| View previous topic :: View next topic |
| Author |
Message |
xcynic
Cheater
![]() Reputation: 0
Joined: 28 Aug 2010
Posts: 31
|
 Posted: Fri Jul 15, 2011 12:49 pm Post subject: How do I turn off a script with an aobscan? |
 |
|
Title pretty much says it all, here is the script.. How do I disable it properly?
| Code: |
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048) //2kb should be enough
label(returnhere)
label(originalcode)
label(exit)
label(rkey)
registersymbol(rkey)
aobscan(raob,C7 43 48 01 00 00 00 8B 56 68 8B 46 64 85 D2 0F)
rkey:
raob:
jmp newmem
nop
nop
returnhere:
newmem: //this is allocated memory, you have read,write,execute access
nop
originalcode:
//mov [ebx+48],00000000
exit:
jmp returnhere
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
What Do I need To Write here?!
mov [ebx+48],00000000
//Alt: db C7 43 48 00 00 00 00 8B 56 68 8B 46 64 85 D2 0F
|
Thanks in advance 
|
|
| Back to top |
|
 |
Dark Byte
Site Admin
 Reputation: 475
Joined: 09 May 2003
Posts: 25978
Location: The netherlands
|
| Posted: Fri Jul 15, 2011 12:54 pm Post subject: |
|
|
the injection template should have filled that in. Anyhow, just remove that mov instruction and uncomment that alt line so it starts with db c7....
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
|
Geri
Moderator
![]() Reputation: 112
Joined: 05 Feb 2010
Posts: 5627
|
| Posted: Fri Jul 15, 2011 9:58 pm Post subject: |
|
|
| Code: | [ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048) //2kb should be enough
label(returnhere)
label(originalcode)
label(exit)
label(rkey)
registersymbol(rkey)
aobscan(raob,C7 43 48 01 00 00 00 8B 56 68 8B 46 64 85 D2 0F)
raob: //First the aob name,
rkey: //then the label. Means put aob result to label.
jmp newmem
nop
nop
returnhere:
newmem: //this is allocated memory, you have read,write,execute access
nop
originalcode:
//mov [ebx+48],00000000
exit:
jmp returnhere
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
rkey: //What Do I need To Write here?! -> the label's name
db C7 43 48 00 00 00 00 8B 56 68 8B 46 64 85 D2 0F
unregistersymbol(rkey) //don't forget to unregister |
_________________
|
|
| Back to top |
|
|
xcynic
Cheater
![]() Reputation: 0
Joined: 28 Aug 2010
Posts: 31
|
| Posted: Sat Jul 16, 2011 10:04 am Post subject: |
|
|
Thanks to both of you!
I'll most likely be back later with more questions :p
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
