Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


mov [eax+0B40000A],si...than 0B40000A was change every time.

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine Lua Scripting
View previous topic :: View next topic  
Author Message
lkkms
How do I cheat?
Reputation: 0

Joined: 16 Sep 2018
Posts: 3

PostPosted: Sun Sep 16, 2018 8:39 am    Post subject: mov [eax+0B40000A],si...than 0B40000A was change every time. Reply with quote

need modify every time , can anyone help me ????

[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here

originalcode:
mov [eax+0B40000A],si

exit:
jmp returnhere

0C3600CB:
jmp newmem
nop
nop
returnhere:




[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
0C3600CB:
mov [eax+0B40000A],si
//Alt: db 66 89 B0 0A 00 40 0B



modify.jpg
 Description:
 Filesize:  90.18 KB
 Viewed:  1613 Time(s)

modify.jpg



_________________
regular
Back to top
View user's profile Send private message
FreeER
Grandmaster Cheater Supreme
Reputation: 53

Joined: 09 Aug 2013
Posts: 1091

PostPosted: Sun Sep 16, 2018 9:12 am    Post subject: Reply with quote

0C3600CB - use aobscan
mov [eax+0B40000A],si - try to get an aob pattern that does not include the 0B40000A offset and change si before it's written. Alternatively use readmem to store the original offset somewhere and then use add eax, [offsetaddr] and mov [eax], ...

_________________
https://github.com/FreeER/ has a few CE related repos
Back to top
View user's profile Send private message
lkkms
How do I cheat?
Reputation: 0

Joined: 16 Sep 2018
Posts: 3

PostPosted: Sun Sep 16, 2018 5:48 pm    Post subject: Reply with quote

I've already AOB scan code ,but the problems is the +0B40000A was change every time ; original code not work anymore...
have any code can be calculation for +B40000A.........



Aob quest.jpg
 Description:
 Filesize:  95.74 KB
 Viewed:  1596 Time(s)

Aob quest.jpg



_________________
regular
Back to top
View user's profile Send private message
FreeER
Grandmaster Cheater Supreme
Reputation: 53

Joined: 09 Aug 2013
Posts: 1091

PostPosted: Sun Sep 16, 2018 6:50 pm    Post subject: Reply with quote

Quote:
mov [eax+0B40000A],si - try to get an aob pattern that does not include the 0B40000A offset and change si before it's written. Alternatively use readmem to store the original offset somewhere and then use add eax, [offsetaddr] and mov [eax], ...


eg.

Code:
[ENABLE]
aobscan(ammo255,...)
allloc(newmem,$1000)
label(_ammofull)
label(originalcode)
label(offset)
label(returnhere)
registerSymbol(ammo255)

newmem:
  push eax
  add eax, [offset]
  mov byte ptr [eax], FF
  pop eax
  jmp returnhere
originalcode:
  readmem(ammo255, 15) // can probably be smaller
offset:
  readmem(ammo255+8,4)

ammo255:
  jmp newmem
  // appropriate number of nops
returnhere:

[DISABLE]
ammo255:
  readmem(originalcode, 15)
unregisterSymbol(ammo255)
dealloc(newmem)

_________________
https://github.com/FreeER/ has a few CE related repos
Back to top
View user's profile Send private message
lkkms
How do I cheat?
Reputation: 0

Joined: 16 Sep 2018
Posts: 3

PostPosted: Tue Sep 18, 2018 7:55 am    Post subject: It's work. I've finalized the code Reply with quote

[ENABLE]
aobscan(ammo255,25 FF FF FF 3F 66 89 B0 0A 00 ?? ?? 0F BF F7 83 FE 00 89 75 88 89 7D 8C 0F 8F 29 00 00 00 8B 75 D4 8B C6 25 FF FF FF 3F)
alloc(newmem,$1000)
label(originalcode)
label(offset)
label(returnhere)
registerSymbol(ammo255)

newmem:
push eax
add eax, [offset]
mov byte ptr [eax], FF
pop eax
jmp returnhere
originalcode:
readmem(ammo255+5, 7) // can probably be smaller
offset:
readmem(ammo255+8,4)

ammo255+5:
jmp newmem
nop
nop
// appropriate number of nops
returnhere:

[DISABLE]
ammo255+5:
readmem(originalcode, 7)
unregisterSymbol(ammo255)
dealloc(newmem)


''readmem'' is amazing code
I'll remember that, thank you share!!!



未命名.jpg
 Description:
 Filesize:  96.01 KB
 Viewed:  1560 Time(s)

未命名.jpg



_________________
regular
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine Lua Scripting All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites