Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Confused In AOB Scan

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine
View previous topic :: View next topic  
Author Message
sp4rx
Advanced Cheater
Reputation: 0

Joined: 19 Feb 2013
Posts: 64
Location: India

PostPosted: Tue Jul 30, 2013 1:13 pm    Post subject: Confused In AOB Scan Reply with quote

I am doing a aob scan for the byte pattern
Code:
8B 00 EB 20 8B 45 08 8B 40 0C 39 70 0C


But two codes have the same byte pattern, See the images below:
1)This is where the code injection is occuring


2)But I want to do the code injection here



Both the codes have same byte pattern, So the code injection is occuring in the first address,
Can it be done in the second one??

_________________
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 470

Joined: 09 May 2003
Posts: 25788
Location: The netherlands

PostPosted: Tue Jul 30, 2013 1:17 pm    Post subject: Reply with quote

you'll have to use lua then to get a list of all aob results, and then pick the last

Also, how about hooking both functions? E.g if the first one is hooked, the next aobscan will find the second one, since the bytes of the first are changed

_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
sp4rx
Advanced Cheater
Reputation: 0

Joined: 19 Feb 2013
Posts: 64
Location: India

PostPosted: Tue Jul 30, 2013 1:32 pm    Post subject: Reply with quote

1) I dont know lua Sad
2) What is the meaning of hooking functions, will you please explain
3) Yes the bytes are changed, If I take a longer byte pattern, But those bytes changes randomly, And If i use ** the code injection occurs in the 1st address

_________________
Back to top
View user's profile Send private message
TsTg
Master Cheater
Reputation: 5

Joined: 12 Dec 2012
Posts: 340
Location: Somewhere....

PostPosted: Sat Aug 03, 2013 5:20 pm    Post subject: Reply with quote

You can do the AOB scan, then in the injection address (Picture 1), make the code redirected to an allocated memory(containing the first 6 bytes of the original code, at least)

then do another AOB scan, the result should take you the target address of yours (Picture 2).

otherwise, find another good and long bytes chain for the AOB.
Back to top
View user's profile Send private message
daspamer
Grandmaster Cheater Supreme
Reputation: 54

Joined: 13 Sep 2011
Posts: 1588

PostPosted: Sat Aug 03, 2013 6:53 pm    Post subject: Reply with quote

use this script in lua
Code:
function GrabAddress(Address, AoB, index)
   local index = index or 0
   local results = AOBScan(AoB)
   if results == nil then
      return
   end
   local count = stringlist_getCount(results, index)
   if count-1 < index then
      return showMessage("Index is not valid, it's bigger than the results count")
   end
   local ReqAddress = stringlist_getString(results, index)
   local script = 'label(' .. Address .. ')\nregistersymbol(' .. Address .. ')\n' .. ReqAddress .. ':\n' .. Address .. ':'
   autoAssemble(script)
end


Now you can create scripts like this:
Code:
//luacall(GrabAddress(How you want to define your AoB result, the AoB itself, index (if there's multiply results, if not keep it empty)))
luacall(GrabAddress("MyAddressName","E8 7A B8 BE FF C3 00 00 00 00", 0))
// I don't need to write the index, because it returns 1 result for me
// so I can do instead this:
//luacall(GrabAddress("MyAddressName","E8 7A B8 BE FF C3 00 00 00 00"))

MyAddressName:
db E8 7A B8 BE FE C3 00 00 00 00


Don't forget executing it before trying the Auto Assemble script.
You can make a .lua file and put it in the cheat engine auto run folder so it'll execute for you without having to execute it manually.

Also, if the AoB wasn't found it'll return nil, causing your script to fail to enable.

Hope this helps.


Edit:
Index starts from 0
0 for first address
1 for second address
2 for third address..

Just to let you know.

_________________
I'm rusty and getting older, help me re-learn lua.
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites