[TUT] Convertng Script formats (useless i think)
Posted: Mon May 03, 2010 11:55 pm
Yeah I know this is useless w/o a bypass, but I`m willing to let those who have know.
How to convert scripts???????
1) EIP to CRC and vice versa.
For an example......I take the TWMS v113 script.....
EIP version
Converting scripts which register symbols(CRC) to simple CRC scripts and vice versa.
For example:
Complex version:
How to convert scripts???????
1) EIP to CRC and vice versa.
For an example......I take the TWMS v113 script.....
EIP version
CRC version//Body Pressure no delay hack(TWMS v113 EIP version)
//address : 00971B06
//EIP : hittime
[enable]
registersymbol(hittime)
alloc(hittime,5)
hittime:
add eax,00000000 //Body pressure delay(miliseconds)(0 for godlike)
jmp 00971B0B
[disable]
unregistersymbol(hittime)
dealloc(hittime)
//Body Pressure no delay hack a.k.a. No Blink Body Pressure.(TWMS v113 CRC version)
//address : 00971B06
//EIP : hittime
[enable]
registersymbol(hittime)
alloc(hittime,5)
hittime:
add eax,00000000 //Body pressure delay(miliseconds)(0 for godlike)
jmp 00971B0B
00971B06:
jmp hittime
[disable]
00971B06:
add eax, 000003e8 (The original opcode/bytes)
unregistersymbol(hittime)
dealloc(hittime)
Converting scripts which register symbols(CRC) to simple CRC scripts and vice versa.
For example:
Complex version:
Simple version:
//Body Pressure no delay hack a.k.a. No Blink Body Pressure.(TWMS v113 CRC version)
[enable]
registersymbol(hittime)
alloc(hittime,5)
hittime:
add eax,00000000 //Body pressure delay(miliseconds)(0 for godlike)
jmp 00971B0B
00971B06:
jmp hittime
[disable]
00971B06:
add eax, 000003e8 (i dont know) (The original opcode/bytes)
unregistersymbol(hittime)
dealloc(hittime)
Thatz it, hope it is useful for some ppl.//Body Pressure no delay hack a.k.a. No Blink Body Pressure.(TWMS v113 CRC version)
[enable]
00971B06:
add eax,00000000 //Body pressure delay(miliseconds)(0 for godlike)
jmp 00971B0B
[disable]
00971B06
add eax, 000003e8 (The original opcode/bytes)