distiny
March 2nd, 2013, 07:47 PM
I'll add more when I find it, just did it out of boredom so it will be quick sloppier then usual
make sure to use the stealth plugin for CE or the game will crash due to the protection against mem modifications
inf ammo:
aobscan if patched: 89 42 04 B0 01 5B 83 C4 08 C3 6A 01 6A 01 8D 54 24 24 52 8D 44 24 1C 50 56 E8 7B 38 07 00 5F 5E
alloc(newmem,2048) //2kb should be enough
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov eax,#999
originalcode:
mov [edx+04],eax
mov al,01
exit:
jmp returnhere
"crysis3.exe"+74EBF7:
jmp newmem
returnhere:no spread:
alloc(newmem,2048) //2kb should be enough
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov dword ptr [esp+14],(float)0
mov dword ptr [edi+28],(float)0
originalcode:
fadd dword ptr [esp+14]
fadd dword ptr [edi+28]
exit:
jmp returnhere
"crysis3.exe"+153FF6C:
jmp newmem
nop
nop
returnhere:
make sure to use the stealth plugin for CE or the game will crash due to the protection against mem modifications
inf ammo:
aobscan if patched: 89 42 04 B0 01 5B 83 C4 08 C3 6A 01 6A 01 8D 54 24 24 52 8D 44 24 1C 50 56 E8 7B 38 07 00 5F 5E
alloc(newmem,2048) //2kb should be enough
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov eax,#999
originalcode:
mov [edx+04],eax
mov al,01
exit:
jmp returnhere
"crysis3.exe"+74EBF7:
jmp newmem
returnhere:no spread:
alloc(newmem,2048) //2kb should be enough
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov dword ptr [esp+14],(float)0
mov dword ptr [edi+28],(float)0
originalcode:
fadd dword ptr [esp+14]
fadd dword ptr [edi+28]
exit:
jmp returnhere
"crysis3.exe"+153FF6C:
jmp newmem
nop
nop
returnhere: