BradPitBull How do I cheat?
Reputation: 0
Joined: 25 Sep 2006 Posts: 3
|
Posted: Sat Sep 30, 2006 7:58 am Post subject: Dark Byte... Question about UndoChanges unit |
|
|
In the UndoMemoryChanges function u use two methods to make the memory writable:
Using 'MakeWriteble', on kernel restoring:
Code: |
try
MakeWritable(x,4096,true);
CopyMemory(pointer(x),@kernelmemo...
except
inc(x,4096);
continue;
end;
|
and the '((x div $1000) *4)+$c0000000;' for the other Dlls:
Code: |
if pbyte(x)^=$cc then sleep(0);
y:=((x div $1000) *4)+$c0000000;
if KernelReadProcessMemory(p,pointer(y),@buf,4,ar) then
begin
buf:=(buf or $2);
KernelWriteProcessMemory(p,pointer(y),@buf,4,ar);
end;
CopyMemory(pointer(x),@ntdllmem...
|
Why a diferent method for each dll?
Last edited by BradPitBull on Sat Sep 30, 2006 7:50 pm; edited 1 time in total |
|