| View previous topic :: View next topic |
| Author |
Message |
Spawnova
Newbie cheater
![]() Reputation: 0
Joined: 12 Feb 2013
Posts: 22
|
 Posted: Tue May 07, 2013 4:09 am Post subject: Code Injection crash |
 |
|
I'm stuck on this, I'm trying to either freeze or nop a value using assembler and every time I try, it insta-crashes
Here's the auto assemble code:
| Code: | alloc(newmem,2048) //2kb should be enough
label(returnhere)
label(originalcode)
label(exit)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
mov [ecx+DeSmuME.exe+8199F0],ax
exit:
jmp returnhere
"DeSmuME.exe"+1C963F:
jmp newmem
nop
nop
returnhere:
|
If I comment out the original code, it crashes, also if I change it to
mov [ecx+DeSmuME.exe+8199F0],#15
it also crashes.
I found the location by searching normally and eventually finding the pointer then finding out what writes to the pointer, deleting an item and selecting the only thing that showed up in the assembler.
I'm very much a newb to this I have read many tutorials and done step 7 just fine, but I don't see the problem at the moment.
|
|
| Back to top |
|
 |
Dark Byte
Site Admin
 Reputation: 470
Joined: 09 May 2003
Posts: 25796
Location: The netherlands
|
| Posted: Tue May 07, 2013 4:13 am Post subject: |
|
|
desmume is an emulator
that means "mov [ecx+DeSmuME.exe+8199F0],ax" is being used to set pixel color, sound being played, the key you're pressing, and everything else
Best thing you can do is find a way to quickly find the variable you're looking for (e.g memory around it)
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
|
Spawnova
Newbie cheater
![]() Reputation: 0
Joined: 12 Feb 2013
Posts: 22
|
| Posted: Tue May 07, 2013 4:22 am Post subject: |
|
|
| Oh ok that makes sense now, but how would I know what I'm looking for?
|
|
| Back to top |
|
|
gir489
Grandmaster Cheater
![]() Reputation: 14
Joined: 03 Jan 2012
Posts: 841
Location: Maryland, United States
|
| Posted: Tue May 07, 2013 9:04 am Post subject: |
|
|
Your newmem does nothing.
Also, make sure whatever code you're replacing is greater than or equal to 5 bytes of opcodes. If you bleed over in to the next line, make sure you add that operation to the orignalcode then JMP out to the next instruction under that.
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
