Cheat Engine

itstwoam · How do I cheat? Reputation: 1 Joined: 01 Oct 2014 Posts: 4

So I was following along this tutorial here:

forum.cheatengine.org/viewtopic.php?t=572465

I ran into an issue when using the aobscan function. Here's a picture with relevant information.

s26.postimg.org/l0q582wa1/CEproblem2.png

I think the main issue is the false match. We all know ?0 doesn't match C7. I tried adding more wildcards to the search but the results didn't change. How do I get around this problem? I looked around the forums trying to find a way to focus or limit the range of aob scan but failed to find anything concrete.

NoMoreBSoD

itstwoam · How do I cheat? Reputation: 1 Joined: 01 Oct 2014 Posts: 4

When that checkbox is set to check both writeable and non writeable it comes back with 3 results. The expected result (EC C4 16 02 E0.) The other two are in non-writable memory(both EC C4 16 02 C7.) Neither of which should be a matched result. The size of the aobscan shouldn't have anything to do with the last 2 mismatched results.

NoMoreBSoD · Posted: Thu Oct 02, 2014 1:39 am Post subject:

itstwoam · How do I cheat? Reputation: 1 Joined: 01 Oct 2014 Posts: 4

Did you fire it up once and just throw in what you spotted because that wouldn't have worked at all on these tries.

EC C4 16 02 00 A9 5B 25 60 9F 97 04 C6 28 D0 BC
EC C4 16 02 B0 C1 A2 26 B2 21 EF 45 C7 F6 21 CA
EC C4 16 02 ?0 ?? ?? 2? ?? ?? ?? ?? C? ?? ?? ??
EC C4 16 02 ?0 ?? ?? 2? B2 21 EF 45 C7 F6 21 CA
EC C4 16 02 ?0 A8 4F 25 AE 69 BF D3 72 44 15 46
EC C4 16 02 E0 82 3E 21 2B DC D5 92 B7 9A 19 58
EC C4 16 02 A0 E0 39 28 1C 10 7C C2 C5 8D AF DD

EC C4 16 02 ?0 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? FF finally got the script to work right. Turns out if you throw enough wildcards at it there's only the 1 expected return.

I would like some clarification on why it returns mismatches though. It shouldn't work that way, or I have a deeply flawed understanding about how wildcards work in searches.

NoMoreBSoD · Posted: Thu Oct 02, 2014 2:07 am Post subject:

itstwoam · How do I cheat? Reputation: 1 Joined: 01 Oct 2014 Posts: 4

The rabbit hole goes a bit deeper also.

s26.postimg.org/rsgkaxl9l/CEproblem3.png

Mismatches....everywhere.

NoMoreBSoD · Posted: Thu Oct 02, 2014 2:21 am Post subject:

My theory is that the wildcard transforms the 2 byte value block in unknown value and not just the 1 wildcard byte.

panraven · Posted: Thu Oct 02, 2014 2:36 am Post subject:

I guess AOBScan does not support half-byte wildcard.
?0 is treated as a wildcard since it cannot convert to a byte value.

Your final AOB
EC C4 16 02 ?0 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? FF
should work the same as
EC C4 16 02 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? FF

doc:
AOBScan(x,x,x,x,...):
scans the currently opened process and returns a StringList object containing all the results. don't forget to free this list when done
Bytevalue of higher than 255 or anything not an integer will be seen as a wildcard
AOBScan(aobstring): see above but here you just input one string

Dark Byte · Posted: Thu Oct 02, 2014 4:47 am Post subject: