View previous topic :: View next topic |
Author |
Message |
Nhowka How do I cheat? Reputation: 0
Joined: 27 May 2010 Posts: 5
|
Posted: Fri Nov 14, 2014 4:39 pm Post subject: Question: Using label address in AOBSCAN |
|
|
Hi! I want to find the instruction that pushes a string in a game.
For example, I want to find the string "blocked" in the game, so I do the following:
Code: | aobscan(stringpos, 62 6C 6F 63 6B 65 64 00) |
Suppose that the string was found at the address 0xAABBCCDD, I want then to search for
Code: | aobscan(instructionpos, 68 DD CC BB AA) |
So I can easily find the relevant instruction that I want to modify. How can I do that?
|
|
Back to top |
|
|
Dark Byte Site Admin Reputation: 458
Joined: 09 May 2003 Posts: 25287 Location: The netherlands
|
Posted: Fri Nov 14, 2014 7:49 pm Post subject: |
|
|
wouldn't it be easier to use ce to find that instruction and then write a signature based on the code around that instruction to find it ?
e.g what you're describing is the memoryview->view->referenced strings which you can use to find all the instructions that reference the address of blocked
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
|
Nhowka How do I cheat? Reputation: 0
Joined: 27 May 2010 Posts: 5
|
Posted: Sun Nov 16, 2014 12:58 am Post subject: |
|
|
It's a Windows Store app, and the string is in an external library. The referenced strings window is giving me just the strings of the main executable.
|
|
Back to top |
|
|
Dark Byte Site Admin Reputation: 458
Joined: 09 May 2003 Posts: 25287 Location: The netherlands
|
Posted: Sun Nov 16, 2014 7:23 am Post subject: |
|
|
Go to code dissect and select that external module
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
|
Nhowka How do I cheat? Reputation: 0
Joined: 27 May 2010 Posts: 5
|
Posted: Mon Nov 17, 2014 1:50 am Post subject: |
|
|
Thanks, it worked.
|
|
Back to top |
|
|
|