Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


aobscan help

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine Tutorials
View previous topic :: View next topic  
Author Message
azamalvi
Cheater
Reputation: 0

Joined: 16 Aug 2013
Posts: 26

PostPosted: Sat Jun 11, 2016 6:05 am    Post subject: aobscan help Reply with quote

I have a code that uses aobscan. This code is basically for facbook game and it works fine. Now that game is available for Windows. So i want to apply same code on windows but i received below error


Error while scanning AOB's: _fpq

This is code that I am using
Code:

[ENABLE]
Aobscan(_fpq,0F 4A 00 00 62 07 66 EB 41 62 07 46 F5 41 00 A0 D0 66 B2 2E 0D 32 00 00 60 D5 01 46 E9 5C 00)
_fpq:
db 0F 00 00 00 62 07 66 EB 41 62 07 46 F5 41 00 A0 D0 66 B2 2E 29 29 02 02 60 D5 01 46 E9 5C 00

[DISABLE]
Back to top
View user's profile Send private message
cooleko
Grandmaster Cheater
Reputation: 11

Joined: 04 May 2016
Posts: 717

PostPosted: Sat Jun 11, 2016 9:39 am    Post subject: Reply with quote

There is no guarantee that code written for a FB game is exactly the same as code written for a windows game. In fact, it is almost certain the code has changed.

You really should run the FB game with this code:

Code:
[ENABLE]
Aobscan(_fpq,0F 4A 00 00 62 07 66 EB 41 62 07 46 F5 41 00 A0 D0 66 B2 2E 0D 32 00 00 60 D5 01 46 E9 5C 00)
registersymbol(_fpq)
[DISABLE]
unregistersymbol(_fpq)


Open the memory viewer and scan for address _fpq in the instructions window

take a screenshot of what you see.

Open the windows game and search for array of bytes "0D 32 00 00"
If there arent too many results (lets say 50+) then just disassemble each location and look at those instructions, see which one is similar to the FB one.

Alternatively, you can just blindly guess and check. For instance, look at the code below:

Code:

?0F? 4A ?00? ?00? ?62? ?07? ?66? ?EB? ?41? ?62? ?07? ?46? ?F5? ?41? ?00? ?A0? ?D0? ?66? ?B2? ?2E? 0D 32 00 00 ?60? ?D5? ?01? ?46? ?E9? ?5C? ?00?


for each byte that i enclosed in ?xx?, this byte may be changed in the windows game, you could start by replacing some, of the bytes with ?? (and removing ?xx? from the remaining or it wont scan). Try 100s of combinations of ?? with the original AOB and hope something works!

Either way, you need to understand what is happening in the FB code to find it in the Windows code. Because of that, I recommend the first method. Good luck!
Back to top
View user's profile Send private message
Cake-san
Grandmaster Cheater
Reputation: 8

Joined: 18 Dec 2014
Posts: 541
Location: Semenanjung

PostPosted: Sat Jun 11, 2016 9:58 am    Post subject: Reply with quote

The fb one looks like aob's for action script in flash game which you get it from decompiling that game.

You can try going to game folder and find the .swf file to decompile it if the port version is still a flash game. Rolling Eyes

_________________
...
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine Tutorials All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites