Posted: Sun May 10, 2015 10:08 am Post subject: Any good methods for new update code?
Guys i have a question, if the developer update the codes, what is the best way to find the new one? I normaly use sign like this ?? ?? ?? Or xx xx xx. I can found some of them, but not all of them. My question is, does anyone here know any method or easist way to find new update code? Thanks in advanced _________________
work harder and be leader, get lazy and be a slave
Posted: Mon May 11, 2015 8:08 am Post subject: Re: Any good methods for new update code?
Brissy wrote:
Guys i have a question, if the developer update the codes, what is the best way to find the new one? I normaly use sign like this ?? ?? ?? Or xx xx xx. I can found some of them, but not all of them. My question is, does anyone here know any method or easist way to find new update code? Thanks in advanced
For most updates you can grab the new offset using the signature you chose, if the update/changes are big then you can use wildcard search like you said (?? or xx), if there is major change in code, use some imagination first (example below) and if that fails even, well then finding the option from scratch is easiest.
e.g mov [eax+55], ebx
most times the offset will change so you can wildcard that byte only, in some cases even the whole registers will change, you can still use a wildcard for that but then you have to use a bigger signature with some constant bytes in there. Like i said, use some imagination.
I have managed to find the code by backtracing and using the parent function as signature in some games especially when the target function was too short and slight changes in that function makes it hard to find it, this of course requires you to know the parent function bytes to use as signature (in my case, i had both v1.1(so i could backtrace it) and v1.4 of the game via patches). Its much quicker to find the option from scratch since you know the data type/value range and these very rarely change if ever. _________________
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum