Cheat Engine

noyuw · Newbie cheater Reputation: 0 Joined: 26 Oct 2015 Posts: 12

Hi,

I have a little problem.
Here's it what i do :

I find the right address, i do a AOB injection on it, everything works.
I close the game and CE, i relaunch both, research the new address, do an AOB injection again..and then..bim, i don't have the same code as before, and i'm sure i'm on the exact same pointer since my cheat work on the new adress and there are no other address for this one.

This prevent me to add the AOB injection into a standalone trainer, since the code will work only for the current "session".

Here is the first AOB :

lolAnonymous · Posted: Tue Oct 27, 2015 6:35 pm Post subject: Vote Me :p

Try This noyuw Smile

noyuw · Newbie cheater Reputation: 0 Joined: 26 Oct 2015 Posts: 12

Thanks for your answer, sadly it's not working Sad

It's only working when i get the correct last byte

lolAnonymous · Posted: Tue Oct 27, 2015 7:30 pm Post subject:

Hmmm... Find the value again, copy its aob and find the difference between this D9 9F DC 00 00 00 83 7D E0 00 74 04 85 DB 74 15 83 EC 04 6A 00 6A 02 57 E8 ?? And the new aobs and put ?? Then try again...

Good luck :

ParkourPenguin · Posted: Tue Oct 27, 2015 8:16 pm Post subject:

It's probably not working because that's not a unique AoB. To check if it's a unique AoB:

Set the "Writable" checkbox to grey (don't care if it's writable memory or not)
Search for your AoB
Make sure CE only finds 1 result
If it does, use that. If it doesn't, make a better AoB signature.

For finding out how to make a good AoB signature, see this topic and go to the section called "A Good Signature".

Zanzer · Posted: Tue Oct 27, 2015 8:45 pm Post subject:

Those last couple of bytes are changing because it's calling a function located in memory.
When the game reloads, that function is in a new place within memory, so the bytes have changed.
You need to add several more bytes to the end of your AOB (or include some at the beginning).
Since E8 is the beginning of the call statement, you need to use E8 ?? ?? ?? ?? and follow up with more bytes.

STN · Posted: Wed Oct 28, 2015 3:56 am Post subject:

Do NOT use Calls, Long JMPs, harcoded values as a signature ever!. As you can see they will always change.

Wildcard (?? or xx) the bytes after E8 and your aob should be fine.

noyuw · Newbie cheater Reputation: 0 Joined: 26 Oct 2015 Posts: 12

Thanks a lot for all your answers !

To be more clear i did a screenshot of all windows and added some explanations you will understand it a lot more :

imgur[dot]com/yeiAFFg

What i noticed is the last byte is very often 90, and if in my AOB i let 90 when the last should be 90 it works obviously, but sometimes the last one is not 90, i'm gonna try to find all the last byte possible maybe there is only a few ones ?

Actually for the last byte i got for now : 18, 90, 90, A4, 90, A4, 90

One thing is sure, replacing the last byte by ?? or xx doesn't work at all in my case

Again thanks for your support

Rydian · Posted: Wed Oct 28, 2015 6:30 am Post subject:

Just remove the 90 and then see what you get when doing that signature as a scan in the main CE window?

noyuw · Newbie cheater Reputation: 0 Joined: 26 Oct 2015 Posts: 12

panraven · Posted: Wed Oct 28, 2015 6:39 am Post subject:

From the pic, probably the aob should include a few instruction before the hack point instruction, as they are more characteristic. The following use an aob pattern start from 0x642e44f @the aa script of the pic, so its hack point need an offset adjust. May try:

noyuw · Newbie cheater Reputation: 0 Joined: 26 Oct 2015 Posts: 12