| View previous topic :: View next topic |
| Author |
Message |
notnhatknot How do I cheat?
Reputation: 0
Joined: 18 Aug 2018 Posts: 4
|
Posted: Sat Aug 18, 2018 1:40 am Post subject: Searching memory question. |
|
|
I want to search for assembly code.
I know it will be Mov Word Ptr [pointer], 0000
Where pointer is something like [rax+20] or [rcx+78].
Is there a way I can do a search for Mov Word Ptr [variable],0000?
Meaning I don't know the opcode/instruction for variable, but I know it will be written into as 0000?
|
|
| Back to top |
|
 |
TheyCallMeTim13 Wiki Contributor
Reputation: 51
Joined: 24 Feb 2017 Posts: 976 Location: Pluto
|
Posted: Sat Aug 18, 2018 2:33 am Post subject: |
|
|
AOB scan, "66C7xx0000" for "mov word ptr [XXX],0000"; or "66C7xxxx0000" for "mov word ptr [XXX+XX],0000".
| Code: | memTestValues - 66 C7 00 0000 - mov word ptr [rax],0000 { 0 }
03020005 - 66 C7 03 0000 - mov word ptr [rbx],0000 { 0 }
0302000A - 66 C7 01 0000 - mov word ptr [rcx],0000 { 0 }
0302000F - 66 C7 40 10 0000 - mov word ptr [rax+10],0000 { 0 }
|
_________________
|
|
| Back to top |
|
 |
notnhatknot How do I cheat?
Reputation: 0
Joined: 18 Aug 2018 Posts: 4
|
Posted: Sat Aug 18, 2018 5:50 am Post subject: |
|
|
| Thank you very much. Question answered.
|
|
| Back to top |
|
 |
|