 |
Cheat Engine
The Official Site of Cheat Engine
|
| View previous topic :: View next topic |
| Author |
Message |
redleouf
Advanced Cheater
 Reputation: 0
Joined: 13 Feb 2013
Posts: 76
|
 Posted: Fri May 30, 2014 6:39 pm Post subject: AOB Scan - scanning from an other adress |
 |
|
Hi,
I am new to AOB Scan but so far I got great result, except for now. I have that problem I have no idea where it comes from.
I am scanning the AoB for the upper adress of the instruction I want to modify. The instruction in blue is the one I want to modify, the instruction above it is the one I am scanning for.
So according to the adress, I should write in my script "myscan+3" so that it would be "89F296D4 + 3 = 89F296D7" right? But when I do that, it doesn't work, I can execute my script, but it is like it is the wrong adress. I don't get why.
Here is my code if that can help :
| Code: | [ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048)
label(returnhere)
label(originalcode)
label(exit)
label(aob)
registersymbol(aob)
aobscan(aob1,D9 58 38 D9)
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov [edi+0000018C],(float)100
originalcode:
fld dword ptr [edi+0000018C]
exit:
jmp returnhere
aob1+3:
aob:
jmp newmem
nop
returnhere:
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
aob:
db D9 87 8C 01 00 00
unregistersymbol(aob)
//Alt: db D9 87 8C 01 00 00 |
|
|
| Back to top |
|
 |
Dark Byte
Site Admin
 Reputation: 475
Joined: 09 May 2003
Posts: 25996
Location: The netherlands
|
| Posted: Fri May 30, 2014 7:02 pm Post subject: |
|
|
your AOB of D9 58 38 D9 is too small.
it occurs at other locations as well
try
D9 58 3d D9 87 8c 01 00 00 D9 05
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
|
redleouf
Advanced Cheater
Reputation: 0
Joined: 13 Feb 2013
Posts: 76
|
| Posted: Fri May 30, 2014 7:15 pm Post subject: |
|
|
Oh god, it is working. This thing was killing me, I love you.
Thank you so much Dark Byte <3
I also tried to add more bytes but apparently it wasn't enough.
Anyway, it is fixed, thank you again!
|
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
