dealloc(SlowDX)
dealloc(Pointer)
unregistersymbol(SlowDX)
unregistersymbol(Pointer)
dealloc(Pointer)
unregistersymbol(CodeCave)
unregistersymbol(Pointer)

TUBI ZF [x] [x] 004AA2B6
Lag hack ZF [x] [x] 0070D2F1
Swear hack ZF [x] [ ] 00466E58
Tele up CF [x] [ ] 0070FD39
Tele Right CF [x] [ ] 0070FCA8
Tele left CF [x] [ ] 0070FC39
Fall through floor ZF [x] [ ] 0070EFCB

YO-YO dupex
[ENABLE]
// Updated by GIORA
// GMS v50
// First EIP: YoYoDupe
// First Address: 0070FF99
// Second EIP: hookit
// Second Address: 0055FB0C
alloc(YoYoDupe, 1024)
alloc(RunFlag, 4)
alloc(ESIValue, 4)
alloc(EDIValue, 4)
alloc(ESIAddy,4)
alloc(hookit,128)
alloc(onoff,4)
registersymbol(YoYoDupe)
registersymbol(hookit)
registersymbol(onoff)
label(NoVac)
label(DupeXVac)
label(DoNormal)

onoff:
dd 0

YoYoDupe:
push eax
push ecx
mov ecx,[onoff]
cmp [onoff], 0
je DoNormal
cmp [RunFlag], ecx
je DupeXVac
mov eax, [00850460]
add eax, 658
mov eax, [eax]
sub eax, c
mov [ESIValue],eax
mov eax,[eax+114]
mov [EDIValue],eax
inc [RunFlag]
inc [RunFlag]

DupeXVac:
cmp esi,[ESIValue]
je DoNormal
push ecx
mov ecx,ESIAddy
mov [ecx],esi
pop ecx

DoNormal:
mov [esi+00000110],edi
pop ecx
pop eax
jmp 0070FF9F

ESIAddy:
db 00
db 00
db 00
db 00

RunFlag:
db 00
db 00
db 00
db 00

ESIValue:
db 00
db 00
db 00
db 00

EDIValue:
db 00
db 00
db 00
db 00

hookit:
cmp [onoff], 0
je NoVac
cmp [ESIAddy], 0
je NoVac
push eax
push ebx
mov eax,[ESIAddy]
mov ebx,[EDIValue]
mov [eax+110],ebx
mov eax,[eax+110]
mov [eax+4c],ebx
mov [eax+50],ebx
pop ebx
pop eax

NoVac:
mov [ebx+00000454],eax
jmp 0055FB12

[DISABLE]
dealloc(YoYoDupe)
dealloc(RunFlag)
dealloc(ESIValue)
dealloc(EDIValue)
dealloc(ESIAddy)
dealloc(hookit)
dealloc(onoff)
unregistersymbol(YoYoDupe)
unregistersymbol(hookit)
unregistersymbol(onoff)as you know there is many more addresses

iPwnNoobs

Feb 13 2008, 12:01 AM

Too bad there's no public UCE's.

mtanz

Feb 12 2008, 03:06 PM

iPwnNoobs

Feb 13 2008, 12:01 AM

Too bad there's no public UCE's.

uhm ..
we can use kibypass nd moonlite engine .

right ?

i'm juss waiting for the strings for rev 1148 . then i can start working on a new private engine .. i'm too lazy to find it .. plus school work ya , i'm behind on it .