Перейти к содержанию

METHOS

Стажёры
  • Постов

    16
  • Зарегистрирован

  • Посещение

  • Победитель дней

    1

Сообщения, опубликованные METHOS

  1. 17 minutes ago, Garik66 said:

    METHOS

    Главное, чтобы сигнатура находила адрес инструкции. А похожа ли она на сигнатуру СЕ не важно мне кажется.

    The main thing is to find the addresses of the signature statement. And if it looks like on the CE signature it is not important I think.

    I agree. It's not important - usually. But it is important if / when the signature fails.

     

     

    4 minutes ago, Garik66 said:

    Потом мне нужно создать ещё несколько, но везде название INJECT остаётся тем же, т.е. придётся вручную исправлять.

    В версия до  2.4.2 какое название мы вставляли в окошко "CheatName" так и назывался адрес инъекции.

    Я новую версию записал прямо поверх старой, теперь не могу посмотреть как это можно вернуть.

     

    See my previous post. I provided a new plugin that includes this feature. :D

  2. Same as above...signatures are different...but AAMaker also does not support inject+offset. If 'Testing bytes' is not selected, the AOB signature should be the same as Cheat Engine's signature, I think:

     

    Cheat Engine:

    Spoiler

     

    
    aobscanmodule(INJECT,minesweeper.exe,F9 FF FF 48 8B C7 48 8B 5C 24 30)
    
    //code
    
    INJECT+06:
      jmp code
    return:
    registersymbol(INJECT)

     


    AAMaker:

    Spoiler


    
    aobscanmodule(aob_test,minesweeper.exe+8F659,48 8B 5C 24 30 48 83 C4 20 5F C3 CC CC CC CC CC CC FF 25 18)
    
    //code
    
    aob_test:
    jmp newmem_test
    return_test:

     

     

    Thanks!

  3. The AOB signatures are different when comparing Cheat Engine signatures and AAmaker signatures. Sometimes, the signatures are longer, and sometimes the signatures are shorter:


    (example #1):

    Spoiler

    AAmaker:

    
    aobscanmodule(aob_test,firefox.exe+257F,8B 41 04 89 46 04 8B C6 5E 5D C2 04 00 55 8B EC 56)

     

    Cheat Engine:

    
    aobscanmodule(INJECT,firefox.exe,8B 41 04 89 46 04)

     

     

     

     

    (example #2):

    Spoiler

    AAmaker:

    
    aobscanmodule(aob_test,firefox.exe+2544,8B 46 04 5F 3B 05 04)

     

    Cheat Engine:

    
    aobscanmodule(INJECT,firefox.exe,8B 46 04 5F 3B 05 04 B7 14 01)

     

     

    Thanks!

     

    EDIT :

    By the way, I added the 'cheatname' feature back in to the templates and changed a few things, if anyone is interested (note: I removed the 'cheatcode' feature, but you can add that back in, if you like):


    AOBScanModule:

    Spoiler

     

    
    //Target:  firefox.exe
    //Author:  ++METHOS
    
    [ENABLE]
    aobscanmodule(aob_ammo,firefox.exe+250A,8B 4D 08 C6 46 0C 00 85 C9 75 66 57 E8 CB)
    alloc(newmem_ammo,$1000)
    
    label(originalcode_ammo)
    label(return_ammo)
    
    registersymbol(aob_ammo)
    
    //==================================================
    
    newmem_ammo:
    
    originalcode_ammo:
    mov ecx,[ebp+08]
    mov byte ptr [esi+0C],00
    jmp return_ammo
    
    //==================================================
    
    aob_ammo:
    jmp newmem_ammo
    nop
    nop
    return_ammo:
    
    [DISABLE]
    dealloc(newmem_ammo)
    aob_ammo:
    mov ecx,[ebp+08]
    mov byte ptr [esi+0C],00
    
    unregistersymbol(aob_ammo)

     

     

     


    AOBScanModuleStealth:

    Spoiler

     

    
    //Target:  firefox.exe
    //Author:  ++METHOS
    
    [ENABLE]
    aobscanmodule(aob_health,firefox.exe+250A,8B 4D 08 C6 46 0C 00 85 C9 75 66 57 E8 CB)
    alloc(newmem_health,$1000)
    stealtheditex(stealth_health,aob_health,1)
    
    label(originalcode_health)
    label(returnhere_health)
    label(stealthedit_health)
    
    registersymbol(stealthedit_health)
    
    //======================================================
    
    newmem_health:
    
    originalcode_health:
    mov ecx,[ebp+08]
    mov byte ptr [esi+0C],00
    jmp returnhere_health
    
    //======================================================
    
    stealth_health:
    stealthedit_health:
    jmp newmem_health
    nop
    nop
    returnhere_health:
    
    [DISABLE]
    dealloc(newmem_health)
    stealthedit_health:
    mov ecx,[ebp+08]
    mov byte ptr [esi+0C],00
    
    unregistersymbol(stealthedit_health)

     

     

     

     

     

    Download:

     

     

    • Плюс 1
  4. The aamaker.lua file contains the support links for Cheat Engine and Game Hack Lab:

     

        [EN]
        Technical support :
           http://forum.cheatengine.org/viewtopic.php?p=5645967
                                    
        [RU]
        Техническая поддержка:
           http://forum.gamehacklab.ru/topic/1415-plugin-aa-maker-sozdanie-aa-skriptov

     

    The link for Game Hack Lab has since changed, however, so it needs to be updated.

  5. Garik66-

    I agree that while my additions are not necessary, expanding on this plugin is important. CE has a powerful array of byte scanner already integrated, so reinventing the wheel is not necessary. Expanding on this feature to intelligently include wildcards would be good, however.

     

    I think the advantage of a plugin like this, aside from the customization features, is the automation and efficiency that it offers. As SnedS91 mentioned in a previous post, incorporating universal templates for scripts like teleport, vacuum and fly mode et al. are all possible with this plugin. If all that is needed is to add a conditional jump for your filter or nop a function that handles gravity etc., this will save a lot of time and simply the process for many users.  :)

     

    P.S. Sorry about the pictures in my previous post and sorry for typing in English. Thank you for this plugin.

×
×
  • Создать...

Важная информация

Находясь на нашем сайте, Вы автоматически соглашаетесь соблюдать наши Условия использования.