Advertisement
Guest User

Untitled

a guest
Aug 19th, 2017
54
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.24 KB | None | 0 0
  1. [Enable]
  2. alloc(miss,64)
  3. label(miss_ret)
  4. label(miss_reset)
  5.  
  6. 0095FFDA:
  7. jmp miss
  8. nop
  9. nop
  10. miss_ret:
  11.  
  12. miss:
  13. inc [miss+32]
  14. cmp dword ptr [miss+32], 07 // Number of misses
  15. jg miss_reset
  16. mov [esp+000000CC], 00 // Dmg
  17. jmp miss_ret
  18. miss_reset:
  19. mov [miss+32], 00
  20. jmp miss_ret
  21.  
  22. [Disable]
  23. 0095FFDA: // 8b 9c 24 ? 00 00 00 85 db 7f ? 8d
  24. db 8b 9c 24 cc 00 00 00
  25.  
  26. dealloc(miss)
  27.  
  28. //-------------------------------------------------------------------------
  29.  
  30. DWORD MissAddy = 0x009BE670; // 89 BE ? ? ? ? 89 8E ? ? ? ? 8B 86 ? ? ? ? 3B C1 74 5B
  31. DWORD MissRet = MissAddy+7;
  32. BYTE DupeXDBytes[] = {0x89, 0xbe, 0xa4, 0x01, 0x00, 0x00};
  33.  
  34. __declspec(naked) void __stdcall MissASM()
  35. {
  36. __asm
  37. {
  38. inc [MissASM+0x32]
  39. cmp dword ptr [MissASM+0x32],0x07
  40. jg MissReset
  41. mov [esp+0x000000CC], 0x00
  42. jmp MissRet
  43. MissReset:
  44. mov [MissASM+0x32], 0x00
  45. jmp MissRet
  46. }
  47. }
  48.  
  49. BYTE OldMemBuff4[8];
  50.  
  51. void Form1::checkBox??_CheckedChanged(System::Object^ sender, System::EventArgs^ e)
  52. {
  53. if(this->checkBox??->Checked)
  54. {
  55. JumpCall(true, (BYTE*)MissAddy, (void*)&MissASM, (BYTE*)&OldMemBuff4[0], 2);
  56. }
  57. else
  58. {
  59. memcpy((void*)MissAddy,MissDBytes,sizeof(MissDBytes));
  60. }
  61. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement