|
Cheat Engine The Official Site of Cheat Engine
|
View previous topic :: View next topic |
Author |
Message |
lkkms How do I cheat? Reputation: 0
Joined: 16 Sep 2018 Posts: 3
|
Posted: Sun Sep 16, 2018 8:39 am Post subject: mov [eax+0B40000A],si...than 0B40000A was change every time. |
|
|
need modify every time , can anyone help me ????
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
mov [eax+0B40000A],si
exit:
jmp returnhere
0C3600CB:
jmp newmem
nop
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
0C3600CB:
mov [eax+0B40000A],si
//Alt: db 66 89 B0 0A 00 40 0B
Description: |
|
Filesize: |
90.18 KB |
Viewed: |
1613 Time(s) |
|
_________________
regular |
|
Back to top |
|
|
FreeER Grandmaster Cheater Supreme Reputation: 53
Joined: 09 Aug 2013 Posts: 1091
|
Posted: Sun Sep 16, 2018 9:12 am Post subject: |
|
|
0C3600CB - use aobscan
mov [eax+0B40000A],si - try to get an aob pattern that does not include the 0B40000A offset and change si before it's written. Alternatively use readmem to store the original offset somewhere and then use add eax, [offsetaddr] and mov [eax], ...
_________________
|
|
Back to top |
|
|
lkkms How do I cheat? Reputation: 0
Joined: 16 Sep 2018 Posts: 3
|
Posted: Sun Sep 16, 2018 5:48 pm Post subject: |
|
|
I've already AOB scan code ,but the problems is the +0B40000A was change every time ; original code not work anymore...
have any code can be calculation for +B40000A.........
Description: |
|
Filesize: |
95.74 KB |
Viewed: |
1596 Time(s) |
|
_________________
regular |
|
Back to top |
|
|
FreeER Grandmaster Cheater Supreme Reputation: 53
Joined: 09 Aug 2013 Posts: 1091
|
Posted: Sun Sep 16, 2018 6:50 pm Post subject: |
|
|
Quote: | mov [eax+0B40000A],si - try to get an aob pattern that does not include the 0B40000A offset and change si before it's written. Alternatively use readmem to store the original offset somewhere and then use add eax, [offsetaddr] and mov [eax], ... |
eg.
Code: | [ENABLE]
aobscan(ammo255,...)
allloc(newmem,$1000)
label(_ammofull)
label(originalcode)
label(offset)
label(returnhere)
registerSymbol(ammo255)
newmem:
push eax
add eax, [offset]
mov byte ptr [eax], FF
pop eax
jmp returnhere
originalcode:
readmem(ammo255, 15) // can probably be smaller
offset:
readmem(ammo255+8,4)
ammo255:
jmp newmem
// appropriate number of nops
returnhere:
[DISABLE]
ammo255:
readmem(originalcode, 15)
unregisterSymbol(ammo255)
dealloc(newmem) |
_________________
|
|
Back to top |
|
|
lkkms How do I cheat? Reputation: 0
Joined: 16 Sep 2018 Posts: 3
|
Posted: Tue Sep 18, 2018 7:55 am Post subject: It's work. I've finalized the code |
|
|
[ENABLE]
aobscan(ammo255,25 FF FF FF 3F 66 89 B0 0A 00 ?? ?? 0F BF F7 83 FE 00 89 75 88 89 7D 8C 0F 8F 29 00 00 00 8B 75 D4 8B C6 25 FF FF FF 3F)
alloc(newmem,$1000)
label(originalcode)
label(offset)
label(returnhere)
registerSymbol(ammo255)
newmem:
push eax
add eax, [offset]
mov byte ptr [eax], FF
pop eax
jmp returnhere
originalcode:
readmem(ammo255+5, 7) // can probably be smaller
offset:
readmem(ammo255+8,4)
ammo255+5:
jmp newmem
nop
nop
// appropriate number of nops
returnhere:
[DISABLE]
ammo255+5:
readmem(originalcode, 7)
unregisterSymbol(ammo255)
dealloc(newmem)
''readmem'' is amazing code
I'll remember that, thank you share!!!
Description: |
|
Filesize: |
96.01 KB |
Viewed: |
1560 Time(s) |
|
_________________
regular |
|
Back to top |
|
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
|