Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Help with auto assembler

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine Tutorials -> Auto Assembler tutorials
View previous topic :: View next topic  
Author Message
autisticrage85
Newbie cheater
Reputation: 0

Joined: 19 Apr 2015
Posts: 11

PostPosted: Fri Nov 06, 2015 11:23 pm    Post subject: Help with auto assembler Reply with quote

So i have a dynamic address which is accessed by a static address, the following code is found at the static address:

Code:
IDA View

.text:00007FF7E6307F05                 inc     dword ptr [rbx+104h]
.text:00007FF7E6307F0B                 add     rsp, 20h
.text:00007FF7E6307F0F                 pop     rbx
.text:00007FF7E6307F10                 retn

CE View

GMatrix2D::GetX+1008B5 - FF 83 04010000    - inc [rbx+00000104]
GMatrix2D::GetX+1008BB - 48 83 C4 20       - add rsp,20
GMatrix2D::GetX+1008BF - 5B                - pop rbx
GMatrix2D::GetX+1008C0 - C3                - ret


What i want to do is read the value that has increased. How would my auto assemble script look?
Back to top
View user's profile Send private message
Zanzer
I post too much
Reputation: 126

Joined: 09 Jun 2013
Posts: 3278

PostPosted: Sat Nov 07, 2015 7:26 am    Post subject: Reply with quote

Select that instruction in memory viewer.
Open Auto Assemble (Ctrl+A).
Select Template > AOB Injection.
That's how it should look.
Back to top
View user's profile Send private message
ParkourPenguin
I post too much
Reputation: 138

Joined: 06 Jul 2014
Posts: 4275

PostPosted: Sat Nov 07, 2015 9:38 am    Post subject: Reply with quote

You could just right click on that instruction in CE's disassembler and select "Find out what addresses this instruction accesses".

But if you really want to use the auto assembler, this should let you see the value of the one that was incremented last:
Code:
[ENABLE]
aobscan(INJECT,FF 83 04 01 00 00 48 83 C4 20 5B C3) // should be unique
alloc(newmem,512,GMatrix2D::GetX+1008B5)
alloc(myValue,4)
label(return)

registersymbol(INJECT)
registersymbol(myValue)

newmem:
  inc [rbx+104]
  mov ebx,[rbx+104]
  mov [myValue],ebx
  jmp return

INJECT:
  jmp newmem
  nop
return:

[DISABLE]
INJECT:
  db FF 83 04 01 00 00

unregistersymbol(INJECT)
unregistersymbol(myValue)
dealloc(myValue)
dealloc(newmem)

_________________
I don't know where I'm going, but I'll figure it out when I get there.
Back to top
View user's profile Send private message
autisticrage85
Newbie cheater
Reputation: 0

Joined: 19 Apr 2015
Posts: 11

PostPosted: Mon Nov 09, 2015 3:15 am    Post subject: Reply with quote

Thanks for the reply guys, and your auto assemble works perfectly Smile
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine Tutorials -> Auto Assembler tutorials All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites