The Dark AllianceASM Knowledge, Game Hacking Info
   Home   Help Search Login Register  
Welcome, Guest. Please login or register.

Login with username, password and session length
Pages: [1]
  Send this topic  |  Print  
Author Topic: rogstars jumps and flags addys  (Read 562 times)
rogstars
Guest
« on: September 23, 2006, 10:07:29 PM »

these are some of the addys i found myself for Msea 0.33
i've shared some to a few of u here already
try to find for GMS

Speed goes right
00632AD9
Value: 1300965238(4 bytes)
tick both CF
yet to find another 1 for left

Items Disappear (Client sided)
00486A04
Value: 17402895(4 bytes)
tick SF once
tick OF twice

Levitate
00632BB6
Value: 30770191(4 bytes)
tick both ZF

Zero Gravity
00632ACB
Value: 1172135538(4 bytes)
tick both CF

Instant Warp (left )
006340F4
Value:  1172132723(4 bytes)
tIck both CF

Instant Warp (right)
00634163
Value: 1172140662(4 bytes)
tick CF

Monster Freeze
0063185B
Value: 109775732 (4 bytes)
tick both ZF

i left these undocmented and kind of forgotten what they do
think its something about movements of your char
u guys give it a try once we have a UCE for rev833

00631903
Value: 3364030581 (4 bytes)

006316E5
Value: 2013205878 (4 bytes)

will update soon
« Last Edit: December 31, 1969, 07:00:00 PM by rogstars » Report to moderator   Logged
AdBot
TheNewGuy
Administrator
Super Assembler
*****
Posts: 1430


« Reply #1 on: September 23, 2006, 10:28:31 PM »

Could you post the array so that maybe we can find it for GMS and play with it?
« Last Edit: December 31, 1969, 07:00:00 PM by TheNewGuy » Report to moderator   Logged
xumx
Guest
« Reply #2 on: September 23, 2006, 10:44:32 PM »

If array is the same, value will also be the same.
well.. array is just another form of value.
Do a search with those values.
If no results found, then will have to get the arrays and follow SunBeam's Array jump search tutorial

+You can find those arrays (Asm Code) yourself with those given value.
Make a codecave, register a symbol, add the 4byte symbol to address manually.
set the value, then use Memory view to go to that address. I think you will see the code + Array
« Last Edit: December 31, 1969, 07:00:00 PM by xumx » Report to moderator   Logged
richie86
Intermediate ASM
***
Posts: 457



« Reply #3 on: September 24, 2006, 01:17:26 AM »

the value 2013205878, you can convert it to hex, then search that hex in xx xx xx form and thats the array
« Last Edit: December 31, 1969, 07:00:00 PM by richie86 » Report to moderator   Logged
AdBot
xumx
Guest
« Reply #4 on: September 24, 2006, 02:13:59 AM »

richie i don't think you can do that.
if the hex value is AA BB CC DD you have to search DD CC BB AA... or am i wrong? (LIFO)
« Last Edit: December 31, 1969, 07:00:00 PM by xumx » Report to moderator   Logged
richie86
Intermediate ASM
***
Posts: 457



« Reply #5 on: September 24, 2006, 08:10:55 AM »

oh forgot to add in something, if the asm is somethig like
* 004001C5 where * is whatever like jne and so on
you have to search in array the * asm and follow by C5 01 40 00,
and yes in asm the address are store in reverse. dont know why
« Last Edit: December 31, 1969, 07:00:00 PM by richie86 » Report to moderator   Logged
TheNewGuy
Administrator
Super Assembler
*****
Posts: 1430


« Reply #6 on: September 24, 2006, 10:03:48 AM »

I was just getting a few results and there were a few jne's is all. no big deal, was me being tired and lazy
« Last Edit: December 31, 1969, 07:00:00 PM by TheNewGuy » Report to moderator   Logged
linosal
Administrator
Master Assembler
*****
Posts: 2068



WWW
« Reply #7 on: September 28, 2006, 11:04:50 AM »

Hmm, how much has changed with these for rev .34
« Last Edit: December 31, 1969, 07:00:00 PM by linosal » Report to moderator   Logged

--
rogstars
Guest
« Reply #8 on: September 28, 2006, 11:49:27 AM »

its all updated in my new thread
and i must say the array of bytes has changed significantly
« Last Edit: December 31, 1969, 07:00:00 PM by rogstars » Report to moderator   Logged
linosal
Administrator
Master Assembler
*****
Posts: 2068



WWW
« Reply #9 on: September 28, 2006, 12:31:21 PM »

Hmm interesting, I will look over there, did you modify them using sun's jmp searching method?
« Last Edit: December 31, 1969, 07:00:00 PM by linosal » Report to moderator   Logged

--
mehnhax
Guest
« Reply #10 on: January 26, 2007, 06:15:25 PM »

gvj
« Last Edit: December 31, 1969, 07:00:00 PM by mehnhax » Report to moderator   Logged
Pages: [1]
  Send this topic  |  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.11 | SMF © 2006-2009, Simple Machines LLC
DB Theme: deruni
Valid XHTML 1.0! Valid CSS!