| View previous topic :: View next topic |
| Author |
Message |
devlee How do I cheat?
Reputation: 0
Joined: 12 Jul 2014 Posts: 7
|
Posted: Mon Aug 24, 2015 7:28 pm Post subject: [HELP] Tutorial Step 7 |
|
|
So, I have seen a lot of tutorials around the web, and every time I got stuck to this step.
Here is the thing...
I've scanned the initial value (100), decreased (99) and re-scan, catch the address and then, with right click at this, selected "Find out what writes to this address".
(The next step is where the all thing just gets messed.)
With this menu opened I decrease the initial value once more to find out what is writting at the address. The code that appears is ALWAYS something like that:
sub dword ptr [rsi+00000780],01
Following all tutorials, it is supposed to be something like
dec [00045EF1]
which means that the code is decreasing from this address.
Could someone help me out with this?
This is pissing me off.
Well, thank you everyone who at least read the post...
|
|
| Back to top |
|
 |
Zanzer I post too much
Reputation: 126
Joined: 09 Jun 2013 Posts: 3278
|
Posted: Mon Aug 24, 2015 7:53 pm Post subject: |
|
|
Both of those instructions will successfully subtract 1 from the given address.
You can simply NOP the entire instruction to prevent this behavior.
sub dword ptr [rsi+00000780],01
RSI contains the base address to some game structure.
The value you found is at offset 0x780 from that base.
|
|
| Back to top |
|
 |
Rydian Grandmaster Cheater Supreme
Reputation: 31
Joined: 17 Sep 2012 Posts: 1358
|
Posted: Mon Aug 24, 2015 10:16 pm Post subject: |
|
|
sub dword ptr [rsi+00000780],01
> sub 4bytes [rsi+00000780],01
>> sub [rsi+00000780],01
>>> sub from [rsi+00000780], 01
>>>> subtract 1 from [rsi+00000780]
>>>>> subtract 1 from this address.
_________________
|
|
| Back to top |
|
 |
devlee How do I cheat?
Reputation: 0
Joined: 12 Jul 2014 Posts: 7
|
Posted: Tue Aug 25, 2015 6:18 pm Post subject: |
|
|
wow!!!... really appreciate that
But, just one more question...
If that instruction will subtract 1 from the address and the tutorial asks to change it to increase 2 instead which instruction should I use to it?
When I tried to use "add [rsi+00000780]" the message that appears is
"this instruction cant be compiled" or something like that...
and again, thank you for you help
|
|
| Back to top |
|
 |
Rydian Grandmaster Cheater Supreme
Reputation: 31
Joined: 17 Sep 2012 Posts: 1358
|
Posted: Tue Aug 25, 2015 6:25 pm Post subject: |
|
|
Add takes two arguments, you need to tell it how much to add.
add [rsi+00000780],2
_________________
|
|
| Back to top |
|
 |
devlee How do I cheat?
Reputation: 0
Joined: 12 Jul 2014 Posts: 7
|
Posted: Tue Aug 25, 2015 6:39 pm Post subject: |
|
|
Rydian, I thank you a lot for your help
Just to remember that im talking about the CE Tutorial.
So, here is what I have when use the injection to Tutorial Step 7:
| Quote: | alloc(newmem,2048,"Tutorial-x86_64.exe"+2C77B)
label(returnhere)
label(originalcode)
label(exit)
newmem: add[rsi+00000780],02
originalcode:
//sub dword ptr [rsi+00000780],01
exit:
jmp returnhere
"Tutorial-x86_64.exe"+2C77B:
jmp newmem
nop
nop
returnhere: |
When I try to run this injection the message is always:
Error line 6 (ffffffffffffffff: add[rsi+00000780],02): this instruction can't be compiled.
|
|
| Back to top |
|
 |
Rydian Grandmaster Cheater Supreme
Reputation: 31
Joined: 17 Sep 2012 Posts: 1358
|
Posted: Tue Aug 25, 2015 6:51 pm Post subject: |
|
|
You're missing a space...
add[rsi+00000780],02
Should be...
add [rsi+00000780],02
_________________
|
|
| Back to top |
|
 |
devlee How do I cheat?
Reputation: 0
Joined: 12 Jul 2014 Posts: 7
|
Posted: Tue Aug 25, 2015 6:55 pm Post subject: |
|
|
Dang it
Added the space
Still the same behavior.
Well, if there is nothing else wrong and I still cant do it
Probly better to give up?
AND AGAIN, thank you a lot!!
|
|
| Back to top |
|
 |
Rydian Grandmaster Cheater Supreme
Reputation: 31
Joined: 17 Sep 2012 Posts: 1358
|
Posted: Tue Aug 25, 2015 7:13 pm Post subject: |
|
|
Wait, tried putting it on the line after code:?
_________________
|
|
| Back to top |
|
 |
devlee How do I cheat?
Reputation: 0
Joined: 12 Jul 2014 Posts: 7
|
Posted: Tue Aug 25, 2015 7:18 pm Post subject: |
|
|
before
| Quote: | | newmem: add[rsi+00000780],02 |
after
| Quote: | | newmem: add [rsi+00000780],02 |
thats the code with space, isnt right?
|
|
| Back to top |
|
 |
atom0s Moderator
Reputation: 205
Joined: 25 Jan 2006 Posts: 8587 Location: 127.0.0.1
|
Posted: Tue Aug 25, 2015 7:53 pm Post subject: |
|
|
This is not a tutorial, moved.
_________________
- Retired. |
|
| Back to top |
|
 |
Zanzer I post too much
Reputation: 126
Joined: 09 Jun 2013 Posts: 3278
|
Posted: Tue Aug 25, 2015 8:04 pm Post subject: |
|
|
The instruction likely needs to be on its own line.
| Code: | newmem:
add [rsi+00000780],02 |
|
|
| Back to top |
|
 |
devlee How do I cheat?
Reputation: 0
Joined: 12 Jul 2014 Posts: 7
|
Posted: Tue Aug 25, 2015 8:10 pm Post subject: |
|
|
First of all
Sorry atom0s
and...
LOL Zanzer
REALLY??? That was all my problem? Cant belive it........
Thank you again for helping me...
Edit: Solved... then closed??
|
|
| Back to top |
|
 |
|