| View previous topic :: View next topic |
| Author |
Message |
rog9001
Expert Cheater
 Reputation: 2
Joined: 22 Dec 2015
Posts: 214
Location: Jupiter
|
 Posted: Fri Mar 04, 2016 9:35 am Post subject: Is this possible or not? |
 |
|
so I am going to use a very old script as a example
| Code: | aobscanmodule(A7_W8_XAML.exe+15F726,A7_W8_XAML.exe,F3 0F 11 87 A0 0E 00 00 E9 89)
alloc(newmem,$1000,"A7_W8_XAML.exe"+15F726)
label(code)
label(return)
newmem:
code:
mov [rdi+00000EA0],(float)100
jmp return
A7_W8_XAML.exe+15F726:
jmp code
nop
nop
nop
return:
registersymbol(A7_W8_XAML.exe+15F726)
aobscanmodule(A7_W8_XAML.exe+15F8FD,A7_W8_XAML.exe,F3 0F 11 87 A0 0E 00 00 EB 0B)
alloc(newmem2,$1000,"A7_W8_XAML.exe"+15F8FD)
label(code2)
label(return2)
newmem2:
code2:
mov [rdi+00000EA0],(float)100
jmp return2
A7_W8_XAML.exe+15F8FD:
jmp code2
nop
nop
nop
return2:
registersymbol(A7_W8_XAML.exe+15F8FD) |
Is it possible to write a (db) instead of the mov [rdi+00000EA0],(float)100?
What I mean is do something like this (NOT REAL ARRAY OF BYTES WHICH I AM GOING TO USE)
| Code: | aobscanmodule(A7_W8_XAML.exe+15F726,A7_W8_XAML.exe,F3 0F 11 87 A0 0E 00 00 E9 89)
registersymbol(A7_W8_XAML.exe+15F726)
FF 00 1F 9E 0C 84 AA
aobscanmodule(A7_W8_XAML.exe+15F8FD,A7_W8_XAML.exe,F3 0F 11 87 A0 0E 00 00 EB 0B)
registersymbol(A7_W8_XAML.exe+15F8FD)
db FF 00 1F 9E DB
|
is this possible to do or not?
|
|
| Back to top |
|
 |
hhhuut
Grandmaster Cheater
 Reputation: 6
Joined: 08 Feb 2015
Posts: 607
|
| Posted: Fri Mar 04, 2016 9:39 am Post subject: |
|
|
| rog9001 wrote: | | Code: | aobscanmodule(A7_W8_XAML.exe+15F726,A7_W8_XAML.exe,F3 0F 11 87 A0 0E 00 00 E9 89)
registersymbol(A7_W8_XAML.exe+15F726)
FF 00 1F 9E 0C 84 AA |
|
In short: Yes it is possible, but you'll need that "db" in front of your array ...
|
|
| Back to top |
|
|
rog9001
Expert Cheater
Reputation: 2
Joined: 22 Dec 2015
Posts: 214
Location: Jupiter
|
| Posted: Fri Mar 04, 2016 9:42 am Post subject: |
|
|
I know I need the (db) in front xD I just forgot to put it
Also I just tried and the game crashes. Would I need to put (90) for the nops in the
| Code: |
A7_W8_XAML.exe+15F726:
jmp code
nop
nop
nop
return: |
|
|
| Back to top |
|
|
hhhuut
Grandmaster Cheater
Reputation: 6
Joined: 08 Feb 2015
Posts: 607
|
| Posted: Fri Mar 04, 2016 9:48 am Post subject: |
|
|
Because of the length of the instructions.
The original instruction is 8 bytes long. Your "jmp code" instruction is only 5 bytes long which would most likely lead to access violations and memory leaks when not integrating the nops 
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
