View previous topic :: View next topic |
Author |
Message |
plagiator Newbie cheater
Reputation: 0
Joined: 16 Oct 2013 Posts: 14
|
Posted: Thu Mar 06, 2014 8:54 pm Post subject: automated assembly scan & code injection at startup |
|
|
I figured out the code I need to change
lea ebp,[ebp+00000000]
mov eax,[esi]
mov [ebx],edx
when restarting the program the address of those instructions are never the same.
my goal is to have the trainer search for those instructions when starting the game then do a small change e.g. mov [ebx], eax automatically or via keyboard short cut.
can anyone please tell me or give a (step by step) hint on how to achieve that? thx
|
|
Back to top |
|
 |
++METHOS I post too much
Reputation: 92
Joined: 29 Oct 2010 Posts: 4197
|
Posted: Thu Mar 06, 2014 9:12 pm Post subject: |
|
|
1. In memory viewer, select 'view' from the drop-down menu. Click on 'show module addresses'.
2. With the correct instruction highlighted, select 'tools' from the drop-down menu and click on 'auto assemble'. In the Auto Assemble window, select 'template' from the drop-down menu and click on 'cheat table framework code'. Select 'template' again and click on 'code injection'. Click 'okay'. When you are done making your changes, select 'file' from the drop-down menu and click on 'assign to current cheat table'.
3. Right-click on the script in the cheat table and click on 'set/change hotkeys'. Assign a hotkey to toggle script.
If the instruction location is actually changing, you will need to incorporate AOBscan.
|
|
Back to top |
|
 |
Rydian Grandmaster Cheater Supreme
Reputation: 31
Joined: 17 Sep 2012 Posts: 1358
|
|
Back to top |
|
 |
plagiator Newbie cheater
Reputation: 0
Joined: 16 Oct 2013 Posts: 14
|
Posted: Fri Mar 07, 2014 3:55 pm Post subject: |
|
|
thank you very much guys!
Finally I was able to create my trainer by using AOBscan.
I find such tutorials helpful! I appreciate well explained tutorials on "advanced" topics while keeping the noobs in mind. often tuts are too basic or too complicated to follow for beginners, not these. thanks again!
|
|
Back to top |
|
 |
|