| View previous topic :: View next topic |
| Author |
Message |
usernotfound Expert Cheater
Reputation: 0
Joined: 21 Feb 2016 Posts: 115
|
Posted: Sat Oct 15, 2016 3:21 pm Post subject: aobscan command for pointers? |
|
|
I've just recently been making use of the aobscan instruction CE has and was wondering if it can be used (or if there's something similar to it) for pointers?
So let's say I had something like this:
| Code: | [enable]
aobscan(Address, aob signature)
aobscan(OpCode, aob signature)
label(_Address)
registersymbol(_Address)
registersymbol(OpCode)
alloc(hook,128)
hook:
mov eax,[pointer]
lea eax,[eax+offset]
mov [esp+04],eax
jmp OpCode
Address:
_Address:
call hook
[disable]
_Address:
call OpCode
dealloc(hook)
unregistersymbol(_Address)
unregistersymbol(OpCode) |
How could I have it scan the aob for the pointers address and then grab that pointer in memview? To get to it you have to scan -> disassemble first result -> and then click the assembly to get the pointer in mov eax,[]
|
|
| Back to top |
|
 |
Zanzer I post too much
Reputation: 126
Joined: 09 Jun 2013 Posts: 3278
|
Posted: Sat Oct 15, 2016 5:27 pm Post subject: |
|
|
That address would be inside of the AOB and replaced with ?? ?? ?? ??.
So whatever your AOB is named, you could use as the pointer address.
Just set the address to [aobname+2].
|
|
| Back to top |
|
 |
usernotfound Expert Cheater
Reputation: 0
Joined: 21 Feb 2016 Posts: 115
|
Posted: Sat Oct 15, 2016 6:14 pm Post subject: |
|
|
Saved the day yet again Zanzer, thanks!
|
|
| Back to top |
|
 |
|