View previous topic :: View next topic |
Author |
Message |
Classicus Advanced Cheater
Reputation: 0
Joined: 22 Dec 2011 Posts: 51
|
Posted: Sat Jun 07, 2014 12:59 am Post subject: How to find module for aobscanmodule |
|
|
Hi,
Sorry if this information exists somewhere. I've been googling and searching the forums like crazy but can't find this info. I always use aobscan but in some games, it takes several seconds to activate some scripts. So I want to try using aobscanmodule, but I have no idea how to find the module of an address or aob.
I tried clicking "Show module addresses" in memory viewer but I can't find what that option changes. I was hoping that would show me the module for the address/aob I want to find.
Thanks in advance!
|
|
Back to top |
|
 |
Daijobu Master Cheater
Reputation: 13
Joined: 05 Feb 2013 Posts: 301 Location: the Netherlands
|
Posted: Sat Jun 07, 2014 8:01 am Post subject: |
|
|
When you use the AA code injection for a quick table it'll show you which module it's hooked in.
Example: "chrome.exe"+49964:
The module is chrome.exe. This becomes:
aobscanmodule(_nameforAoBscan,chrome.exe,XX XX ?? **)
_________________
|
|
Back to top |
|
 |
Classicus Advanced Cheater
Reputation: 0
Joined: 22 Dec 2011 Posts: 51
|
Posted: Sat Jun 07, 2014 8:17 am Post subject: |
|
|
Hmm, I did see for some addresses the module shows up. But the addresses I'm trying to work with don't show any module. I know the main exe doesn't work because I tried using that with aobscanmodule and it doesn't find the aob.
In memory viewer, under View > Enumerate DLLs and Symbols, I see the main exe along with about 50ish dlls. I wonder if it is one of those. Although I don't want to try putting in one dll at a time and seeing if the script activates.
Or maybe there is no specific module for this address, so I have to stick with aobscan?
|
|
Back to top |
|
 |
Daijobu Master Cheater
Reputation: 13
Joined: 05 Feb 2013 Posts: 301 Location: the Netherlands
|
Posted: Sat Jun 07, 2014 8:38 am Post subject: |
|
|
If there is no particular module you'll have to stick with aobscan as it scans the entire memory you hooked into.
_________________
|
|
Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25796 Location: The netherlands
|
Posted: Sat Jun 07, 2014 9:48 am Post subject: |
|
|
press ctrl+m in the disassembler to toggle modulename+offset view
note that if it's JIT'ed (flash, java, .net, mono, ...) then the code will not be part of a module
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
 |
Classicus Advanced Cheater
Reputation: 0
Joined: 22 Dec 2011 Posts: 51
|
Posted: Sat Jun 07, 2014 10:27 am Post subject: |
|
|
Ok, yea it looks like I'll have to stick to aobscan. Parts of the game show a module, but the addresses around the area I'm working with don't have any modules listed with ctrl+m in the disassembler.
Well, at least now I know about the memory viewer's "Show module addresses" and JIT'ed areas won't be part of a module.
Thanks for the responses Dark Byte and Daijoubu!
|
|
Back to top |
|
 |
|