Page 1 of 1

How do i get the registry value from autoassembler?

Posted: Sat Oct 15, 2022 4:38 pm
by SUPERNOVA9
Hi, i have found a flag, address of that flag gets changed every death in the game but the address of the instruction that changes that flag doesnt. So what i did, i made a aob scan for that instruction

and the flag is stored under [rbx+000011CC] and rbx is popped after that instruction. How do i get the value of that from a autoassembler script?

Re: How do i get the registry value from autoassembler?

Posted: Sun Oct 16, 2022 6:48 am
by Starcraster
Create a pointer.

Code: Select all

alloc(ptr,4)
registersymbol(ptr)

aob scan here

aobscan:
  mov [ptr],rbx
Then you use the Add address manually button and create a pointer using ptr as base address and 11CC as an offset.