Description: |
=Ninja Saga=
62 04 D3 24 64 A3 A2
62 04 D3 24 64 A0 A2
=Coaster Ville=
44 47 31 32
44 42 30 30
4C 44 56 30 32
54 48 50 30 34
=Cafe Land=
00 00 00 00 00 00 00 40 00 00 00 00 00 00 F0 3F 00 00 00 00 00 00 F0 3F 00 00 00 00 00 00 F0 3F 00 00 00 00 00 58 BB 40 00 00 00 00 00 00 34 40
00 00 00 00 00 00 00 40 00 00 00 00 00 00 F0 3F 00 00 00 00 00 00 59 40 00 00 00 00 00 00 F0 3F 00 00 00 00 00 58 BB 40 00 00 00 00 00 00 34 40
24 40 00 00 00 00 00 00 F0 3F 00 00 00 00 00 00 00 40 00 00
FF 40 00 00 00 00 00 FF FF 40 00 00 00 00 00 00 00 40 00 00
=Market Land=
1
"Enable >Buy/Sell something >Disable > Refresh"
80000008
Auto Assembler Script
{
In case this won't work.
Go to the [Disable] part.
I included the game function, so you will be able to update the codes yourself.
Only if you understand what to do!
}
[ENABLE]
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
label(restore)
registersymbol(restore)
aobscan(hack,33 C8 B8 04 00 00 00 89 4A 10 8B 4D F0)
newmem:
originalcode:
sub ecx,ecx
mov ecx,[edx+10]
add [edx+10],ecx
mov ecx,[ebp-10]
exit:
jmp returnhere
hack+7:
restore:
jmp newmem
nop
returnhere:
[DISABLE]
restore:
db 89 4A 10 8B 4D F0
unregistersymbol(restore)
dealloc(newmem)
{
Original function
(
Opcdes+bytes, incase of an update you will able to update yourself
If you understand what to do..
)
55 - push ebp
8B EC - mov ebp,esp
83 EC 38 - sub esp,38
89 5D E4 - mov [ebp-1C],ebx
8B 5D 08 - mov ebx,[ebp+08]
8B 4D 10 - mov ecx,[ebp+10]
8D 45 F0 - lea eax,[ebp-10]
8B 15 4098FA08 - mov edx,[08FA9840] : [00000000]
89 5D F4 - mov [ebp-0C],ebx
89 55 F0 - mov [ebp-10],edx
89 05 4098FA08 - mov [08FA9840],eax
8B 15 3098FA08 - mov edx,[08FA9830] : [00290000]
3B C2 - cmp eax,edx
73 0A - jae 0AF5CC61
8B CB - mov ecx,ebx
E8 42CE6E4F - call NPSWF32_11_6_602_180.BrokerMainW+80D23
8B 4D 10 - mov ecx,[ebp+10]
8B 11 - mov edx,[ecx]
89 55 E8 - mov [ebp-18],edx
8B 41 04 - mov eax,[ecx+04]
89 45 EC - mov [ebp-14],eax
8B 4B 0C - mov ecx,[ebx+0C]
89 4D DC - mov [ebp-24],ecx
8B 59 08 - mov ebx,[ecx+08]
8B 4B 14 - mov ecx,[ebx+14]
8B 5D E4 - mov ebx,[ebp-1C]
89 4D FC - mov [ebp-04],ecx
8B 4A 14 - mov ecx,[edx+14]
89 4D E4 - mov [ebp-1C],ecx
66 0F57 C9 - xorpd xmm1,xmm1
8B 4D E4 - mov ecx,[ebp-1C]
81 E9 00000080 - sub ecx,80000000
66 0F57 C0 - xorpd xmm0,xmm0
F2 0F2A C1 - cvtsi2sd xmm0,xmm1
F2 0F58 05 90A7C85A - addsd xmm0,[NPSWF32_11_6_602_180.dll+B7A790]
66 0F2E C1 - ucomisd xmm0,xmm1
0F85 FC000000 - jne 0AF5CDA7
0F8A F6000000 - jp 0AF5CDA7
8B 45 FC - mov eax,[ebp-04]
8D 80 6CF20000 - lea eax,[eax+0000F26C]
89 45 FC - mov [ebp-04],eax
8B FF - mov edi,edi
8D 55 F0 - lea edx,[ebp-10]
8B 4D FC - mov ecx,[ebp-04]
E8 5669734F - call NPSWF32_11_6_602_180.BrokerMainW+CA8A3
8B 4D FC - mov ecx,[ebp-04]
8D 55 F0 - lea edx,[ebp-10]
E8 4B69734F - call NPSWF32_11_6_602_180.BrokerMainW+CA8A3
8B C8 - mov ecx,eax
8B 41 10 - mov eax,[ecx+10]
8B 50 08 - mov edx,[eax+08]
8B 8A 9C000000 - mov ecx,[edx+0000009C]
8D 55 FC - lea edx,[ebp-04]
89 45 FC - mov [ebp-04],eax
8B 41 04 - mov eax,[ecx+04]
83 EC 04 - sub esp,04
52 - push edx
6A 00 - push 00
51 - push ecx
FF D0 - call eax
83 C4 10 - add esp,10
F2 0F10 1D 505C3A06 - movsd xmm3,[063A5C50] : [(float)0.0000]
66 0F57 D2 - xorpd xmm2,xmm2
8B 45 DC - mov eax,[ebp-24]
DD 5D E0 - fstp qword ptr [ebp-20]
F3 0F7E 45 E0 - movq xmm0,[ebp-20]
8B 48 1C - mov ecx,[eax+1C]
83 E1 F8 - and ecx,F8
8B 41 18 - mov eax,[ecx+18]
66 0F57 C9 - xorpd xmm1,xmm1
F2 0F2A C8 - cvtsi2sd xmm1,xmm0
F2 0F58 CA - addsd xmm1,xmm2
F2 0F5C CA - subsd xmm1,xmm2
F2 0F58 CB - addsd xmm1,xmm3
F2 0F5C CA - subsd xmm1,xmm2
B8 FFFFFFFF - mov eax,FFFFFFFF
66 0F57 D2 - xorpd xmm2,xmm2
F2 0F2A D0 - cvtsi2sd xmm2,xmm0
F2 0F58 CA - addsd xmm1,xmm2
F2 0F59 C1 - mulsd xmm0,xmm1
8B FF - mov edi,edi
83 EC 08 - sub esp,08
83 EC 08 - sub esp,08
66 0FD6 04 24 - movq [esp],xmm0
E8 99176E4F - call NPSWF32_11_6_602_180.BrokerMainW+75773
83 C4 10 - add esp,10
F2 0F10 0D 505C3A06 - movsd xmm1,[063A5C50] : [(float)0.0000]
8B 55 E8 - mov edx,[ebp-18]
8B 45 EC - mov eax,[ebp-14]
DD 5D E0 - fstp qword ptr [ebp-20]
F3 0F7E 45 E0 - movq xmm0,[ebp-20]
F2 0F58 C1 - addsd xmm0,xmm1
F2 0F2C C8 - cvttsd2si ecx,xmm0
89 4D FC - mov [ebp-04],ecx
81 F9 00000080 - cmp ecx,80000000
75 1E - jne 0AF5CDA1
83 EC 08 - sub esp,08
83 EC 08 - sub esp,08
66 0FD6 04 24 - movq [esp],xmm0
E8 ED3F6E4F - call NPSWF32_11_6_602_180.BrokerMainW+78003
83 C4 10 - add esp,10
8B 55 E8 - mov edx,[ebp-18]
8B C8 - mov ecx,eax
8B 45 EC - mov eax,[ebp-14]
89 4D FC - mov [ebp-04],ecx
8B 4D FC - mov ecx,[ebp-04]
89 4A 14 - mov [edx+14],ecx
66 0F57 C9 - xorpd xmm1,xmm1
F2 0F2A C8 - cvtsi2sd xmm1,xmm0
B8 FFFFFFFF - mov eax,FFFFFFFF
66 0F57 D2 - xorpd xmm2,xmm2
F2 0F2A D0 - cvtsi2sd xmm2,xmm0
F2 0F58 CA - addsd xmm1,xmm2
B8 0B000000 - mov eax,0000000B
66 0F57 C0 - xorpd xmm0,xmm0
F2 0F2A C0 - cvtsi2sd xmm0,xmm0
F2 0F58 C8 - addsd xmm1,xmm0
B8 0A000000 - mov eax,0000000A
66 0F57 C0 - xorpd xmm0,xmm0
F2 0F2A C0 - cvtsi2sd xmm0,xmm0
F2 0F5C C8 - subsd xmm1,xmm0
66 0FD6 4D D8 - movq [ebp-28],xmm1
8B 42 14 - mov eax,[edx+14]
89 45 FC - mov [ebp-04],eax
8B 45 FC - mov eax,[ebp-04]
2D 00000080 - sub eax,80000000
66 0F57 C0 - xorpd xmm0,xmm0
F2 0F2A C0 - cvtsi2sd xmm0,xmm0
F2 0F58 05 90A7C85A - addsd xmm0,[NPSWF32_11_6_602_180.dll+B7A790]
B8 14000000 - mov eax,00000014
66 0F57 DB - xorpd xmm3,xmm3
F2 0F2A D8 - cvtsi2sd xmm3,xmm0
F2 0F58 C3 - addsd xmm0,xmm3
F2 0F5C C3 - subsd xmm0,xmm3
B8 01000000 - mov eax,00000001
66 0F57 DB - xorpd xmm3,xmm3
F2 0F2A D8 - cvtsi2sd xmm3,xmm0
F2 0F58 C3 - addsd xmm0,xmm3
F2 0F58 C2 - addsd xmm0,xmm2
66 0FD6 45 E0 - movq [ebp-20],xmm0
F2 0F2C C1 - cvttsd2si eax,xmm1
89 45 FC - mov [ebp-04],eax
3D 00000080 - cmp eax,80000000
75 23 - jne 0AF5CE65
F3 0F7E 45 D8 - movq xmm0,[ebp-28]
83 EC 08 - sub esp,08
83 EC 08 - sub esp,08
66 0FD6 04 24 - movq [esp],xmm0
E8 293F6E4F - call NPSWF32_11_6_602_180.BrokerMainW+78003
83 C4 10 - add esp,10
F3 0F7E 45 E0 - movq xmm0,[ebp-20]
8B 55 E8 - mov edx,[ebp-18]
89 45 FC - mov [ebp-04],eax
8B 4D FC - mov ecx,[ebp-04]
89 4D EC - mov [ebp-14],ecx
F2 0F2C C0 - cvttsd2si eax,xmm0
89 45 FC - mov [ebp-04],eax
3D 00000080 - cmp eax,80000000
75 1C - jne 0AF5CE95
83 EC 08 - sub esp,08
83 EC 08 - sub esp,08
66 0FD6 04 24 - movq [esp],xmm0
E8 F73E6E4F - call NPSWF32_11_6_602_180.BrokerMainW+78003
83 C4 10 - add esp,10
8B 55 E8 - mov edx,[ebp-18]
8B 4D EC - mov ecx,[ebp-14]
89 45 FC - mov [ebp-04],eax
8B 45 FC - mov eax,[ebp-04]
33 C8 - xor ecx,eax
B8 04000000 - mov eax,00000004
89 4A 10 - mov [edx+10],ecx
8B 4D F0 - mov ecx,[ebp-10]
89 0D 4098FA08 - mov [08FA9840],ecx
8B E5 - mov esp,ebp
5D - pop ebp
C3 - ret
}
Change of mov [edx+10],ecx
07C75353
0
B8
04
00
00
00
89
4A
10
8B
4D
F0
89
0D
showMessage("Go to market land then:\n" ..
"wait 1 minute > Enable the script > Buy/Sell something > Wait 10 seconds > Disable > Refresh and have fun!")
=Dragon City=
46 41 52 4D 00 00 00 00 00 00 00 00 00 00 00 00
44 72 61 67 6F 6E 73 00 00 47 65 74 20 33 30 20
=Lost Saga=
//==============================================================
// Created By : BeeComunity
// Thanks to : Paska
// BeeComunity.co.cc
// songong gw tabok
//==============================================================
#define WIN32_LEAN_AND_MEAN
#include
#include
#include
//============== Logger By Sandy Irawan- =======================
#define OFS_AutoDC 0x322FDD
#define OFS_Nickname 0x105D2F
#define OFS_Rareitem 0xC2BB3C
#define OFS_PesoHack 0xAC1145
#define OFS_BomHook 0x44F826
#define OFS_1HitCrussade 0x4A2F31
#define OFS_UnlimitedHp 0x42FA11
#define OFS_Grade 0x108D2F
#define OFS_Skill 0x110D3F
#define OFS_JumpHack 0x2FD444
#define OFS_NoDaily 0x8C351D << Cari Sendiri Pinter X ^ ^ Kalo G Penting / menyebabkan eror hapus
//=============================================================
LPTSTR ModulGame = "lostsaga.exe";
void Patch(void *adr, void *ptr, int size)
{
DWORD OldProtection;
VirtualProtect(adr,size,PAGE_EXECUTE_READWRITE, &OldProtection);
memcpy(adr,ptr,size);
VirtualProtect(adr,size,OldProtection, &OldProtection);
}
void WritePointer(unsigned long ulBase, int iOffset, int iValue)
{
if (!IsBadReadPtr((VOID*)ulBase, sizeof(unsigned long)))
{
if (!IsBadWritePtr((void*)(*(unsigned long*)ulBase + iOffset), sizeof(unsigned long)))
{
*(int*)(*(unsigned long*)ulBase + iOffset) = iValue;
}
}
}
DWORD WINAPI MemPacth(LPVOID param)
{
while (1) {
//==================== | Peso Hack | =============================//
if (GetAsyncKeyState(VK_HOME)&1) {
MessageBeep(MB_ICONINFORMATION);
DWORD adrAutoDC, adrMin2 = 0;
DWORD dwPB = (DWORD)GetModuleHandleA("lostsaga.exe")+0xAC1145 ;
if (dwPB > 0) {
adrAutoDC = dwPB + (DWORD)0xAC1145 ;
Patch((void *)(adrAutoDC),(void*)(PBYTE)"\x00\x8F", 2);
}
}
Sleep(5);
}
//====================================================================
//==================== Nick Name Hack =================================
if (GetAsyncKeyState(VK_INSERT)&1){
DWORD Nickname = (DWORD)GetModuleHandleA("lostsaga.exe")+0x49B0F8 ;
RiizwandaHack((void*)(Nickname+0x300),(int*)(PBYTE)"\x00\x00\x00\x00\x00\x00\x0F",7);
Sleep(5);
}
//================= Grade & Skill Hack ==================================
if (GetAsyncKeyState(VK_DELETE)&1){
DWORD GradeSkill = (DWORD)GetModuleHandleA("lostsaga.exe")+0x108D2F+0x110D2F ;
RiizwandaHack((void*)(GradeSkill+0x150),(int*)(PBYTE)"\x00\x00\xFF",3);
Sleep(5);
}
//====================================================================
//============== | 1 Hit Crussade |===================================
DWORD adr1hit, adrMin2 = 0;
DWORD CRUSSADE = (DWORD)GetModuleHandleA("lostsaga.exe")+0x4A2F31 ;
if (CRUSSADE > 0) {
adr1hit = CRUSSADE + (DWORD)0x4A2F31 ;
Patch((void *)(adr1hit),(void*)(PBYTE)"\x00\x00\3F", 3);
}
Sleep(5);
}
//=====================================================================
BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
if (dwReason == DLL_PROCESS_ATTACH)
{
DisableThreadLibraryCalls(hDll);
if(dwReason == DLL_PROCESS_ATTACH){
MessageBox(0, " ============= | Sandy-Irawan-| ===============\n Fiture Hack :\n [-] Peso Hack : HOME\n [-] NickName Hack : INSERT\n [-] 1 Hit Crussade : Auto ON\n [-] Grade Hack : DELETE\n [-] Skill Hack : DELETE\n\n Created By :\n [-] Sandy Irawan \n\n Thanks to :\n [-] liarosliana |-TEAM-|", "Sandy-Irawan-|@2012 by Sandy Irawan", MB_OKCANCEL + MB_ICONINFORMATION );
MessageBox(0, "Tekan Hotkey Pas ada Notice..", "Sandy-Ganteng-|@2012", MB_OKCANCEL + MB_ICONINFORMATION );
CreateThread(0, 0, (LPTHREAD_START_ROUTINE)MemPacth, 0, 0, 0);
char strDLLName [_MAX_PATH];
GetModuleFileName(hDll, strDLLName , _MAX_PATH);
if (strstr(strDLLName, "NamaDll.dll") <= 0) {
MessageBox(0, "Dasar Mahoo !! Rename DLL !!", "PERHATIAN", 0);
ExitProcess(0);
}
}
else if(dwReason == DLL_PROCESS_DETACH)
{
}
}
return TRUE;
}
Link Sumber : http://guiltyghost.blogspot.com/2013/04/tutorial-cara-membuat-dll-lost-saga.html#ixzz2YvlHSxe8
=Generator=
Membuat Tulisan Huruf Seperti BlackBerry di Facebook, Twitter dll
=NOTEPAD Matrix=
@echo off
color 02
:mat
echo %random%%random%%random%%random%%random%%random%%random%%random%
goto mat |