| View previous topic :: View next topic |
| Author |
Message |
SwaggaJackin' Master Cheater
Reputation: 2
Joined: 06 Nov 2009 Posts: 304
|
Posted: Wed Aug 10, 2011 6:30 pm Post subject: Was told this was fixed in 6.1 but still occurs. |
|
|
| I remember asking about this about when 6.0 was first released I believe, when I search for an array of bytes (in particular, the XLIVE bypass in Dead Rising 2) with the option "MEM_MAPPED" under scan settings. The script seems to fail to scan and will not find the pattern and won't execute. Turning the option off finds it.
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 471
Joined: 09 May 2003 Posts: 25833 Location: The netherlands
|
Posted: Wed Aug 10, 2011 7:38 pm Post subject: |
|
|
there was a bug with mem_mapped, but i guess it was unrelated
Get dbgview and do a memory scan that causes such a problem with mapped off, note down the address, and then enable the mapped option and do the same scan again.
Post, pm or email me the debuglog and tell me which address it should find
It might confirm my guess on where it goes wrong
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
SwaggaJackin' Master Cheater
Reputation: 2
Joined: 06 Nov 2009 Posts: 304
|
Posted: Wed Aug 10, 2011 7:57 pm Post subject: |
|
|
It seems to only occur with AOBScan(). If I do a array of byte scan manually it finds the target, but I have to play with the "executable" "writeable" and "copy on write" options to find it.
If mem map is off, the AOBSCAN() in the script finds it:
http://pastebin.com/raw.php?i=LzWJk4Vb
If mem map is on, AOBSCAN() seems to end very quickly and nothing is found:
http://pastebin.com/raw.php?i=r4m2Xrqj
The address that was to be found was: 679E3454
|
|
| Back to top |
|
 |
SwaggaJackin' Master Cheater
Reputation: 2
Joined: 06 Nov 2009 Posts: 304
|
Posted: Thu Aug 11, 2011 3:37 pm Post subject: |
|
|
| Was this enough information?
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 471
Joined: 09 May 2003 Posts: 25833 Location: The netherlands
|
Posted: Thu Aug 11, 2011 3:45 pm Post subject: |
|
|
Not really, that it ends quickly is weird.
you're on a 32-bit system?
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping
Last edited by Dark Byte on Thu Aug 11, 2011 3:47 pm; edited 1 time in total |
|
| Back to top |
|
 |
SwaggaJackin' Master Cheater
Reputation: 2
Joined: 06 Nov 2009 Posts: 304
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 471
Joined: 09 May 2003 Posts: 25833 Location: The netherlands
|
Posted: Thu Aug 11, 2011 3:49 pm Post subject: |
|
|
Did you set the cpu affinity to one cpu yourself?
Asking because the workload is only divided for one cpu
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
SwaggaJackin' Master Cheater
Reputation: 2
Joined: 06 Nov 2009 Posts: 304
|
Posted: Thu Aug 11, 2011 4:07 pm Post subject: |
|
|
Nope. Never touched the affinity, either through task manager or by using that program that sets a program to a certain affinity.
Not sure why it's only using 1 core. Maybe another bug?
|
|
| Back to top |
|
 |
Geri Moderator
Reputation: 111
Joined: 05 Feb 2010 Posts: 5627
|
Posted: Thu Aug 11, 2011 10:35 pm Post subject: |
|
|
I have checked this error just to see if it is occuring on my system too, but nothing is wrong for me. 32-bit XP dual core.
On a side note, if you search for the Xlive byte pattern, enable "Executable" and disable all other options.
Maybe it is just some 64-bit issue. Or Vista.
| Description: |
|
| Filesize: |
62.03 KB |
| Viewed: |
8620 Time(s) |

|
_________________
|
|
| Back to top |
|
 |
SwaggaJackin' Master Cheater
Reputation: 2
Joined: 06 Nov 2009 Posts: 304
|
Posted: Thu Aug 11, 2011 11:53 pm Post subject: |
|
|
| Geri wrote: | I have checked this error just to see if it is occuring on my system too, but nothing is wrong for me. 32-bit XP dual core.
On a side note, if you search for the Xlive byte pattern, enable "Executable" and disable all other options.
Maybe it is just some 64-bit issue. Or Vista. |
Did you try this via AOBSCAN in auto assembler? I can find it as well using the GUI Array of Byte scan. The problem occurs via Auto Assembler when using AOBscan().
Use the script to start a AOBSCAN() with mem mapped turned on and see if it does not find the address.
|
|
| Back to top |
|
 |
Geri Moderator
Reputation: 111
Joined: 05 Feb 2010 Posts: 5627
|
Posted: Fri Aug 12, 2011 1:03 am Post subject: |
|
|
Yes, aobscan is working fine for me as well, even when MEM_MAPPED is enabled. So I cannot reproduce your error on my comp.
_________________
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 471
Joined: 09 May 2003 Posts: 25833 Location: The netherlands
|
Posted: Fri Aug 12, 2011 1:22 am Post subject: |
|
|
SwaggaJackin', auto assembler aobscan or lua aobscan ?
Or are both affected the same?
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
SwaggaJackin' Master Cheater
Reputation: 2
Joined: 06 Nov 2009 Posts: 304
|
Posted: Fri Aug 12, 2011 2:05 am Post subject: |
|
|
| Dark Byte wrote: | SwaggaJackin', auto assembler aobscan or lua aobscan ?
Or are both affected the same? |
Auto assembler. I've never used the Lua engine.
Here's me producing the bug, I'm not sure if it's noticable, but with mem_mapped off it ends the scan very quickly and you can tell it does because it highlights the CRC bypass very shortly after clicking on it:
http://www.youtube.com/watch?v=TUBJbyc2Agk&hd=1
(Just installed windows 7, got my new cpu and MBoard + RAM TODAY ^_^):
And the CRC script I used (Someone made this a while back on the auto assemble forum):
| Code: |
{
=========================================
xlive.dll Ver.: Any (from 2.0.0673.0 to 3.0.19.0)
Script Version: 1.0
CE Version : 5.6
Disable XLIVE.DLL CRC Check
17-Mar-2010
=========================================
}
[ENABLE]
//=========================================
// Search for XLIVE.DLL CRC Check Routine
alloc(MyCode,1024)
aobscan(CRCCheck,8b ff 55 8b ec 83 ec 20 53 56 57 8d 45 e0)
//=========================================
// Declaration session
label(_XLive)
registersymbol(_XLive)
//=========================================
// Disable Xlive.dll CRC Check Routine
CRCCheck:
_XLive:
ret 000c
nop
//=========================================
// Original Codes
[DISABLE]
_XLive:
db 8b,ff,55,8b,ec,83,ec,20,53,56,57,8d,45,e0
unregistersymbol(_XLive) |
Hope this helps pinpoint the bug.
|
|
| Back to top |
|
 |
Geri Moderator
Reputation: 111
Joined: 05 Feb 2010 Posts: 5627
|
Posted: Fri Aug 12, 2011 3:07 am Post subject: |
|
|
Don't know if it helps at all but here are my scan settings.
The only "out of the ordinary" setting is that I use a custom folder for storing scan results, though I don't think it is affecting aobscan in any way.
| Description: |
|
| Filesize: |
79.68 KB |
| Viewed: |
8579 Time(s) |

|
_________________
|
|
| Back to top |
|
 |
SwaggaJackin' Master Cheater
Reputation: 2
Joined: 06 Nov 2009 Posts: 304
|
Posted: Fri Aug 12, 2011 3:09 am Post subject: |
|
|
| Geri wrote: | Don't know if it helps at all but here are my scan settings.
The only "out of the ordinary" setting is that I use a custom folder for storing scan results, though I don't think it is affecting aobscan in any way. |
Ya it's custom because there isn't a lot of space on my Windows system partition, even without that set it still occurs.
|
|
| Back to top |
|
 |
|