| View previous topic :: View next topic |
| Author |
Message |
vng21092
Grandmaster Cheater
 Reputation: 15
Joined: 05 Apr 2013
Posts: 644
|
 Posted: Sun May 24, 2015 5:28 pm Post subject: |
 |
|
well I mean, you basically had it already, but here, knock yourself out  | Code: | [Enable]
alloc(awg_1,32,witcher3.exe) //Always Win Gwent
aobscanmodule(awg_aob1,witcher3.exe,8B 44 24 40 C6 07 01 42 89 04 B9)
registersymbol(awg_aob1)
label(returnhere_awg_1)
label(notMe)
//--------------------------------------------------//
awg_1:
cmp [rcx+r15*4+24],0
jne notMe
mov byte ptr [rdi],01
mov [rcx+r15*4],eax
jmp returnhere_awg_1
//--------------------------------------------------//
notMe:
mov byte ptr [rdi],01
mov [rcx+r15*4],0
jmp returnhere_awg_1
//--------------------------------------------------//
awg_aob1+4:
jmp awg_1
nop
nop
returnhere_awg_1:
[Disable]
awg_aob1+4:
db C6 07 01 42 89 04 B9
unregistersymbol(awg_aob1)
dealloc(awg_1) |
|
|
| Back to top |
|
 |
ubiByte
Advanced Cheater
 Reputation: 1
Joined: 08 Mar 2013
Posts: 57
|
| Posted: Sun May 24, 2015 5:32 pm Post subject: |
|
|
| Can you explain that code please? Also your AOB is different too why is that?
|
|
| Back to top |
|
|
vng21092
Grandmaster Cheater
Reputation: 15
Joined: 05 Apr 2013
Posts: 644
|
| Posted: Sun May 24, 2015 5:45 pm Post subject: |
 |
|
well the AOB doesn't matter, its WHAT is in AOB, now the only thing you're interested in is that one line "mov [rcx+r15*4]", and I chose a different AOB cause, well, I'm slightly retarded. Anyways, don't be intimidated, but I have a PHD in MSPaint
Last edited by vng21092 on Mon May 25, 2015 9:31 am; edited 1 time in total |
|
| Back to top |
|
|
ubiByte
Advanced Cheater
Reputation: 1
Joined: 08 Mar 2013
Posts: 57
|
| Posted: Sun May 24, 2015 5:48 pm Post subject: |
|
|
Thanks so much for the pictures to clear it up, it makes sense. Man I wish I had you knowledge!
I understand the whole script except 1 line,
What is the purpose behind "Mov byte ptr [rdi], 01"?
|
|
| Back to top |
|
|
vng21092
Grandmaster Cheater
Reputation: 15
Joined: 05 Apr 2013
Posts: 644
|
| Posted: Sun May 24, 2015 5:57 pm Post subject: |
|
|
| no clue, but it doesn't matter because like I said, all we care about is "mov [rcx+15*4],eax" but since it was there originally just leave it be.
|
|
| Back to top |
|
|
ubiByte
Advanced Cheater
Reputation: 1
Joined: 08 Mar 2013
Posts: 57
|
| Posted: Sun May 24, 2015 6:07 pm Post subject: |
|
|
| Alright, sounds good thanks so much for your help. Really appreciate it!
|
|
| Back to top |
|
|
vng21092
Grandmaster Cheater
Reputation: 15
Joined: 05 Apr 2013
Posts: 644
|
| Posted: Sun May 24, 2015 6:09 pm Post subject: |
|
|
| Glad I could help
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
