| View previous topic :: View next topic |
| Author |
Message |
sgsgwv$6263
Advanced Cheater
![]() Reputation: 0
Joined: 05 Aug 2020
Posts: 75
|
 Posted: Sun Feb 28, 2021 12:03 am Post subject: memory compare not working |
 |
|
| Code: |
[ENABLE]
aobscanmodule(locer,SPEED2.EXE,89 0E 5F 5E 8B E5) // should be unique
alloc(newmem,$1000)
alloc(car,4)
label(code)
label(return)
registersymbol(car)
newmem:
push edx
mov edx,[SPEED2.EXE+42BEDC]
cmp [esi+90],edx
pop edx
jne code
mov [car],esi
code:
mov [esi],ecx
pop edi
pop esi
mov esp,ebp
jmp return
locer:
jmp newmem
nop
return:
registersymbol(locer)
[DISABLE]
locer:
db 89 0E 5F 5E 8B E5
unregistersymbol(locer)
dealloc(newmem)
dealloc(car)
unregistersymbol(car)
|
After activating the script , [car] didnot show anything , it was ?? all the time.
SPEED2.EXE+42BEDC address and esi+90 have the same value for a unique entity.
4 byte value for both addresses are also same everytime, same goes with float. |
|
| Back to top |
|
 |
Dark Byte
Site Admin
 Reputation: 465
Joined: 09 May 2003
Posts: 25509
Location: The netherlands
|
| Posted: Sun Feb 28, 2021 3:40 am Post subject: |
 |
|
car can never be ?? unless you entered it as a pointer
try adding it as a normal address. e.g. Perhaps your pointer calculation is off and you used an offset where you should have used a relative offset for the base
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
|
sgsgwv$6263
Advanced Cheater
![]() Reputation: 0
Joined: 05 Aug 2020
Posts: 75
|
| Posted: Sun Feb 28, 2021 5:16 am Post subject: |
|
|
yeah sorry ,
after activating the script,
value of car is 0 (because it is allocated and initialized?)
value of [car] is ?? (because cmp in my script always turns on not equal to flag or doesnot turn on equal to flag and also because address of 0 is not valid).
But it should not happen because when I manually compare value of SPEED2.EXE+42BEDC and value of esi+90 ,they are exactly equal. |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
