[rELEAsE]Wii Stack

Bapes

Forever Rain
Joined
Mar 9, 2004
Messages
922
Reaction score
0
Location
A road, with a house on it.
Website
frltd.blog125.fc2.com
I've kept it private for a while.... Features everything that Oblivion has (http://www.battleforums.com/showthread.php?t=125334). But something I developed which is... STACK HACK!! Here's a preview of what it was like when I was making it. http://img267.imageshack.us/my.php?image=hacking6um1.jpg however, this code is actual source. Here is how you run it: 1. Copy the code and paste it at the bottom of Oblivion.dll or whichever one you have. 2. The hotkey is NUMPAD 5. 3. Select which building area you want to stack, hit Numpad 5 to turn off lights and stack the building. Happy? Was supposed to release it yesterday but something came up. You can also do this if you use Cheat Engine. But you need a undetected one... This one below should be added to your oblivion.dll since Oblivion already bypasses some protection.
Code:
[ENABLE]  
ALLOC(ItemVAC, 124)  
LABEL(ret) 
 
ItemVAC: 
DB 60 
MOV ECX, [EBP+8] 
MOV EBX, [EBP-24] 
MOV [ECX], EBX 
MOV [ECX+4], EAX 
MOV ECX, EAX 
MOV EAX, EBX 
LEA EDX, [EAX-19] 
MOV [EBP-34], EDX 
LEA EDX, [ECX-32] 
add EAX, 19 
add ECX, A 
MOV [EBP-30], EDX 
MOV [EBP-2C], EAX 
MOV [EBP-28], ECX 
DB 61 50 
push [EBP-24] 
LEA EAX, [EBP-34] 
JMP ret 
 
004A03AF:  
JMP ItemVAC 
DB 90 90 
ret: 
 
[DISABLE]  
DEALLOC(ItemVAC) 
 
004A03AF:  
DB 50  
push [EBP-24] 
lea EAX, [EBP-34]
Here is the one for the cheat engine
ACTIVATE THIS FIRST
Code:
[enable] 
 
VacTime: 
js 0ff90c16 
add [eax],al 
cmp ebx, 03 
je DoVac 
//Modified Code 
cmp ebx, 04 
je DXReset 
jmp DoNormal 
 
DXFindChar: 
mov [esi+114],edi 
mov eax,0 
 
mov [edx],edi 
 
DoVac: 
mov eax,[DXCounter] 
cmp eax,[VacTime] 
inc eax 
mov [DXCounter],eax 
jae DXPause 
//Original 
mov ebx,[DXListOffset] 
dec ebx 
mov ecx,ESIList 
mov eax,[ecx+ebx*4] 
cmp esi,eax 
je DoNormal 
 
mov ebx,[DXType] 
cmp ebx, 02 
jne DXMonster 
mov edi,[eax+114] 
jmp DoNormal 
 
DXMonster: 
cmp ebx, 03 
jne NoDupe 
mov edi,[EDIValue] 
jmp DoNormal 
 
NoDupe: 
mov ebx, 0 
mov [DXListOffset],ebx 
mov [DXCounter],0 
 
DoNormal: 
mov [esi+114],edi 
 
[disable] 
0067699A
Then use this one FOR ZERG:
Code:
[ENABLE] 
registersymbol(dvtype)  
alloc(dv,100)  
alloc(uvx,100)  
alloc(uvy,100)  
alloc(dvtype,4)  
label(normalx)  
label(normaly)  
label(endx)  
label(endy)  
label(backdv)  
label(backuvy)  
label(backuvx)  
label(dvzero)  
label(dvone)  
label(uvzero)  
label(uvone)  
alloc(ItemVac, 1024) 
Alloc(Unrandomizer,64)  
Alloc(Value,32)  
alloc(YoYoDupe, 2048)  
alloc(lastChnl,4)  
alloc(lastMap,4)  
alloc(RunFlag, 4)  
alloc(EDIValue, 8)  
registersymbol(RunFlag)  
label(DoneChkMap)  
label(DoneChkChnl)  
label(DupeXVac)  
label(DoNormal)  
label(rtnYoyo)  
label(SaveVac1)  
label(SaveVac2)  
label(PScanYoyo)  
006B7BA5:  
jb 006B7C13  
006B7B14:  
jnb 006B7B88  
 
YoYoDupe:  
mov eax, [7D58A0]  
add eax, 5b8  
mov eax, [eax]  
sub eax, c  
 
cmp [RunFlag], 1 //vac2 spot  
je SaveVac2  
cmp [RunFlag], 2 //vac on  
je DupeXVac  
cmp [RunFlag], 3 //vac off  
je DoNormal  
 
SaveVac1:  
mov eax,[eax+114]  
mov [RunFlag],2  
mov [EDIValue],eax  
mov [EDIValue+4],eax  
jmp DoNormal  
 
SaveVac2:  
mov eax, [eax+114]  
mov [RunFlag],2  
mov [EDIValue+4],eax  
jmp DoNormal  
 
DupeXVac:  
cmp esi,eax  
je DoNormal  
mov eax,esi  
shr eax,8  
and eax, 4  
mov edi,[EDIValue+eax]  
 
DoNormal:  
pop eax  
mov [esi+114],edi  
jmp rtnYoyo  
 
//----------------------------------  
PScanYoyo:  
push eax  
 
//check if alien exist  
mov eax,[7D4DCC]  
mov eax, [eax+18]  
cmp eax,0  
jne DoNormal  
 
// Check channel change  
mov eax, [7D4ECC]  
mov eax, [eax+204c]  
cmp eax, [lastChnl]  
je DoneChkChnl  
mov [RunFlag],0  
mov [lastChnl], eax  
DoneChkChnl:  
 
// Check map change  
mov eax, [7D5938]  
mov eax, [eax+5D4]  
cmp eax, [lastMap]  
je DoneChkMap  
mov [RunFlag],0  
mov [lastMap], eax  
DoneChkMap:  
 
jmp YoYoDupe  
//jmp DoNormal  
 
//----------------------------------  
RunFlag:  
db 00 00 00 00  
 
EDIValue:  
db 00 00 00 00  
db 00 00 00 00  
 
lastChnl:  
db 00 00 00 00  
 
lastMap:  
db 00 00 00 00  
 
 
006B7DC9:  
jmp PScanYoyo  
nop  
rtnYoyo:  
 
alloc(setYoyoFlag,1024)  
label(ChkFlagOn)  
label(ChkFlagReset)  
label(ChkFlagVac2)  
label(setFlagNormal)  
label(rtnsetYoyoFlag)  
 
setYoyoFlag:  
cmp eax,16 //22 mesos to off  
jne ChkFlagOn  
mov [RunFlag],3  
jmp setFlagNormal  
 
ChkFlagOn:  
cmp eax,21 //33 mesos to on  
jne ChkFlagReset  
mov [RunFlag],2  
jmp setFlagNormal  
 
ChkFlagReset:  
cmp eax,2c //44 mesos to reset vac spot  
jne ChkFlagVac2  
mov [RunFlag],0  
jmp setFlagNormal  
 
ChkFlagVac2:  
cmp eax,37 //55 mesos to set vac2 spot  
jne setFlagNormal  
mov [RunFlag],1  
jmp setFlagNormal  
 
setFlagNormal:  
cmp eax,[esi+000000b4]  
jmp rtnsetYoyoFlag  
 
006B1A50:  
jmp setYoyoFlag  
nop  
rtnsetYoyoFlag:  
 
Registersymbol(Value)  
 
Unrandomizer:  
mov eax, [Value]  
and eax,00007fff  
jmp 00715CE2  
 
00715CDD:  
jmp Unrandomizer  
51bf65:  
jne 0051bf76  
51bf74:  
je 0051bf85  
0071b8e8:  
dd 0  
 
006B7B14:  
jnb 006B7B88 
006B6520:  
jne 006b6713 
00715CDD: 
mov eax, 11111112 
006B7B14:  
jnb 006B7B88 
 
ItemVac:  
pushad  
mov ecx, [ebp+8]  
mov ebx, [ebp-24]  
mov [ecx], ebx  
mov [ecx+4], eax  
mov ecx, eax  
mov eax, ebx  
 
lea edx, [eax-19]  
mov [ebp-34], edx  
lea edx, [ecx-32]  
add eax, 19  
add ecx, A  
mov [ebp-30], edx  
mov [ebp-2C], eax  
mov [ebp-28], ecx  
popad  
 
push eax  
push [ebp-24]  
lea eax, [ebp-34]  
jmp 004a2238  
 
004a2231:  
jmp ItemVac  
nop  
nop  
 
dv:  
mov eax, [007D58A0]  
push eax  
mov eax, [eax+590]  
mov [ebx+3FC], eax  
add [ebx+3FC], 100  
cmp [dvtype], 0  
je dvzero  
cmp [dvtype], 1  
je dvone  
sub eax, 100  
jmp dvzero  
 
dvone:  
add eax, 100  
 
dvzero:  
mov [ebx+3F4], eax  
pop eax  
mov eax, [eax+594]  
mov [ebx+3F8], eax  
mov [ebx+400], eax  
jmp backdv  
 
uvx:  
push ecx  
mov ecx, [007D58A0]  
add ecx,590  
cmp ebx, ecx  
je normalx  
mov ecx, [ecx]  
cmp [dvtype], 0  
je uvzero  
cmp [dvtype], 1  
je uvone  
sub ecx, 100  
jmp uvzero  
 
uvone:  
add ecx, 100  
 
uvzero:  
cmp [ebx],ecx  
je endx  
normalx:  
mov [ebx],eax  
 
endx:  
pop ecx  
mov edi, [ebp+10]  
jmp backuvx  
 
uvy:  
push ecx  
mov ecx, [007D58A0]  
add ecx,594  
cmp edi, ecx  
je normaly  
mov ecx, [ecx]  
cmp [edi],ecx  
je endy  
 
normaly:  
mov [edi],eax  
 
endy:  
pop ecx  
mov ebx, [ebp+14]  
jmp backuvy  
 
005384E3:  
jmp dv  
nop  
backdv:  
 
006B8FC7:  
jmp uvx  
backuvx:  
 
006B902C:  
jmp uvy  
backuvy: 
 
[DISABLE]  
006B7DC9:  
mov [esi+00000114],edi  
 
006B1A50:  
cmp eax,[esi+000000b4]  
 
dealloc(YoYoDupe, 1024)  
dealloc(lastChnl,4)  
dealloc(lastMap,4)  
dealloc(RunFlag, 4)  
dealloc(EDIValue, 8)  
unregistersymbol(RunFlag)  
 
dealloc(setYoyoFlag) 
006B7BA5:  
jae 006B7C13 
006B7B14:  
jna 006B7B88  
5384E3:  
mov [ebx+400], eax  
 
6B8FC7:  
mov [ebx],eax  
mov edi, [ebp+10]  
 
6B902C:  
mov [edi],eax  
mov ebx, [ebp+14]  
 
00715CDD:  
and eax,00007fff  
 
Dealloc(Unrandomizer)  
Dealloc(Value)  
 
Unregistersymbol(Value)  
51bf65:  
je 0051bf76  
51bf74:  
jne 0051bf85  
0071b8e8:  
dd 0  
 
006B7B14:  
jna 006B7B88  
006B6520:  
je 006b6713 
00715CDD: 
and eax, 00007fff 
006B7B14:  
jna 006B7B88 
004a2231:  
push EAX  
004a2232:  
push [ebp-24]  
004a2235:  
lea eax, [ebp-34] 
005384E3:  
mov [ebx+400], eax  
 
006B8FC7:  
mov [ebx],eax  
mov edi, [ebp+10]  
 
006B902C:  
mov [edi],eax  
mov ebx, [ebp+14]  
 
dealloc(dv)  
dealloc(uvx)  
dealloc(uvy)  
dealloc(dvtype)  
unregistersymbol(dvtype)
Here for Terran/Protoss (Seperate becasue since Zerg uses a drone to make, and terran and protoss dont and Protoss can move and build but terran can repair.)
Code:
[ENABLE] 
registersymbol(dvtype)  
alloc(dv,100)  
alloc(uvx,100)  
alloc(uvy,100)  
alloc(dvtype,4)  
label(normalx)  
label(normaly)  
label(endx)  
label(endy)  
label(backdv)  
label(backuvy)  
label(backuvx)  
label(dvzero)  
label(dvone)  
label(uvzero)  
label(uvone)  
alloc(ItemVac, 1024) 
Alloc(Unrandomizer,64)  
Alloc(Value,32)  
alloc(YoYoDupe, 2048)  
alloc(lastChnl,4)  
alloc(lastMap,4)  
alloc(RunFlag, 4)  
alloc(EDIValue, 8)  
registersymbol(RunFlag)  
label(DoneChkMap)  
label(DoneChkChnl)  
label(DupeXVac)  
label(DoNormal)  
label(rtnYoyo)  
label(SaveVac1)  
label(SaveVac2)  
label(PScanYoyo)  
006B7BA5:  
jb 006B7C13  
006B7AA5:  
jbe 006b7AFA  
 
YoYoDupe:  
mov eax, [7D58A0]  
add eax, 5b8  
mov eax, [eax]  
sub eax, c  
 
cmp [RunFlag], 1 //vac2 spot  
je SaveVac2  
cmp [RunFlag], 2 //vac on  
je DupeXVac  
cmp [RunFlag], 3 //vac off  
je DoNormal  
 
SaveVac1:  
mov eax,[eax+114]  
mov [RunFlag],2  
mov [EDIValue],eax  
mov [EDIValue+4],eax  
jmp DoNormal  
 
SaveVac2:  
mov eax, [eax+114]  
mov [RunFlag],2  
mov [EDIValue+4],eax  
jmp DoNormal  
 
DupeXVac:  
cmp esi,eax  
je DoNormal  
mov eax,esi  
shr eax,8  
and eax, 4  
mov edi,[EDIValue+eax]  
 
DoNormal:  
pop eax  
mov [esi+114],edi  
jmp rtnYoyo  
 
//----------------------------------  
PScanYoyo:  
push eax  
 
//check if alien exist  
mov eax,[7D4DCC]  
mov eax, [eax+18]  
cmp eax,0  
jne DoNormal  
 
// Check channel change  
mov eax, [7D4ECC]  
mov eax, [eax+204c]  
cmp eax, [lastChnl]  
je DoneChkChnl  
mov [RunFlag],0  
mov [lastChnl], eax  
DoneChkChnl:  
 
// Check map change  
mov eax, [7D5938]  
mov eax, [eax+5D4]  
cmp eax, [lastMap]  
je DoneChkMap  
mov [RunFlag],0  
mov [lastMap], eax  
DoneChkMap:  
 
jmp YoYoDupe  
//jmp DoNormal  
 
//----------------------------------  
RunFlag:  
db 00 00 00 00  
 
EDIValue:  
db 00 00 00 00  
db 00 00 00 00  
 
lastChnl:  
db 00 00 00 00  
 
lastMap:  
db 00 00 00 00  
 
 
006B7DC9:  
jmp PScanYoyo  
nop  
rtnYoyo:  
 
alloc(setYoyoFlag,1024)  
label(ChkFlagOn)  
label(ChkFlagReset)  
label(ChkFlagVac2)  
label(setFlagNormal)  
label(rtnsetYoyoFlag)  
 
setYoyoFlag:  
cmp eax,16 //22 mesos to off  
jne ChkFlagOn  
mov [RunFlag],3  
jmp setFlagNormal  
 
ChkFlagOn:  
cmp eax,21 //33 mesos to on  
jne ChkFlagReset  
mov [RunFlag],2  
jmp setFlagNormal  
 
ChkFlagReset:  
cmp eax,2c //44 mesos to reset vac spot  
jne ChkFlagVac2  
mov [RunFlag],0  
jmp setFlagNormal  
 
ChkFlagVac2:  
cmp eax,37 //55 mesos to set vac2 spot  
jne setFlagNormal  
mov [RunFlag],1  
jmp setFlagNormal  
 
setFlagNormal:  
cmp eax,[esi+000000b4]  
jmp rtnsetYoyoFlag  
 
006B1A50:  
jmp setYoyoFlag  
nop  
rtnsetYoyoFlag:  
 
Registersymbol(Value)  
 
Unrandomizer:  
mov eax, [Value]  
and eax,00007fff  
jmp 00715CE2  
 
00715CDD:  
jmp Unrandomizer  
51bf65:  
jne 0051bf76  
51bf74:  
je 0051bf85  
0071b8e8:  
dd 0  
 
006B7AA5:  
jbe 006b7AFA 
006B6520:  
jne 006b6713 
00715CDD: 
mov eax, 11111113 
006B7AA5:  
jbe 006b7AFA 
 
ItemVac:  
pushad  
mov ecx, [ebp+8]  
mov ebx, [ebp-24]  
mov [ecx], ebx  
mov [ecx+4], eax  
mov ecx, eax  
mov eax, ebx  
 
lea edx, [eax-19]  
mov [ebp-34], edx  
lea edx, [ecx-32]  
add eax, 19  
add ecx, A  
mov [ebp-30], edx  
mov [ebp-2C], eax  
mov [ebp-28], ecx  
popad  
 
push eax  
push [ebp-24]  
lea eax, [ebp-34]  
jmp 004a2238  
 
004a2231:  
jmp ItemVac  
nop  
nop  
 
dv:  
mov eax, [007D58A0]  
push eax  
mov eax, [eax+590]  
mov [ebx+3FC], eax  
add [ebx+3FC], 100  
cmp [dvtype], 0  
je dvzero  
cmp [dvtype], 1  
je dvone  
sub eax, 100  
jmp dvzero  
 
dvone:  
add eax, 100  
 
dvzero:  
mov [ebx+3F4], eax  
pop eax  
mov eax, [eax+594]  
mov [ebx+3F8], eax  
mov [ebx+400], eax  
jmp backdv  
 
uvx:  
push ecx  
mov ecx, [007D58A0]  
add ecx,590  
cmp ebx, ecx  
je normalx  
mov ecx, [ecx]  
cmp [dvtype], 0  
je uvzero  
cmp [dvtype], 1  
je uvone  
sub ecx, 100  
jmp uvzero  
 
uvone:  
add ecx, 100  
 
uvzero:  
cmp [ebx],ecx  
je endx  
normalx:  
mov [ebx],eax  
 
endx:  
pop ecx  
mov edi, [ebp+10]  
jmp backuvx  
 
uvy:  
push ecx  
mov ecx, [007D58A0]  
add ecx,594  
cmp edi, ecx  
je normaly  
mov ecx, [ecx]  
cmp [edi],ecx  
je endy  
 
normaly:  
mov [edi],eax  
 
endy:  
pop ecx  
mov ebx, [ebp+14]  
jmp backuvy  
 
005384E3:  
jmp dv  
nop  
backdv:  
 
006B8FC7:  
jmp uvx  
backuvx:  
 
006B902C:  
jmp uvy  
backuvy: 
 
[DISABLE]  
006B7DC9:  
mov [esi+00000114],edi  
 
006B1A50:  
cmp eax,[esi+000000b4]  
 
dealloc(YoYoDupe, 1024)  
dealloc(lastChnl,4)  
dealloc(lastMap,4)  
dealloc(RunFlag, 4)  
dealloc(EDIValue, 8)  
unregistersymbol(RunFlag)  
 
dealloc(setYoyoFlag) 
006B7BA5:  
jae 006B7C13 
006B7AA5:  
jae 006b7AFA 
5384E3:  
mov [ebx+400], eax  
 
6B8FC7:  
mov [ebx],eax  
mov edi, [ebp+10]  
 
6B902C:  
mov [edi],eax  
mov ebx, [ebp+14]  
 
00715CDD:  
and eax,00007fff  
 
Dealloc(Unrandomizer)  
Dealloc(Value)  
 
Unregistersymbol(Value)  
51bf65:  
je 0051bf76  
51bf74:  
jne 0051bf85  
0071b8e8:  
dd 0  
006B7AA5:  
jae 006b7AFA 
006B6520:  
je 006b6713 
00715CDD: 
and eax, 00007fff 
006B7AA5:  
jae 006b7AFA 
004a2231:  
push EAX  
004a2232:  
push [ebp-24]  
004a2235:  
lea eax, [ebp-34] 
005384E3:  
mov [ebx+400], eax  
 
006B8FC7:  
mov [ebx],eax  
mov edi, [ebp+10]  
 
006B902C:  
mov [edi],eax  
mov ebx, [ebp+14]  
 
dealloc(dv)  
dealloc(uvx)  
dealloc(uvy)  
dealloc(dvtype)  
unregistersymbol(dvtype)
IF YOU DISCONNECT, ACTIVATE THIS WHEN YOU START UP STARCRAFT OR BEFORE YOU LOG IN, ACTIVATE IT FIRST BEFORE ALL OTHER HACKS!
Code:
[ENABLE] 
ALLOC(crc,128) 
ALLOC(dump,3670018) 
LABEL(oldmem) 
LABEL(ret) 
LOADBINARY(dump,gMS.CEM) 
 
crc:  
CMP ECX,00400000 
JB oldmem 
CMP ECX,00780000 
JA oldmem 
MOV EAX,dump 
ADD ECX, dump-400000  
 
oldmem:  
MOV EAX,[EBP+10]  
DB 56 57 
JMP ret 
 
0046548A:  
JMP crc 
ret: 
 
[DISABLE]  
0046548A:  
MOV EAX,[EBP+10]  
DB 56 57 
DEALLOC(crc)  
DEALLOC(dump)
If you can't tick it, download the CEM file and put it where your engine is. http://rapidshare.com/files/23155230/gMS.CEM
(It reads a file called gMS.CEM Do not rename it)http://www.rapidshare,com/files/15647894/WiiStack.rar
 

T3h Sorrow

"Best ***s on the forum"
Joined
Nov 2, 2006
Messages
870
Reaction score
1
Location
Frederick
i honestly dont understand half of that damn coding :(, i have a better chance at solving one of x42's math puzzles from AP trigonometry
 
Top