Cheat Engine

kik4444 · Posted: Sun Dec 01, 2013 5:17 am Post subject: AOB scan

When doing an aobscan to see if an option for a trainer would still work, how do I know which bytes I have to scan? Also I've noticed that in CE 6.4 (which I still don't have), there's an option for an AOB injection. What's the difference between that and a normal script? Does it automatically find the correct bytes?

Chris12 · Posted: Sun Dec 01, 2013 6:09 am Post subject:

Serach your AoB in the new executable. If there is result and it's more or less at the same position then your code should still work.

Of course it's not guaranteed but the chance is quite high that it will still work.

++METHOS · Posted: Sun Dec 01, 2013 12:01 pm Post subject:

The bytes are shown in 'Memory Viewer', in the 'Bytes' column. They are also automatically added to your script when you use 'cheat table framework code' and then 'code injection'. For example, they will be written at the bottom, like so:

daspamer · Posted: Sun Dec 01, 2013 12:43 pm Post subject:

++METHOS · Posted: Sun Dec 01, 2013 4:00 pm Post subject:

Yes, either way should work. My template was based off of an old script that Geri had published as part of his AOB tutorial.

daspamer · Posted: Sun Dec 01, 2013 7:09 pm Post subject:

kik4444 · Posted: Thu Dec 19, 2013 1:37 pm Post subject:

Sorry to bump this up again, but I finally tried doing it on a game, and it crashes it. Here's the code I used:

++METHOS · Posted: Thu Dec 19, 2013 2:27 pm Post subject:

kik4444 · Posted: Sat Dec 21, 2013 9:57 am Post subject:

I tried this code on the same game after studying Geri's tutorial, and when I try to activate it, CE freezes for a few seconds and refuses to activate the code.

++METHOS · Posted: Sat Dec 21, 2013 11:18 am Post subject:

kik4444 · Posted: Sat Dec 21, 2013 11:51 am Post subject:

I tried just pasting your entire code that you posted, and the same things happens - CE freezes for a few seconds, after which it unfreezes without the code activating. And I tried doing an AOB search with this:

CC 0F 11 80 AC 00 00 00 * * * * * * * * * * * * * * * *

and I made sure that WRITABLE and EXECUTABLE had a square in them, after scanning for 2 seconds, it shows up with 0 addresses

ALSO, not sure if this matters, but I'm using CE 6.3 so is this code example for the usual code injection, or for the new AOB injection in the 6.4 beta, which I still don't have?

EDIT: Just noticed something. Have the bytes changed? Cause I tried searching for those even without the stars, then I tried searching for them in the memory with and without the stars and nothing showed up. Have the bytes changed or something? Cause I'm pretty sure that the last time I searched for them (which was the previous time I booted the game up) they were there, now nothing. Is it possible for bytes to change? Cause I know that SOME game updates change the bytes, but I haven't updated the game or edited it in any way.

++METHOS · Posted: Sat Dec 21, 2013 12:03 pm Post subject:

Do an AOB scan for this:

CC 0F 11 80 AC 00 00 00

You should have at least 1 result, assuming you did everything right. (Make sure you haven't altered any other settings - such as your search range)

EDIT:
In memory viewer, if you right-click and select 'go to address', and paste this in:

"StateOfDecay.exe"+1112A0F

Is the instruction correct? If so, highlight it, select tools/auto assemble, template/cheat table framework code/template/code injection etc., and check to see that your script is set up correctly. Check to see that this is the same:

//Alt: db CC 0F 11 80 AC 00 00 00

kik4444 · Posted: Sat Dec 21, 2013 3:33 pm Post subject:

EDIT: ok, did it like this

++METHOS · Posted: Sat Dec 21, 2013 5:51 pm Post subject:

To be sure, close the game and close out cheat engine, completely...run the game and re-open cheat engine...try to search for your AOB (do not enable script unless AOB is found by a manual search). If you can't find your AOB, search for the short version:

F3 0F 11 80 AC 00 00 00

If that doesn't work, then I believe you may be dealing with an encrypted target process.

By the way:

kik4444 · Posted: Sat Dec 21, 2013 5:58 pm Post subject:

Yeah, I forgot that closing CE while the cheat is running DOESN'T actually stop the cheat as well, so when I restarted CE and started it again, I couldn't find the bytes, cause the previous cheat was still running so the bytes weren't the same as they were when it WASN'T running, but anyways I got it all sorted out now.

Can you show me an example of speedhack running in LUA as an option?

And how can AOB be used to hack things that are usually not hackable via searching for a value? Things like the price of an item in a game where you buy stuff, or backpack space? I know there's a really big State Of Decay CT trainer with stuff like backpack space as an option. How do you do that? Cause in most games (even tho you can swap backpacks for more room) backpack space is static and there's no way to change it, so how do you go about actually finding the code that's used to change backpack space? I know Ultimap is very useful for some of these things, but I have an AMD CPU, so Ultimap isn't really an option for me.