View previous topic :: View next topic |
Author |
Message |
++METHOS I post too much Reputation: 92
Joined: 29 Oct 2010 Posts: 4197
|
Posted: Wed Jul 03, 2013 4:54 pm Post subject: Stealthedit Plugin With AOB |
|
|
How to utilize AOB with the Stealthedit plugin?
For example, here is my current template for stealthedit:
Code: | [ENABLE]
stealthedit(YYYY,"????.exe"+????,248)
alloc(newmem,248)
label(returnhere)
label(originalcode)
label(XXXX)
registersymbol(XXXX)
newmem:
??????????????????????
jmp returnhere
originalcode:
??????????????????????
jmp returnhere
YYYY:
XXXX:
??????????????????????
returnhere:
[DISABLE]
dealloc(newmem)
XXXX:
??????????????????????
unregistersymbol(XXXX) |
Thanks.
|
|
Back to top |
|
|
Dark Byte Site Admin Reputation: 458
Joined: 09 May 2003 Posts: 25291 Location: The netherlands
|
Posted: Wed Jul 03, 2013 5:08 pm Post subject: |
|
|
something like this:
Code: |
[enable]
aobscan(bla,c6 05 d0 59 55 00 00)
stealthedit(newregion, bla, 7)
label(registeredregion)
newregion:
registeredregion:
nop
nop
nop
nop
nop
nop
nop
registersymbol(registeredregion)
[disable]
registeredregion:
db c6 05 d0 59 55 00 00
|
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
|
++METHOS I post too much Reputation: 92
Joined: 29 Oct 2010 Posts: 4197
|
Posted: Wed Jul 03, 2013 5:28 pm Post subject: |
|
|
Thanks. That seems easy enough.
+Rep (when I am able)
|
|
Back to top |
|
|
knightblizs Advanced Cheater Reputation: 0
Joined: 18 Jun 2013 Posts: 56
|
Posted: Tue Jul 09, 2013 6:47 pm Post subject: |
|
|
help me too
Code: | define(HookedFunction,AOBSignature+XXX)
[ENABLE]
alloc(NewMem,1024)
aobscan(AOBSignature, XXX )
label(returnhere)
HookedFunction:
jmp NewMem
xmm0,xmm0
nop
nop
returnhere:
NewMem:
db XX XX
readmem(HookedFunction+XX)
dd #XXX
readmem(HookedFunction,XX)
xorpd xmm0,xmm0
jmp returnhere
[DISABLE]
dealloc(NewMem)
|
I tried to add this
aobscan(AOBSignature,XX XX)
stealthedit(newregion, AOBSignature, 7)
registeredregion:
XX XX
but module not found
|
|
Back to top |
|
|
|