hi frends mobspeed code pls CT
[ENABLE] aobscan(_aMobSpeed,80 7D 08 00 74 07 D9 40 79) label(_aMobSpeedLabel) registersymbol(_aMobSpeedLabel) alloc(DrakoMobSpeedBace,2048) label(MobIsWalking) label(MobRunSpeedValue) label(MobWalkSpeedValue) label(ReturnMobSpeed) registersymbol(MobRunSpeedValue) registersymbol(MobWalkSpeedValue) DrakoMobSpeedBace: cmp byte ptr [ebp+08],00 je MobIsWalking fld dword ptr [MobRunSpeedValue] pop ebp ret 0004 MobIsWalking: fld dword ptr [MobWalkSpeedValue] pop ebp ret 0004 MobRunSpeedValue: db 00 00 60 41 MobWalkSpeedValue: db 00 00 40 40 _aMobSpeed: _aMobSpeedLabel: jmp DrakoMobSpeedBace nop ReturnMobSpeed: [DISABLE] dealloc(DrakoMobSpeedBace) unregistersymbol(MobRunSpeedValue) unregistersymbol(MobWalkSpeedValue) _aMobSpeedLabel: cmp byte ptr [ebp+08],00 je 005666D3 fld dword ptr [eax+79] unregistersymbol(_aMobSpeedLabel)
define(address,"dekaron.exe"+11F8A2) define(bytes,8D 90 02 04 00 00) [ENABLE] assert(address,bytes) alloc(newmem,$1000) label(code) label(return) newmem: code: lea edx,ss:[eax+00000402] cmp dword ptr [eax+00000402],5F626577 //web_image.mac //(compare if map is equal to 'web_') je return mov dword ptr [eax+402],5F626577 mov dword ptr [eax+406],67616D69 mov dword ptr [eax+40A],616D2E65 mov dword ptr [eax+40E],00000063 jmp return address: jmp newmem nop return: [DISABLE] address: db bytes //lea edx,[eax+00000402] dealloc(newmem)