Function that deals with ScoreList Color

Page 1 of 2 12 LastLast
Results 1 to 25 of 31
  1. #1
    Account Upgraded | Title Enabled! cerealnp is offline
    MemberRank
    Apr 2006 Join Date
    BrazilLocation
    441Posts

    Function that deals with ScoreList Color

    Hey guys, can someone provide me the function that deals with ScoreList color? Im trying to change administrator and developer colors there. Thanks!


  2. #2
    2D > 3D Wucas is offline
    MemberRank
    Dec 2008 Join Date
    In your bed :3Location
    2,523Posts

    Re: Function that deals with ScoreList Color

    Maybe im wrong xDD i thought you were talking about the Score at the end of games o.o Misread
    Your talking about the tab menu?

    Quote Originally Posted by BetrayedAcheron
    CombatResult_PlayerScore (004042f9) is the actual function o.o

    Edit: Isnt it Line 004044b5 (After CombatResult_playerKillList)

    Maybe Im Wrong (still learning D:)

    Area Your Looking For
    Code:
    00404463  |. 68 606A5E00    PUSH Original.005E6A60                   ;  ASCII "CombatResult_PlayerKillList"
    00404468  |. 8859 04        MOV BYTE PTR DS:[ECX+4],BL
    0040446B  |. E8 40D7FFFF    CALL Original.00401BB0
    00404470  |. C78424 4001000>MOV DWORD PTR SS:[ESP+140],3
    0040447B  |. E8 402C0900    CALL Original.004970C0
    00404480  |. 8D88 E0240000  LEA ECX,DWORD PTR DS:[EAX+24E0]
    00404486  |. 89BC24 4001000>MOV DWORD PTR SS:[ESP+140],EDI
    0040448D  |. E8 1E881400    CALL Original.0054CCB0
    00404492  |. 8BF0           MOV ESI,EAX
    00404494  |. 3BF3           CMP ESI,EBX
    00404496  |. 74 45          JE SHORT Original.004044DD
    00404498  |. 8B9424 3401000>MOV EDX,DWORD PTR SS:[ESP+134]
    0040449F  |. 52             PUSH EDX
    004044A0  |. 8D8424 9C00000>LEA EAX,DWORD PTR SS:[ESP+9C]
    004044A7  |. 68 146A5E00    PUSH Original.005E6A14                   ;  ASCII "%d"
    004044AC  |. 50             PUSH EAX
    004044AD  |. E8 5BD21600    CALL Original.0057170D
    004044B2  |. 83C4 0C        ADD ESP,0C
    004044B5  |. C64424 13 FF   MOV BYTE PTR SS:[ESP+13],0FF
    004044BA  |. C64424 10 FF   MOV BYTE PTR SS:[ESP+10],0FF
    004044BF  |. C64424 11 F7   MOV BYTE PTR SS:[ESP+11],0F7
    004044C4  |. C64424 12 94   MOV BYTE PTR SS:[ESP+12],94
    004044C9  |. 8B4C24 10      MOV ECX,DWORD PTR SS:[ESP+10]
    004044CD  |. 51             PUSH ECX                                 ; /Arg2
    004044CE  |. 8D9424 9C00000>LEA EDX,DWORD PTR SS:[ESP+9C]            ; |
    004044D5  |. 52             PUSH EDX                                 ; |Arg1
    004044D6  |. 8BCE           MOV ECX,ESI                              ; |
    004044D8  |. E8 33621400    CALL Original.0054A710                   ; \Original.0054A710
    004044DD  |> 83EC 1C        SUB ESP,1C
    004044E0  |. 8BCC           MOV ECX,ESP
    004044E2  |. 896424 30      MOV DWORD PTR SS:[ESP+30],ESP
    004044E6  |. 6A 1C          PUSH 1C
    004044E8  |. 8969 18        MOV DWORD PTR DS:[ECX+18],EBP
    004044EB  |. 8959 14        MOV DWORD PTR DS:[ECX+14],EBX
    004044EE  |. 68 406A5E00    PUSH Original.005E6A40                   ;  ASCII "CombatResult_PlayerDeathList"
    004044F3  |. 8859 04        MOV BYTE PTR DS:[ECX+4],BL
    004044F6  |. E8 B5D6FFFF    CALL Original.00401BB0
    004044FB  |. C78424 4001000>MOV DWORD PTR SS:[ESP+140],4
    00404506  |. E8 B52B0900    CALL Original.004970C0
    0040450B  |. 8D88 E0240000  LEA ECX,DWORD PTR DS:[EAX+24E0]
    00404511  |. 89BC24 4001000>MOV DWORD PTR SS:[ESP+140],EDI
    00404518  |. E8 93871400    CALL Original.0054CCB0
    0040451D  |. 8BF0           MOV ESI,EAX
    0040451F  |. 3BF3           CMP ESI,EBX
    00404521  |. 74 45          JE SHORT Original.00404568
    00404523  |. 8B8424 3801000>MOV EAX,DWORD PTR SS:[ESP+138]
    0040452A  |. 50             PUSH EAX
    0040452B  |. 8D8C24 9C00000>LEA ECX,DWORD PTR SS:[ESP+9C]
    00404532  |. 68 146A5E00    PUSH Original.005E6A14                   ;  ASCII "%d"
    00404537  |. 51             PUSH ECX
    00404538  |. E8 D0D11600    CALL Original.0057170D
    0040453D  |. 83C4 0C        ADD ESP,0C
    00404540  |. C64424 13 FF   MOV BYTE PTR SS:[ESP+13],0FF
    00404545  |. C64424 10 FF   MOV BYTE PTR SS:[ESP+10],0FF
    0040454A  |. C64424 11 F7   MOV BYTE PTR SS:[ESP+11],0F7
    0040454F  |. C64424 12 94   MOV BYTE PTR SS:[ESP+12],94
    00404554  |. 8B5424 10      MOV EDX,DWORD PTR SS:[ESP+10]
    00404558  |. 52             PUSH EDX                                 ; /Arg2
    00404559  |. 8D8424 9C00000>LEA EAX,DWORD PTR SS:[ESP+9C]            ; |
    00404560  |. 50             PUSH EAX                                 ; |Arg1
    00404561  |. 8BCE           MOV ECX,ESI                              ; |
    00404563  |. E8 A8611400    CALL Original.0054A710                   ; \Original.0054A710
    00404568  |> 8B8C24 1C01000>MOV ECX,DWORD PTR SS:[ESP+11C]
    0040456F  |. 64:890D 000000>MOV DWORD PTR FS:[0],ECX
    00404576  |. 8B8C24 1801000>MOV ECX,DWORD PTR SS:[ESP+118]
    0040457D  |. E8 ACCB1600    CALL Original.0057112E
    00404582  |. 5F             POP EDI
    00404583  |. 5E             POP ESI
    00404584  |. 5D             POP EBP
    00404585  |. 5B             POP EBX
    00404586  |. 81C4 18010000  ADD ESP,118
    0040458C  \. C3             RETN
    Whole Coding Portion

    Code:
    00404240  /$ 6A FF          PUSH -1
    00404242  |. 68 A7505D00    PUSH Original.005D50A7                   ;  SE handler installation
    00404247  |. 64:A1 00000000 MOV EAX,DWORD PTR FS:[0]
    0040424D  |. 50             PUSH EAX
    0040424E  |. 64:8925 000000>MOV DWORD PTR FS:[0],ESP
    00404255  |. 81EC 0C010000  SUB ESP,10C
    0040425B  |. A1 F0696500    MOV EAX,DWORD PTR DS:[6569F0]
    00404260  |. 53             PUSH EBX
    00404261  |. 55             PUSH EBP
    00404262  |. 56             PUSH ESI
    00404263  |. 57             PUSH EDI
    00404264  |. 83EC 1C        SUB ESP,1C
    00404267  |. 8BCC           MOV ECX,ESP
    00404269  |. 896424 2C      MOV DWORD PTR SS:[ESP+2C],ESP
    0040426D  |. 33DB           XOR EBX,EBX
    0040426F  |. 6A 1B          PUSH 1B
    00404271  |. C741 18 0F0000>MOV DWORD PTR DS:[ECX+18],0F
    00404278  |. 8959 14        MOV DWORD PTR DS:[ECX+14],EBX
    0040427B  |. 68 B86A5E00    PUSH Original.005E6AB8                   ;  ASCII "CombatResult_PlayerNameList"
    00404280  |. 898424 3C01000>MOV DWORD PTR SS:[ESP+13C],EAX
    00404287  |. 8859 04        MOV BYTE PTR DS:[ECX+4],BL
    0040428A  |. E8 21D9FFFF    CALL Original.00401BB0
    0040428F  |. 899C24 4001000>MOV DWORD PTR SS:[ESP+140],EBX
    00404296  |. E8 252E0900    CALL Original.004970C0
    0040429B  |. 8D88 E0240000  LEA ECX,DWORD PTR DS:[EAX+24E0]
    004042A1  |. C78424 4001000>MOV DWORD PTR SS:[ESP+140],-1
    004042AC  |. E8 FF891400    CALL Original.0054CCB0
    004042B1  |. 3BC3           CMP EAX,EBX
    004042B3  |. 74 2F          JE SHORT Original.004042E4
    004042B5  |. 399C24 3C01000>CMP DWORD PTR SS:[ESP+13C],EBX
    004042BC  |. C64424 12 94   MOV BYTE PTR SS:[ESP+12],94
    004042C1  |. C64424 11 F7   MOV BYTE PTR SS:[ESP+11],0F7
    004042C6  |. C64424 10 FF   MOV BYTE PTR SS:[ESP+10],0FF
    004042CB  |. C64424 13 FF   MOV BYTE PTR SS:[ESP+13],0FF
    004042D0  |. 8B4C24 10      MOV ECX,DWORD PTR SS:[ESP+10]
    004042D4  |. 51             PUSH ECX                                 ; /Arg2
    004042D5  |. 8B8C24 3001000>MOV ECX,DWORD PTR SS:[ESP+130]           ; |
    004042DC  |. 51             PUSH ECX                                 ; |Arg1
    004042DD  |. 8BC8           MOV ECX,EAX                              ; |
    004042DF  |. E8 2C641400    CALL Original.0054A710                   ; \Original.0054A710
    004042E4  |> 895C24 10      MOV DWORD PTR SS:[ESP+10],EBX
    004042E8  |. EB 06          JMP SHORT Original.004042F0
    004042EA  |  8D9B 00000000  LEA EBX,DWORD PTR DS:[EBX]
    004042F0  |> 8B5424 10      /MOV EDX,DWORD PTR SS:[ESP+10]
    004042F4  |. 52             |PUSH EDX
    004042F5  |. 8D4424 1C      |LEA EAX,DWORD PTR SS:[ESP+1C]
    004042F9  |. 68 9C6A5E00    |PUSH Original.005E6A9C                  ;  ASCII "CombatResult_PlayerScore%d"
    004042FE  |. 50             |PUSH EAX
    004042FF  |. E8 09D41600    |CALL Original.0057170D
    00404304  |. 83EC 10        |SUB ESP,10
    00404307  |. 8BCC           |MOV ECX,ESP
    00404309  |. 8D4424 34      |LEA EAX,DWORD PTR SS:[ESP+34]
    0040430D  |. C741 18 0F0000>|MOV DWORD PTR DS:[ECX+18],0F
    00404314  |. 8959 14        |MOV DWORD PTR DS:[ECX+14],EBX
    00404317  |. 896424 30      |MOV DWORD PTR SS:[ESP+30],ESP
    0040431B  |. 8859 04        |MOV BYTE PTR DS:[ECX+4],BL
    0040431E  |. 8D70 01        |LEA ESI,DWORD PTR DS:[EAX+1]
    00404321  |> 8A10           |/MOV DL,BYTE PTR DS:[EAX]
    00404323  |. 40             ||INC EAX
    00404324  |. 3AD3           ||CMP DL,BL
    00404326  |.^75 F9          |\JNZ SHORT Original.00404321
    00404328  |. 2BC6           |SUB EAX,ESI
    0040432A  |. 50             |PUSH EAX
    0040432B  |. 8D5424 38      |LEA EDX,DWORD PTR SS:[ESP+38]
    0040432F  |. 52             |PUSH EDX
    00404330  |. E8 7BD8FFFF    |CALL Original.00401BB0
    00404335  |. C78424 4001000>|MOV DWORD PTR SS:[ESP+140],1
    00404340  |. E8 7B2D0900    |CALL Original.004970C0
    00404345  |. 8D88 E0240000  |LEA ECX,DWORD PTR DS:[EAX+24E0]
    0040434B  |. C78424 4001000>|MOV DWORD PTR SS:[ESP+140],-1
    00404356  |. E8 55891400    |CALL Original.0054CCB0
    0040435B  |. 8BE8           |MOV EBP,EAX
    0040435D  |. 3BEB           |CMP EBP,EBX
    0040435F  |. 74 1A          |JE SHORT Original.0040437B
    00404361  |. 8B45 00        |MOV EAX,DWORD PTR SS:[EBP]
    00404364  |. 8BCD           |MOV ECX,EBP
    00404366  |. BF 6C685E00    |MOV EDI,Original.005E686C
    0040436B  |. FF50 44        |CALL DWORD PTR DS:[EAX+44]
    0040436E  |. 8BF0           |MOV ESI,EAX
    00404370  |. B9 01000000    |MOV ECX,1
    00404375  |. 33D2           |XOR EDX,EDX
    00404377  |. F3:A6          |REPE CMPS BYTE PTR ES:[EDI],BYTE PTR DS>
    00404379  |. 74 1A          |JE SHORT Original.00404395
    0040437B  |> 8B4424 10      |MOV EAX,DWORD PTR SS:[ESP+10]
    0040437F  |. 40             |INC EAX
    00404380  |. 83F8 10        |CMP EAX,10
    00404383  |. 894424 10      |MOV DWORD PTR SS:[ESP+10],EAX
    00404387  |.^0F8C 63FFFFFF  \JL Original.004042F0
    0040438D  |. 83CF FF        OR EDI,FFFFFFFF
    00404390  |. E9 B8000000    JMP Original.0040444D
    00404395  |> 8B8424 3001000>MOV EAX,DWORD PTR SS:[ESP+130]
    0040439C  |. 50             PUSH EAX
    0040439D  |. 8D8C24 9C00000>LEA ECX,DWORD PTR SS:[ESP+9C]
    004043A4  |. 68 146A5E00    PUSH Original.005E6A14                   ;  ASCII "%d"
    004043A9  |. 51             PUSH ECX
    004043AA  |. E8 5ED31600    CALL Original.0057170D
    004043AF  |. 8B55 00        MOV EDX,DWORD PTR SS:[EBP]
    004043B2  |. 83C4 0C        ADD ESP,0C
    004043B5  |. 8D8424 9800000>LEA EAX,DWORD PTR SS:[ESP+98]
    004043BC  |. 50             PUSH EAX
    004043BD  |. 8BCD           MOV ECX,EBP
    004043BF  |. FF52 40        CALL DWORD PTR DS:[EDX+40]
    004043C2  |. 6A 02          PUSH 2
    004043C4  |. 8BCD           MOV ECX,EBP
    004043C6  |. E8 35531500    CALL Original.00559700
    004043CB  |. 8B4C24 10      MOV ECX,DWORD PTR SS:[ESP+10]
    004043CF  |. 51             PUSH ECX
    004043D0  |. 8D5424 1C      LEA EDX,DWORD PTR SS:[ESP+1C]
    004043D4  |. 68 7C6A5E00    PUSH Original.005E6A7C                   ;  ASCII "CombatResult_GameRoomImg%02d"
    004043D9  |. 52             PUSH EDX
    004043DA  |. E8 2ED31600    CALL Original.0057170D
    004043DF  |. 83EC 10        SUB ESP,10
    004043E2  |. 8BCC           MOV ECX,ESP
    004043E4  |. 8D4424 34      LEA EAX,DWORD PTR SS:[ESP+34]
    004043E8  |. C741 18 0F0000>MOV DWORD PTR DS:[ECX+18],0F
    004043EF  |. 8959 14        MOV DWORD PTR DS:[ECX+14],EBX
    004043F2  |. 896424 30      MOV DWORD PTR SS:[ESP+30],ESP
    004043F6  |. 8859 04        MOV BYTE PTR DS:[ECX+4],BL
    004043F9  |. 8D70 01        LEA ESI,DWORD PTR DS:[EAX+1]
    004043FC  |. 8D6424 00      LEA ESP,DWORD PTR SS:[ESP]
    00404400  |> 8A10           /MOV DL,BYTE PTR DS:[EAX]
    00404402  |. 40             |INC EAX
    00404403  |. 3AD3           |CMP DL,BL
    00404405  |.^75 F9          \JNZ SHORT Original.00404400
    00404407  |. 2BC6           SUB EAX,ESI
    00404409  |. 50             PUSH EAX
    0040440A  |. 8D4424 38      LEA EAX,DWORD PTR SS:[ESP+38]
    0040440E  |. 50             PUSH EAX
    0040440F  |. E8 9CD7FFFF    CALL Original.00401BB0
    00404414  |. C78424 4001000>MOV DWORD PTR SS:[ESP+140],2
    0040441F  |. E8 9C2C0900    CALL Original.004970C0
    00404424  |. 83CF FF        OR EDI,FFFFFFFF
    00404427  |. 8D88 E0240000  LEA ECX,DWORD PTR DS:[EAX+24E0]
    0040442D  |. 89BC24 4001000>MOV DWORD PTR SS:[ESP+140],EDI
    00404434  |. E8 77881400    CALL Original.0054CCB0
    00404439  |. 3BC3           CMP EAX,EBX
    0040443B  |. 74 10          JE SHORT Original.0040444D
    0040443D  |. 8B8C24 4001000>MOV ECX,DWORD PTR SS:[ESP+140]
    00404444  |. 8B10           MOV EDX,DWORD PTR DS:[EAX]
    00404446  |. 53             PUSH EBX
    00404447  |. 51             PUSH ECX
    00404448  |. 8BC8           MOV ECX,EAX
    0040444A  |. FF52 34        CALL DWORD PTR DS:[EDX+34]
    0040444D  |> 83EC 1C        SUB ESP,1C
    00404450  |. 8BCC           MOV ECX,ESP
    00404452  |. 896424 30      MOV DWORD PTR SS:[ESP+30],ESP
    00404456  |. 6A 1B          PUSH 1B
    00404458  |. BD 0F000000    MOV EBP,0F
    0040445D  |. 8969 18        MOV DWORD PTR DS:[ECX+18],EBP
    00404460  |. 8959 14        MOV DWORD PTR DS:[ECX+14],EBX
    00404463  |. 68 606A5E00    PUSH Original.005E6A60                   ;  ASCII "CombatResult_PlayerKillList"
    00404468  |. 8859 04        MOV BYTE PTR DS:[ECX+4],BL
    0040446B  |. E8 40D7FFFF    CALL Original.00401BB0
    00404470  |. C78424 4001000>MOV DWORD PTR SS:[ESP+140],3
    0040447B  |. E8 402C0900    CALL Original.004970C0
    00404480  |. 8D88 E0240000  LEA ECX,DWORD PTR DS:[EAX+24E0]
    00404486  |. 89BC24 4001000>MOV DWORD PTR SS:[ESP+140],EDI
    0040448D  |. E8 1E881400    CALL Original.0054CCB0
    00404492  |. 8BF0           MOV ESI,EAX
    00404494  |. 3BF3           CMP ESI,EBX
    00404496  |. 74 45          JE SHORT Original.004044DD
    00404498  |. 8B9424 3401000>MOV EDX,DWORD PTR SS:[ESP+134]
    0040449F  |. 52             PUSH EDX
    004044A0  |. 8D8424 9C00000>LEA EAX,DWORD PTR SS:[ESP+9C]
    004044A7  |. 68 146A5E00    PUSH Original.005E6A14                   ;  ASCII "%d"
    004044AC  |. 50             PUSH EAX
    004044AD  |. E8 5BD21600    CALL Original.0057170D
    004044B2  |. 83C4 0C        ADD ESP,0C
    004044B5  |. C64424 13 FF   MOV BYTE PTR SS:[ESP+13],0FF
    004044BA  |. C64424 10 FF   MOV BYTE PTR SS:[ESP+10],0FF
    004044BF  |. C64424 11 F7   MOV BYTE PTR SS:[ESP+11],0F7
    004044C4  |. C64424 12 94   MOV BYTE PTR SS:[ESP+12],94
    004044C9  |. 8B4C24 10      MOV ECX,DWORD PTR SS:[ESP+10]
    004044CD  |. 51             PUSH ECX                                 ; /Arg2
    004044CE  |. 8D9424 9C00000>LEA EDX,DWORD PTR SS:[ESP+9C]            ; |
    004044D5  |. 52             PUSH EDX                                 ; |Arg1
    004044D6  |. 8BCE           MOV ECX,ESI                              ; |
    004044D8  |. E8 33621400    CALL Original.0054A710                   ; \Original.0054A710
    004044DD  |> 83EC 1C        SUB ESP,1C
    004044E0  |. 8BCC           MOV ECX,ESP
    004044E2  |. 896424 30      MOV DWORD PTR SS:[ESP+30],ESP
    004044E6  |. 6A 1C          PUSH 1C
    004044E8  |. 8969 18        MOV DWORD PTR DS:[ECX+18],EBP
    004044EB  |. 8959 14        MOV DWORD PTR DS:[ECX+14],EBX
    004044EE  |. 68 406A5E00    PUSH Original.005E6A40                   ;  ASCII "CombatResult_PlayerDeathList"
    004044F3  |. 8859 04        MOV BYTE PTR DS:[ECX+4],BL
    004044F6  |. E8 B5D6FFFF    CALL Original.00401BB0
    004044FB  |. C78424 4001000>MOV DWORD PTR SS:[ESP+140],4
    00404506  |. E8 B52B0900    CALL Original.004970C0
    0040450B  |. 8D88 E0240000  LEA ECX,DWORD PTR DS:[EAX+24E0]
    00404511  |. 89BC24 4001000>MOV DWORD PTR SS:[ESP+140],EDI
    00404518  |. E8 93871400    CALL Original.0054CCB0
    0040451D  |. 8BF0           MOV ESI,EAX
    0040451F  |. 3BF3           CMP ESI,EBX
    00404521  |. 74 45          JE SHORT Original.00404568
    00404523  |. 8B8424 3801000>MOV EAX,DWORD PTR SS:[ESP+138]
    0040452A  |. 50             PUSH EAX
    0040452B  |. 8D8C24 9C00000>LEA ECX,DWORD PTR SS:[ESP+9C]
    00404532  |. 68 146A5E00    PUSH Original.005E6A14                   ;  ASCII "%d"
    00404537  |. 51             PUSH ECX
    00404538  |. E8 D0D11600    CALL Original.0057170D
    0040453D  |. 83C4 0C        ADD ESP,0C
    00404540  |. C64424 13 FF   MOV BYTE PTR SS:[ESP+13],0FF
    00404545  |. C64424 10 FF   MOV BYTE PTR SS:[ESP+10],0FF
    0040454A  |. C64424 11 F7   MOV BYTE PTR SS:[ESP+11],0F7
    0040454F  |. C64424 12 94   MOV BYTE PTR SS:[ESP+12],94
    00404554  |. 8B5424 10      MOV EDX,DWORD PTR SS:[ESP+10]
    00404558  |. 52             PUSH EDX                                 ; /Arg2
    00404559  |. 8D8424 9C00000>LEA EAX,DWORD PTR SS:[ESP+9C]            ; |
    00404560  |. 50             PUSH EAX                                 ; |Arg1
    00404561  |. 8BCE           MOV ECX,ESI                              ; |
    00404563  |. E8 A8611400    CALL Original.0054A710                   ; \Original.0054A710
    00404568  |> 8B8C24 1C01000>MOV ECX,DWORD PTR SS:[ESP+11C]
    0040456F  |. 64:890D 000000>MOV DWORD PTR FS:[0],ECX
    00404576  |. 8B8C24 1801000>MOV ECX,DWORD PTR SS:[ESP+118]
    0040457D  |. E8 ACCB1600    CALL Original.0057112E
    00404582  |. 5F             POP EDI
    00404583  |. 5E             POP ESI
    00404584  |. 5D             POP EBP
    00404585  |. 5B             POP EBX
    00404586  |. 81C4 18010000  ADD ESP,118
    0040458C  \. C3             RETN
    0040458D     CC             INT3
    0040458E     CC             INT3
    0040458F     CC             INT3
    00404590  /$ 6A FF          PUSH -1
    00404592  |. 68 A7505D00    PUSH Original.005D50A7                   ;  SE handler installation
    00404597  |. 64:A1 00000000 MOV EAX,DWORD PTR FS:[0]
    0040459D  |. 50             PUSH EAX
    0040459E  |. 64:8925 000000>MOV DWORD PTR FS:[0],ESP
    004045A5  |. 81EC 0C010000  SUB ESP,10C
    004045AB  |. A1 F0696500    MOV EAX,DWORD PTR DS:[6569F0]
    004045B0  |. 53             PUSH EBX
    004045B1  |. 55             PUSH EBP
    004045B2  |. 56             PUSH ESI
    004045B3  |. 57             PUSH EDI
    004045B4  |. 83EC 1C        SUB ESP,1C
    004045B7  |. 8BCC           MOV ECX,ESP
    004045B9  |. 896424 2C      MOV DWORD PTR SS:[ESP+2C],ESP
    004045BD  |. 33DB           XOR EBX,EBX
    004045BF  |. 6A 1A          PUSH 1A
    004045C1  |. C741 18 0F0000>MOV DWORD PTR DS:[ECX+18],0F
    004045C8  |. 8959 14        MOV DWORD PTR DS:[ECX+14],EBX
    004045CB  |. 68 446B5E00    PUSH Original.005E6B44                   ;  ASCII "ClanResult_PlayerNameList1"
    004045D0  |. 898424 3C01000>MOV DWORD PTR SS:[ESP+13C],EAX
    004045D7  |. 8859 04        MOV BYTE PTR DS:[ECX+4],BL
    004045DA  |. E8 D1D5FFFF    CALL Original.00401BB0
    004045DF  |. 899C24 4001000>MOV DWORD PTR SS:[ESP+140],EBX
    004045E6  |. E8 D52A0900    CALL Original.004970C0
    004045EB  |. 8D88 E0240000  LEA ECX,DWORD PTR DS:[EAX+24E0]
    004045F1  |. C78424 4001000>MOV DWORD PTR SS:[ESP+140],-1
    004045FC  |. E8 AF861400    CALL Original.0054CCB0
    00404601  |. 3BC3           CMP EAX,EBX
    00404603  |. 74 2F          JE SHORT Original.00404634
    00404605  |. 399C24 3C01000>CMP DWORD PTR SS:[ESP+13C],EBX
    0040460C  |. C64424 12 94   MOV BYTE PTR SS:[ESP+12],94
    00404611  |. C64424 11 F7   MOV BYTE PTR SS:[ESP+11],0F7
    00404616  |. C64424 10 FF   MOV BYTE PTR SS:[ESP+10],0FF
    0040461B  |. C64424 13 FF   MOV BYTE PTR SS:[ESP+13],0FF
    00404620  |. 8B4C24 10      MOV ECX,DWORD PTR SS:[ESP+10]
    00404624  |. 51             PUSH ECX                                 ; /Arg2
    00404625  |. 8B8C24 3001000>MOV ECX,DWORD PTR SS:[ESP+130]           ; |
    0040462C  |. 51             PUSH ECX                                 ; |Arg1
    0040462D  |. 8BC8           MOV ECX,EAX                              ; |
    0040462F  |. E8 DC601400    CALL Original.0054A710                   ; \Original.0054A710
    00404634  |> 895C24 10      MOV DWORD PTR SS:[ESP+10],EBX
    00404638  |. EB 06          JMP SHORT Original.00404640
    0040463A  |  8D9B 00000000  LEA EBX,DWORD PTR DS:[EBX]
    00404640  |> 8B5424 10      /MOV EDX,DWORD PTR SS:[ESP+10]
    00404644  |. 52             |PUSH EDX
    00404645  |. 8D8424 9C00000>|LEA EAX,DWORD PTR SS:[ESP+9C]
    0040464C  |. 68 286B5E00    |PUSH Original.005E6B28                  ;  ASCII "ClanResult_PlayerScore1%d"
    00404651  |. 50             |PUSH EAX
    00404652  |. E8 B6D01600    |CALL Original.0057170D
    00404657  |. 83EC 10        |SUB ESP,10
    0040465A  |. 8BCC           |MOV ECX,ESP
    0040465C  |. 8D8424 B400000>|LEA EAX,DWORD PTR SS:[ESP+B4]
    00404663  |. C741 18 0F0000>|MOV DWORD PTR DS:[ECX+18],0F
    0040466A  |. 8959 14        |MOV DWORD PTR DS:[ECX+14],EBX
    0040466D  |. 896424 30      |MOV DWORD PTR SS:[ESP+30],ESP
    00404671  |. 8859 04        |MOV BYTE PTR DS:[ECX+4],BL
    00404674  |. 8D70 01        |LEA ESI,DWORD PTR DS:[EAX+1]
    00404677  |> 8A10           |/MOV DL,BYTE PTR DS:[EAX]
    00404679  |. 40             ||INC EAX
    0040467A  |. 3AD3           ||CMP DL,BL
    0040467C  |.^75 F9          |\JNZ SHORT Original.00404677
    0040467E  |. 2BC6           |SUB EAX,ESI
    00404680  |. 50             |PUSH EAX
    00404681  |. 8D9424 B800000>|LEA EDX,DWORD PTR SS:[ESP+B8]
    00404688  |. 52             |PUSH EDX
    00404689  |. E8 22D5FFFF    |CALL Original.00401BB0
    0040468E  |. C78424 4001000>|MOV DWORD PTR SS:[ESP+140],1
    00404699  |. E8 222A0900    |CALL Original.004970C0
    0040469E  |. 8D88 E0240000  |LEA ECX,DWORD PTR DS:[EAX+24E0]
    004046A4  |. C78424 4001000>|MOV DWORD PTR SS:[ESP+140],-1
    004046AF  |. E8 FC851400    |CALL Original.0054CCB0
    004046B4  |. 8BE8           |MOV EBP,EAX
    004046B6  |. 3BEB           |CMP EBP,EBX
    004046B8  |. 74 1A          |JE SHORT Original.004046D4
    004046BA  |. 8B45 00        |MOV EAX,DWORD PTR SS:[EBP]
    004046BD  |. 8BCD           |MOV ECX,EBP
    004046BF  |. BF 6C685E00    |MOV EDI,Original.005E686C
    004046C4  |. FF50 44        |CALL DWORD PTR DS:[EAX+44]
    004046C7  |. 8BF0           |MOV ESI,EAX
    004046C9  |. B9 01000000    |MOV ECX,1
    004046CE  |. 33D2           |XOR EDX,EDX
    004046D0  |. F3:A6          |REPE CMPS BYTE PTR ES:[EDI],BYTE PTR DS>
    004046D2  |. 74 1A          |JE SHORT Original.004046EE
    004046D4  |> 8B4424 10      |MOV EAX,DWORD PTR SS:[ESP+10]
    004046D8  |. 40             |INC EAX
    004046D9  |. 83F8 04        |CMP EAX,4
    004046DC  |. 894424 10      |MOV DWORD PTR SS:[ESP+10],EAX
    004046E0  |.^0F8C 5AFFFFFF  \JL Original.00404640
    004046E6  |. 83CF FF        OR EDI,FFFFFFFF
    004046E9  |. E9 B7000000    JMP Original.004047A5
    004046EE  |> 8B8424 3001000>MOV EAX,DWORD PTR SS:[ESP+130]
    004046F5  |. 50             PUSH EAX
    004046F6  |. 8D4C24 1C      LEA ECX,DWORD PTR SS:[ESP+1C]
    004046FA  |. 68 146A5E00    PUSH Original.005E6A14                   ;  ASCII "%d"
    004046FF  |. 51             PUSH ECX
    00404700  |. E8 08D01600    CALL Original.0057170D
    00404705  |. 8B55 00        MOV EDX,DWORD PTR SS:[EBP]
    00404708  |. 83C4 0C        ADD ESP,0C
    0040470B  |. 8D4424 18      LEA EAX,DWORD PTR SS:[ESP+18]
    0040470F  |. 50             PUSH EAX
    00404710  |. 8BCD           MOV ECX,EBP
    00404712  |. FF52 40        CALL DWORD PTR DS:[EDX+40]
    00404715  |. 6A 02          PUSH 2
    00404717  |. 8BCD           MOV ECX,EBP
    00404719  |. E8 E24F1500    CALL Original.00559700
    0040471E  |. 8B4C24 10      MOV ECX,DWORD PTR SS:[ESP+10]
    00404722  |. 51             PUSH ECX
    00404723  |. 8D9424 9C00000>LEA EDX,DWORD PTR SS:[ESP+9C]
    0040472A  |. 68 0C6B5E00    PUSH Original.005E6B0C                   ;  ASCII "ClanResult_GameRoomImg1%d"
    0040472F  |. 52             PUSH EDX
    00404730  |. E8 D8CF1600    CALL Original.0057170D
    00404735  |. 83EC 10        SUB ESP,10
    00404738  |. 8BCC           MOV ECX,ESP
    0040473A  |. 8D8424 B400000>LEA EAX,DWORD PTR SS:[ESP+B4]
    00404741  |. C741 18 0F0000>MOV DWORD PTR DS:[ECX+18],0F
    00404748  |. 8959 14        MOV DWORD PTR DS:[ECX+14],EBX
    0040474B  |. 896424 30      MOV DWORD PTR SS:[ESP+30],ESP
    0040474F  |. 8859 04        MOV BYTE PTR DS:[ECX+4],BL
    00404752  |. 8D70 01        LEA ESI,DWORD PTR DS:[EAX+1]
    00404755  |> 8A10           /MOV DL,BYTE PTR DS:[EAX]
    00404757  |. 40             |INC EAX
    00404758  |. 3AD3           |CMP DL,BL
    0040475A  |.^75 F9          \JNZ SHORT Original.00404755
    0040475C  |. 2BC6           SUB EAX,ESI
    0040475E  |. 50             PUSH EAX
    0040475F  |. 8D8424 B800000>LEA EAX,DWORD PTR SS:[ESP+B8]
    00404766  |. 50             PUSH EAX
    00404767  |. E8 44D4FFFF    CALL Original.00401BB0
    0040476C  |. C78424 4001000>MOV DWORD PTR SS:[ESP+140],2
    00404777  |. E8 44290900    CALL Original.004970C0
    0040477C  |. 83CF FF        OR EDI,FFFFFFFF
    0040477F  |. 8D88 E0240000  LEA ECX,DWORD PTR DS:[EAX+24E0]
    00404785  |. 89BC24 4001000>MOV DWORD PTR SS:[ESP+140],EDI
    0040478C  |. E8 1F851400    CALL Original.0054CCB0
    00404791  |. 3BC3           CMP EAX,EBX
    00404793  |. 74 10          JE SHORT Original.004047A5
    00404795  |. 8B8C24 4001000>MOV ECX,DWORD PTR SS:[ESP+140]
    0040479C  |. 8B10           MOV EDX,DWORD PTR DS:[EAX]
    0040479E  |. 53             PUSH EBX
    0040479F  |. 51             PUSH ECX
    004047A0  |. 8BC8           MOV ECX,EAX
    004047A2  |. FF52 34        CALL DWORD PTR DS:[EDX+34]
    004047A5  |> 83EC 1C        SUB ESP,1C
    004047A8  |. 8BCC           MOV ECX,ESP
    004047AA  |. 896424 30      MOV DWORD PTR SS:[ESP+30],ESP
    004047AE  |. 6A 1A          PUSH 1A
    004047B0  |. BD 0F000000    MOV EBP,0F
    004047B5  |. 8969 18        MOV DWORD PTR DS:[ECX+18],EBP
    004047B8  |. 8959 14        MOV DWORD PTR DS:[ECX+14],EBX
    004047BB  |. 68 F06A5E00    PUSH Original.005E6AF0                   ;  ASCII "ClanResult_PlayerKillList1"
    004047C0  |. 8859 04        MOV BYTE PTR DS:[ECX+4],BL
    004047C3  |. E8 E8D3FFFF    CALL Original.00401BB0
    004047C8  |. C78424 4001000>MOV DWORD PTR SS:[ESP+140],3
    004047D3  |. E8 E8280900    CALL Original.004970C0
    004047D8  |. 8D88 E0240000  LEA ECX,DWORD PTR DS:[EAX+24E0]
    004047DE  |. 89BC24 4001000>MOV DWORD PTR SS:[ESP+140],EDI
    004047E5  |. E8 C6841400    CALL Original.0054CCB0
    004047EA  |. 8BF0           MOV ESI,EAX
    004047EC  |. 3BF3           CMP ESI,EBX
    004047EE  |. 74 3F          JE SHORT Original.0040482F
    004047F0  |. 8B9424 3401000>MOV EDX,DWORD PTR SS:[ESP+134]
    004047F7  |. 52             PUSH EDX
    004047F8  |. 8D4424 1C      LEA EAX,DWORD PTR SS:[ESP+1C]
    004047FC  |. 68 146A5E00    PUSH Original.005E6A14                   ;  ASCII "%d"
    00404801  |. 50             PUSH EAX
    00404802  |. E8 06CF1600    CALL Original.0057170D
    00404807  |. 83C4 0C        ADD ESP,0C
    0040480A  |. C64424 13 FF   MOV BYTE PTR SS:[ESP+13],0FF
    0040480F  |. C64424 10 FF   MOV BYTE PTR SS:[ESP+10],0FF
    00404814  |. C64424 11 F7   MOV BYTE PTR SS:[ESP+11],0F7
    00404819  |. C64424 12 94   MOV BYTE PTR SS:[ESP+12],94
    0040481E  |. 8B4C24 10      MOV ECX,DWORD PTR SS:[ESP+10]
    00404822  |. 51             PUSH ECX                                 ; /Arg2
    00404823  |. 8D5424 1C      LEA EDX,DWORD PTR SS:[ESP+1C]            ; |
    00404827  |. 52             PUSH EDX                                 ; |Arg1
    00404828  |. 8BCE           MOV ECX,ESI                              ; |
    0040482A  |. E8 E15E1400    CALL Original.0054A710                   ; \Original.0054A710
    0040482F  |> 83EC 1C        SUB ESP,1C
    00404832  |. 8BCC           MOV ECX,ESP
    00404834  |. 896424 30      MOV DWORD PTR SS:[ESP+30],ESP
    00404838  |. 6A 1B          PUSH 1B
    0040483A  |. 8969 18        MOV DWORD PTR DS:[ECX+18],EBP
    0040483D  |. 8959 14        MOV DWORD PTR DS:[ECX+14],EBX
    00404840  |. 68 D46A5E00    PUSH Original.005E6AD4                   ;  ASCII "ClanResult_PlayerDeathList1"
    00404845  |. 8859 04        MOV BYTE PTR DS:[ECX+4],BL
    00404848  |. E8 63D3FFFF    CALL Original.00401BB0
    0040484D  |. C78424 4001000>MOV DWORD PTR SS:[ESP+140],4
    00404858  |. E8 63280900    CALL Original.004970C0
    0040485D  |. 8D88 E0240000  LEA ECX,DWORD PTR DS:[EAX+24E0]
    00404863  |. 89BC24 4001000>MOV DWORD PTR SS:[ESP+140],EDI
    0040486A  |. E8 41841400    CALL Original.0054CCB0
    0040486F  |. 8BF0           MOV ESI,EAX
    00404871  |. 3BF3           CMP ESI,EBX
    00404873  |. 74 3F          JE SHORT Original.004048B4
    00404875  |. 8B8424 3801000>MOV EAX,DWORD PTR SS:[ESP+138]
    0040487C  |. 50             PUSH EAX
    0040487D  |. 8D4C24 1C      LEA ECX,DWORD PTR SS:[ESP+1C]
    00404881  |. 68 146A5E00    PUSH Original.005E6A14                   ;  ASCII "%d"
    00404886  |. 51             PUSH ECX
    00404887  |. E8 81CE1600    CALL Original.0057170D
    0040488C  |. 83C4 0C        ADD ESP,0C
    0040488F  |. C64424 13 FF   MOV BYTE PTR SS:[ESP+13],0FF
    00404894  |. C64424 10 FF   MOV BYTE PTR SS:[ESP+10],0FF
    00404899  |. C64424 11 F7   MOV BYTE PTR SS:[ESP+11],0F7
    0040489E  |. C64424 12 94   MOV BYTE PTR SS:[ESP+12],94
    004048A3  |. 8B5424 10      MOV EDX,DWORD PTR SS:[ESP+10]
    004048A7  |. 52             PUSH EDX                                 ; /Arg2
    004048A8  |. 8D4424 1C      LEA EAX,DWORD PTR SS:[ESP+1C]            ; |
    004048AC  |. 50             PUSH EAX                                 ; |Arg1
    004048AD  |. 8BCE           MOV ECX,ESI                              ; |
    004048AF  |. E8 5C5E1400    CALL Original.0054A710                   ; \Original.0054A710
    004048B4  |> 8B8C24 1C01000>MOV ECX,DWORD PTR SS:[ESP+11C]
    004048BB  |. 64:890D 000000>MOV DWORD PTR FS:[0],ECX
    004048C2  |. 8B8C24 1801000>MOV ECX,DWORD PTR SS:[ESP+118]
    004048C9  |. E8 60C81600    CALL Original.0057112E
    004048CE  |. 5F             POP EDI
    004048CF  |. 5E             POP ESI
    004048D0  |. 5D             POP EBP
    004048D1  |. 5B             POP EBX
    004048D2  |. 81C4 18010000  ADD ESP,118
    004048D8  \. C3             RETN

  3. #3
    Account Upgraded | Title Enabled! cerealnp is offline
    MemberRank
    Apr 2006 Join Date
    BrazilLocation
    441Posts

    Re: Function that deals with ScoreList Color

    Thanks, but I mean the scorelist when you press TAB Ingame. Thanks for that code though.

  4. #4
    RestyleGamerZ FTW Mambo is offline
    MemberRank
    Mar 2008 Join Date
    The NetherlandsLocation
    821Posts

    Re: Function that deals with ScoreList Color

    Uhm. Add me on Msn: RestyleMSN@live.nl

    I've an apart function for it in my runnable. But since i will forget to check it for you if you don't remind me i want you to add me xD

  5. #5
    Account Upgraded | Title Enabled! cerealnp is offline
    MemberRank
    Apr 2006 Join Date
    BrazilLocation
    441Posts

    Re: Function that deals with ScoreList Color

    Quote Originally Posted by Mambo View Post
    Uhm. Add me on Msn: RestyleMSN@live.nl

    I've an apart function for it in my runnable. But since i will forget to check it for you if you don't remind me i want you to add me xD
    Ok, no probs =P. Added. Thanks.

  6. #6
    Account Upgraded | Title Enabled! alfredao is offline
    MemberRank
    Jan 2008 Join Date
    Coronel FabriciLocation
    705Posts

    Re: Function that deals with ScoreList Color

    Did you got it to work?

  7. #7
    2D > 3D Wucas is offline
    MemberRank
    Dec 2008 Join Date
    In your bed :3Location
    2,523Posts

    Re: Function that deals with ScoreList Color

    yah i really want my tab menu to work D: it just crashes now (hehe i wonder why, maybe i jmp in there in the wrong place)

  8. #8
    Account Upgraded | Title Enabled! cerealnp is offline
    MemberRank
    Apr 2006 Join Date
    BrazilLocation
    441Posts

    Re: Function that deals with ScoreList Color

    Quote Originally Posted by BetrayedAcheron View Post
    yah i really want my tab menu to work D: it just crashes now (hehe i wonder why, maybe i jmp in there in the wrong place)
    But you have the code of the function of the TAB menu? I still needing it =P.

  9. #9
    2D > 3D Wucas is offline
    MemberRank
    Dec 2008 Join Date
    In your bed :3Location
    2,523Posts

    Re: Function that deals with ScoreList Color

    just search for all refrenced text strings
    Next right click and go to search for text string
    den type in tab and uncheck the *case sensitive*

    i think its the 2-3 time its mentioned

  10. #10
    Account Upgraded | Title Enabled! Trilest is offline
    MemberRank
    Apr 2009 Join Date
    The NetherlandsLocation
    549Posts

    Re: Function that deals with ScoreList Color

    Quote Originally Posted by BetrayedAcheron View Post
    just search for all refrenced text strings
    Next right click and go to search for text string
    den type in tab and uncheck the *case sensitive*

    i think its the 2-3 time its mentioned
    and how to color your own grades?

  11. #11
    2D > 3D Wucas is offline
    MemberRank
    Dec 2008 Join Date
    In your bed :3Location
    2,523Posts

    Re: Function that deals with ScoreList Color

    Quote Originally Posted by Trilest View Post
    and how to color your own grades?
    just unmask it and it will use your colour from the user grade itself o.o

  12. #12
    Account Upgraded | Title Enabled! cerealnp is offline
    MemberRank
    Apr 2006 Join Date
    BrazilLocation
    441Posts

    Re: Function that deals with ScoreList Color

    Quote Originally Posted by BetrayedAcheron View Post
    just unmask it and it will use your colour from the user grade itself o.o
    It will? I have mine unmasked with custom grades and the tab scorelist isn't colored.

  13. #13
    Account Upgraded | Title Enabled! Trilest is offline
    MemberRank
    Apr 2009 Join Date
    The NetherlandsLocation
    549Posts

    Re: Function that deals with ScoreList Color

    Quote Originally Posted by cerealnp View Post
    It will? I have mine unmasked with custom grades and the tab scorelist isn't colored.
    Yeah same here, Only the admin and dev are orange [but My dev talks red ] oO

  14. #14
    2D > 3D Wucas is offline
    MemberRank
    Dec 2008 Join Date
    In your bed :3Location
    2,523Posts

    Re: Function that deals with ScoreList Color

    hmmm weird i thought that's how it would work o.o. Hmm i guess im just going to have to spend time working on it .-.

  15. #15
    Account Upgraded | Title Enabled! cerealnp is offline
    MemberRank
    Apr 2006 Join Date
    BrazilLocation
    441Posts

    Re: Function that deals with ScoreList Color

    Quote Originally Posted by BetrayedAcheron View Post
    hmmm weird i thought that's how it would work o.o. Hmm i guess im just going to have to spend time working on it .-.
    If you can provide me the function I'll help you. The tab string search looks a bit wired, can you be a little bit more specific? Thanks.

  16. #16
    Member Donald Duck is offline
    MemberRank
    Jun 2009 Join Date
    USA.Location
    95Posts

    Re: Function that deals with ScoreList Color

    JMP to an empty part of the codecave.

    Then:
    MOV EBX,DWORD PTR DS:[EBP+45A]
    CMP EBX, 0FC (252)
    CMP EBX, 0FE (254)
    CMP EBX, 0FF (255)

    Took me 2 minutes to find out.

  17. #17
    Account Upgraded | Title Enabled! cerealnp is offline
    MemberRank
    Apr 2006 Join Date
    BrazilLocation
    441Posts

    Re: Function that deals with ScoreList Color

    Quote Originally Posted by Donald Duck View Post
    JMP to an empty part of the codecave.

    Then:
    MOV EBX,DWORD PTR DS:[EBP+45A]
    CMP EBX, 0FC (252)
    CMP EBX, 0FE (254)
    CMP EBX, 0FF (255)

    Took me 2 minutes to find out.
    Ok, but from where do I need to jump, I mean, which function do I need to edit? Thanks.

  18. #18
    Member Donald Duck is offline
    MemberRank
    Jun 2009 Join Date
    USA.Location
    95Posts

    Re: Function that deals with ScoreList Color

    Quote Originally Posted by cerealnp View Post
    Ok, but from where do I need to jump, I mean, which function do I need to edit? Thanks.
    The function that was mentioned above. (BetrayedAcheron)

  19. #19
    Account Upgraded | Title Enabled! Trilest is offline
    MemberRank
    Apr 2009 Join Date
    The NetherlandsLocation
    549Posts

    Re: Function that deals with ScoreList Color

    Quote Originally Posted by Donald Duck View Post
    JMP to an empty part of the codecave.

    Then:
    MOV EBX,DWORD PTR DS:[EBP+45A]
    CMP EBX, 0FC (252)
    CMP EBX, 0FE (254)
    CMP EBX, 0FF (255)

    Took me 2 minutes to find out.
    So I nop the red code betrayed showed, jump to codecave paste in
    MOV EBX,DWORD PTR DS:[EBP+45A]
    CMP EBX, 0FC (252)
    CMP EBX, 0FE (254)
    CMP EBX, 0FF (255)
    [and all my other grades like that]

    and then jump back right ?

    and then the tablist is unmasked [the color]?

  20. #20
    Aristrum Mark is offline
    MemberRank
    Aug 2007 Join Date
    United KingdomLocation
    474Posts

    Re: Function that deals with ScoreList Color

    1) Go to 004078BC
    2) Select from 004078BC to 0040790D
    3) Fill with NOPs
    4) Go back to 004078BC and assemble the following lines:

    Code:
    004078BC       E8 B6DE1D00           CALL theduel_.005E5777
    004078C1   |.  84C0                  |TEST AL,AL
    004078C3   |.  8B85 64040000         |MOV EAX,DWORD PTR SS:[EBP+464]              ;  theduel_.0066006F
    004078C9   |.  74 51                 |JE SHORT theduel_.0040791C
    004078CB       8BCD                  MOV ECX,EBP
    004078CD       8D81 D0030000         LEA EAX,DWORD PTR DS:[ECX+3D0]
    004078D3   |   90                    |NOP
    004078D4   |>  50                    |PUSH EAX
    004078D5   |.  68 B5060000           |PUSH 6B5
    004078DA   |.  E8 110C1000           |CALL theduel_.005084F0
    004078DF   |.  8BC8                  |MOV ECX,EAX
    004078E1   |.  E8 8A7D0C00           |CALL theduel_.004CF670
    004078E6       8B8D 84030000         MOV ECX,DWORD PTR SS:[EBP+384]
    004078EC       50                    PUSH EAX
    004078ED       51                    PUSH ECX
    004078EE       8D57 0C               LEA EDX,DWORD PTR DS:[EDI+C]
    004078F1       68 246D5E00           PUSH theduel_.005E6D24                       ;  ASCII "%d%s %s"
    004078F6       52                    PUSH EDX                                     ;  ntdll.KiFastSystemCallRet
    004078F7       E8 119E1600           CALL theduel_.0057170D
    004078FC       E9 82DA1D00           JMP theduel_.005E5383
    5) Go to 00407909 and assemble the following lines:

    Code:
    00407909       8B4C24 40             MOV ECX,DWORD PTR SS:[ESP+40]
    0040790D       83C4 14               ADD ESP,14
    6) Go to 005E5771 and hit in the following (this assumes only 255,254,2 are coloured... you may have to change it yourself to suit your needs)

    Code:
    005E5771       32C0                  XOR AL,AL
    005E5773       C3                    RETN
    005E5774       B0 01                 MOV AL,1
    005E5776       C3                    RETN
    005E5777       8B81 5A040000         MOV EAX,DWORD PTR DS:[ECX+45A]
    005E577D       3D FF000000           CMP EAX,0FF
    005E5782     ^ 74 F0                 JE SHORT theduel_.005E5774
    005E5784       3D FE000000           CMP EAX,0FE
    005E5789     ^ 74 E9                 JE SHORT theduel_.005E5774
    005E578B       83F8 02               CMP EAX,2
    005E578E     ^ 74 E4                 JE SHORT theduel_.005E5774
    005E5790     ^ EB DF                 JMP SHORT theduel_.005E5771
    7) Now go to 005E537D and do the following... (As above)

    Code:
    005E537D    > /61                    POPAD
    005E537E    .^|E9 8625E2FF           JMP Aristrum.00407909
    005E5383    > |60                    PUSHAD
    005E5384    . |C74424 60 FFFFFFFF    MOV DWORD PTR SS:[ESP+60],-1
    005E538C    . |8B85 5A040000         MOV EAX,DWORD PTR SS:[EBP+45A]               ;  Aristrum.00630069
    005E5392    . |3D FF000000           CMP EAX,0FF
    005E5397    . |75 08                 JNZ SHORT Aristrum.005E53A1
    005E5399    . |C74424 60 C6F7FFFF    MOV DWORD PTR SS:[ESP+60],-83A
    005E53A1    > |3D FE000000           CMP EAX,0FE
    005E53A6    . |75 08                 JNZ SHORT Aristrum.005E53B0
    005E53A8    . |C74424 60 00FC4DFF    MOV DWORD PTR SS:[ESP+60],FF4DFC00
    005E53B0    > |83F8 02               CMP EAX,2
    005E53B3    . |75 08                 JNZ SHORT Aristrum.005E53BD
    005E53B5    . |C74424 60 FFC6EEFF    MOV DWORD PTR SS:[ESP+60],FFEEC6FF
    005E53BD    >^\EB BE                 JMP SHORT Aristrum.005E537D
    8) Should be it ;D

  21. #21
    (。◕‿‿◕。) Nobody666 is offline
    MemberRank
    Oct 2008 Join Date
    1,773Posts

    Re: Function that deals with ScoreList Color

    Quote Originally Posted by Donald Duck View Post
    JMP to an empty part of the codecave.

    Then:
    MOV EBX,DWORD PTR DS:[EBP+45A]
    CMP EBX, 0FC (252)
    CMP EBX, 0FE (254)
    CMP EBX, 0FF (255)

    Took me 2 minutes to find out.
    I just tested that, didn't change anything

  22. #22
    Account Upgraded | Title Enabled! Trilest is offline
    MemberRank
    Apr 2009 Join Date
    The NetherlandsLocation
    549Posts

    Re: Function that deals with ScoreList Color

    Quote Originally Posted by Aristrum View Post
    1) Go to 004078BC
    2) Select from 004078BC to 0040790D
    3) Fill with NOPs
    4) Go back to 004078BC and assemble the following lines:

    Code:
    004078BC       E8 B6DE1D00           CALL theduel_.005E5777
    004078C1   |.  84C0                  |TEST AL,AL
    004078C3   |.  8B85 64040000         |MOV EAX,DWORD PTR SS:[EBP+464]              ;  theduel_.0066006F
    004078C9   |.  74 51                 |JE SHORT theduel_.0040791C
    004078CB       8BCD                  MOV ECX,EBP
    004078CD       8D81 D0030000         LEA EAX,DWORD PTR DS:[ECX+3D0]
    004078D3   |   90                    |NOP
    004078D4   |>  50                    |PUSH EAX
    004078D5   |.  68 B5060000           |PUSH 6B5
    004078DA   |.  E8 110C1000           |CALL theduel_.005084F0
    004078DF   |.  8BC8                  |MOV ECX,EAX
    004078E1   |.  E8 8A7D0C00           |CALL theduel_.004CF670
    004078E6       8B8D 84030000         MOV ECX,DWORD PTR SS:[EBP+384]
    004078EC       50                    PUSH EAX
    004078ED       51                    PUSH ECX
    004078EE       8D57 0C               LEA EDX,DWORD PTR DS:[EDI+C]
    004078F1       68 246D5E00           PUSH theduel_.005E6D24                       ;  ASCII "%d%s %s"
    004078F6       52                    PUSH EDX                                     ;  ntdll.KiFastSystemCallRet
    004078F7       E8 119E1600           CALL theduel_.0057170D
    004078FC       E9 82DA1D00           JMP theduel_.005E5383
    5) Go to 00407909 and assemble the following lines:

    Code:
    00407909       8B4C24 40             MOV ECX,DWORD PTR SS:[ESP+40]
    0040790D       83C4 14               ADD ESP,14
    6) Go to 005E5771 and hit in the following (this assumes only 255,254,2 are coloured... you may have to change it yourself to suit your needs)

    Code:
    005E5771       32C0                  XOR AL,AL
    005E5773       C3                    RETN
    005E5774       B0 01                 MOV AL,1
    005E5776       C3                    RETN
    005E5777       8B81 5A040000         MOV EAX,DWORD PTR DS:[ECX+45A]
    005E577D       3D FF000000           CMP EAX,0FF
    005E5782     ^ 74 F0                 JE SHORT theduel_.005E5774
    005E5784       3D FE000000           CMP EAX,0FE
    005E5789     ^ 74 E9                 JE SHORT theduel_.005E5774
    005E578B       83F8 02               CMP EAX,2
    005E578E     ^ 74 E4                 JE SHORT theduel_.005E5774
    005E5790     ^ EB DF                 JMP SHORT theduel_.005E5771
    7) Now go to 005E537D and do the following... (As above)

    Code:
    005E537D    > /61                    POPAD
    005E537E    .^|E9 8625E2FF           JMP Aristrum.00407909
    005E5383    > |60                    PUSHAD
    005E5384    . |C74424 60 FFFFFFFF    MOV DWORD PTR SS:[ESP+60],-1
    005E538C    . |8B85 5A040000         MOV EAX,DWORD PTR SS:[EBP+45A]               ;  Aristrum.00630069
    005E5392    . |3D FF000000           CMP EAX,0FF
    005E5397    . |75 08                 JNZ SHORT Aristrum.005E53A1
    005E5399    . |C74424 60 C6F7FFFF    MOV DWORD PTR SS:[ESP+60],-83A
    005E53A1    > |3D FE000000           CMP EAX,0FE
    005E53A6    . |75 08                 JNZ SHORT Aristrum.005E53B0
    005E53A8    . |C74424 60 00FC4DFF    MOV DWORD PTR SS:[ESP+60],FF4DFC00
    005E53B0    > |83F8 02               CMP EAX,2
    005E53B3    . |75 08                 JNZ SHORT Aristrum.005E53BD
    005E53B5    . |C74424 60 FFC6EEFF    MOV DWORD PTR SS:[ESP+60],FFEEC6FF
    005E53BD    >^\EB BE                 JMP SHORT Aristrum.005E537D
    8) Should be it ;D
    Wow thanks i'm on it right away

  23. #23
    Member Donald Duck is offline
    MemberRank
    Jun 2009 Join Date
    USA.Location
    95Posts

    Re: Function that deals with ScoreList Color

    Quote Originally Posted by Aristrum View Post
    1) Go to 004078BC
    2) Select from 004078BC to 0040790D
    3) Fill with NOPs
    4) Go back to 004078BC and assemble the following lines:

    Code:
    004078BC       E8 B6DE1D00           CALL theduel_.005E5777
    004078C1   |.  84C0                  |TEST AL,AL
    004078C3   |.  8B85 64040000         |MOV EAX,DWORD PTR SS:[EBP+464]              ;  theduel_.0066006F
    004078C9   |.  74 51                 |JE SHORT theduel_.0040791C
    004078CB       8BCD                  MOV ECX,EBP
    004078CD       8D81 D0030000         LEA EAX,DWORD PTR DS:[ECX+3D0]
    004078D3   |   90                    |NOP
    004078D4   |>  50                    |PUSH EAX
    004078D5   |.  68 B5060000           |PUSH 6B5
    004078DA   |.  E8 110C1000           |CALL theduel_.005084F0
    004078DF   |.  8BC8                  |MOV ECX,EAX
    004078E1   |.  E8 8A7D0C00           |CALL theduel_.004CF670
    004078E6       8B8D 84030000         MOV ECX,DWORD PTR SS:[EBP+384]
    004078EC       50                    PUSH EAX
    004078ED       51                    PUSH ECX
    004078EE       8D57 0C               LEA EDX,DWORD PTR DS:[EDI+C]
    004078F1       68 246D5E00           PUSH theduel_.005E6D24                       ;  ASCII "%d%s %s"
    004078F6       52                    PUSH EDX                                     ;  ntdll.KiFastSystemCallRet
    004078F7       E8 119E1600           CALL theduel_.0057170D
    004078FC       E9 82DA1D00           JMP theduel_.005E5383
    5) Go to 00407909 and assemble the following lines:

    Code:
    00407909       8B4C24 40             MOV ECX,DWORD PTR SS:[ESP+40]
    0040790D       83C4 14               ADD ESP,14
    6) Go to 005E5771 and hit in the following (this assumes only 255,254,2 are coloured... you may have to change it yourself to suit your needs)

    Code:
    005E5771       32C0                  XOR AL,AL
    005E5773       C3                    RETN
    005E5774       B0 01                 MOV AL,1
    005E5776       C3                    RETN
    005E5777       8B81 5A040000         MOV EAX,DWORD PTR DS:[ECX+45A]
    005E577D       3D FF000000           CMP EAX,0FF
    005E5782     ^ 74 F0                 JE SHORT theduel_.005E5774
    005E5784       3D FE000000           CMP EAX,0FE
    005E5789     ^ 74 E9                 JE SHORT theduel_.005E5774
    005E578B       83F8 02               CMP EAX,2
    005E578E     ^ 74 E4                 JE SHORT theduel_.005E5774
    005E5790     ^ EB DF                 JMP SHORT theduel_.005E5771
    7) Now go to 005E537D and do the following... (As above)

    Code:
    005E537D    > /61                    POPAD
    005E537E    .^|E9 8625E2FF           JMP Aristrum.00407909
    005E5383    > |60                    PUSHAD
    005E5384    . |C74424 60 FFFFFFFF    MOV DWORD PTR SS:[ESP+60],-1
    005E538C    . |8B85 5A040000         MOV EAX,DWORD PTR SS:[EBP+45A]               ;  Aristrum.00630069
    005E5392    . |3D FF000000           CMP EAX,0FF
    005E5397    . |75 08                 JNZ SHORT Aristrum.005E53A1
    005E5399    . |C74424 60 C6F7FFFF    MOV DWORD PTR SS:[ESP+60],-83A
    005E53A1    > |3D FE000000           CMP EAX,0FE
    005E53A6    . |75 08                 JNZ SHORT Aristrum.005E53B0
    005E53A8    . |C74424 60 00FC4DFF    MOV DWORD PTR SS:[ESP+60],FF4DFC00
    005E53B0    > |83F8 02               CMP EAX,2
    005E53B3    . |75 08                 JNZ SHORT Aristrum.005E53BD
    005E53B5    . |C74424 60 FFC6EEFF    MOV DWORD PTR SS:[ESP+60],FFEEC6FF
    005E53BD    >^\EB BE                 JMP SHORT Aristrum.005E537D
    8) Should be it ;D
    Why JMP so many times?

    Quote Originally Posted by Nobody666 View Post
    I just tested that, didn't change anything
    Sigh... I'll give an example.

    First, navigate to 004078F5. NOP 004078F5 until 00407904 and then do a JMP to the bottom, for example address 005E50E2. On 005E50E2, assemble the following

    MOV EBX,DWORD PTR DS:[EBP+45A] ;Fill the UGrade of the player in the EBX register
    CMP EBX, 0FE ;Check if the EBX is equal to 254
    JNE SHORT 005E50EC ;If not, JMP to the CMP EBX, 0FF. The address here is not right but you can change it yourself
    MOV BYTE PTR SS:[ESP+3C],0FF ;The R
    MOV BYTE PTR SS:[ESP+3D],80 ;The G
    MOV BYTE PTR SS:[ESP+3E],40 ;The B
    MOV BYTE PTR SS:[ESP+3F],0FF; The A
    JMP 00407909 ;JMP back to where you came from.
    CMP EBX, 0FF ;Check if EBX is equal to 255. JMP to here with the JNE under the previous CMP.
    JNE 00407909 ;If it's not 0FF, something really weird happened. But to prevent crashes, just JMP back.
    MOV BYTE PTR SS:[ESP+3C],0FF ;The R
    MOV BYTE PTR SS:[ESP+3D],80 ;The G
    MOV BYTE PTR SS:[ESP+3E],40 ;The B
    MOV BYTE PTR SS:[ESP+3F],0FF; The A
    JMP 00407909 ;JMP back to where you came from

  24. #24
    Praise the Sun! Solaire is offline
    MemberRank
    Dec 2007 Join Date
    Undead BurgLocation
    2,862Posts

    Re: Function that deals with ScoreList Color

    Quote Originally Posted by Donald Duck View Post
    Why JMP so many times?



    Sigh... I'll give an example.

    First, navigate to 004078F5. NOP 004078F5 until 00407904 and then do a JMP to the bottom, for example address 005E50E2. On 005E50E2, assemble the following

    MOV EBX,DWORD PTR DS:[EBP+45A] ;Fill the UGrade of the player in the EBX register
    CMP EBX, 0FE ;Check if the EBX is equal to 254
    JNE SHORT 005E50EC ;If not, JMP to the CMP EBX, 0FF. The address here is not right but you can change it yourself
    MOV BYTE PTR SS:[ESP+3C],0FF ;The R
    MOV BYTE PTR SS:[ESP+3D],80 ;The G
    MOV BYTE PTR SS:[ESP+3E],40 ;The B
    MOV BYTE PTR SS:[ESP+3F],0FF; The A
    JMP 00407909 ;JMP back to where you came from.
    CMP EBX, 0FF ;Check if EBX is equal to 255. JMP to here with the JNE under the previous CMP.
    JNE 00407909 ;If it's not 0FF, something really weird happened. But to prevent crashes, just JMP back.
    MOV BYTE PTR SS:[ESP+3C],0FF ;The R
    MOV BYTE PTR SS:[ESP+3D],80 ;The G
    MOV BYTE PTR SS:[ESP+3E],40 ;The B
    MOV BYTE PTR SS:[ESP+3F],0FF; The A
    JMP 00407909 ;JMP back to where you came from
    Gj. If you want more colors, do another JNE from under the CMP EBX, 0FF to, for example, CMP EBX, 2. Then do JNE 00407909 from there or do another JNE to CMP EBX, 3. It's all up to you.

  25. #25
    Account Upgraded | Title Enabled! Trilest is offline
    MemberRank
    Apr 2009 Join Date
    The NetherlandsLocation
    549Posts

    Re: Function that deals with ScoreList Color

    Quote Originally Posted by Trilest View Post
    Wow thanks i'm on it right away
    Damn it worked thanks <3



Page 1 of 2 12 LastLast

Advertisement