xenowyaa
Newbie cheater
![]() Reputation: 0
Joined: 13 Feb 2024
Posts: 17
|
 Posted: Sat Nov 09, 2024 6:19 am Post subject: injection copy help! |
 |
|
i wanna do a basic injection copy, but when i click what writes to this instruction, its being accessed by so many other things at once. when i try writing a script that compares my address with the other ones i cant seem to do it
this is what i thought i could do
| Code: |
[ENABLE]
aobscanmodule(live1,blabla.exe,48 89 47 08 48 8B 5C 24 40) // should be unique
alloc(newmem,$1000,live1)
alloc(live2,8)
registersymbol(live2)
label(code)
label(return)
newmem:
cmp [rdi+60],#24
je livea
jmp code
livea:
mov [live2],rdi
mov [rdi+08],rax
mov rbx,[rsp+40]
jmp return
code:
mov [rdi+08],rax
mov rbx,[rsp+40]
jmp return
live1:
jmp newmem
nop 4
return:
registersymbol(live1)
[DISABLE]
live1:
db 48 89 47 08 48 8B 5C 24 40
unregistersymbol(live1)
unregistersymbol(live2)
dealloc(newmem)
dealloc(live2)
|
for more context, I found my address, I clicked what writes to this address, took damage to trigger my health opcode, show in disassembler, clicked "find out what addresses this instruction accesses" then found my address in the bunch and selected a few random ones then set up the structure compare and sent my address to a different group then compared it
I would appreciate any help thanks!
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
