| 
			
				|  | Cheat Engine The Official Site of Cheat Engine
 
 
 |  
 
	
		| View previous topic :: View next topic |  
		| Author | Message |  
		| The Dab Cheater
 
 ![]() Reputation: 0 
 Joined: 22 May 2017
 Posts: 33
 
 
 | 
			
				|  Posted: Thu Jun 22, 2017 10:50 am    Post subject: How to find find pointers with AOB scripts. |   |  
				| 
 |  
				| I am looking to find a pointer for this game for a while, but just can't seem to do it. I have tried multilevel pointers, a basic pointerscan, but those do not work. So I tried to make a script in AOB that might work. This is the closest I've gotten, but the problem here is the script will not enable. I am sort of a noob when it comes to writing scripts. So if what I am asking for is impossible please let me know. Here is the script. 
 
 =========
 
 [ENABLE]
 
 aobscan(score,48 89 81 68 01 00 00 48 3D) // should be unique
 alloc(newmem,$1000,7FF9C41CA2A6)
 
 label(code)
 label(return)
 
 newmem:
 
 globalalloc(base,4)
 
 code:
 mov [base],rcx
 mov [rcx+00000168],rax
 jmp return
 
 score:
 jmp newmem
 nop
 nop
 return:
 registersymbol(score)
 
 [DISABLE]
 
 score:
 db 48 89 81 68 01 00 00
 
 unregistersymbol(score)
 dealloc(newmem)
 
 =========
 
 The two lines that are supposed to help me find the pointer is:
 globalalloc(base,4)
 mov [base],rcx
 
 So when this script is enabled it should lead me straight to the base address. This will let me add a new pointer manually, where the address is "base" and the offset is the offset, in this case "168"
 |  |  
		| Back to top |  |  
		|  |  
		| Rudo Advanced Cheater
 
  Reputation: 2 
 Joined: 27 Jun 2015
 Posts: 80
 
 
 | 
			
				|  Posted: Thu Jun 22, 2017 11:03 am    Post subject: |   |  
				| 
 |  
				| Try to rearrange globalalloc and give it a bigger size (since this is a 64 bit process) 
  	  | Code: |  	  | [ENABLE]
 
 aobscan(score,48 89 81 68 01 00 00 48 3D) // should be unique
 alloc(newmem,$1000,7FF9C41CA2A6)
 
 label(code)
 label(return)
 
 globalalloc(base,16) // this
 
 newmem:
 
 code:
 mov [base],rcx
 mov [rcx+00000168],rax
 jmp return
 
 score:
 jmp newmem
 nop
 nop
 return:
 registersymbol(score)
 
 [DISABLE]
 
 score:
 db 48 89 81 68 01 00 00
 
 unregistersymbol(score)
 dealloc(newmem)
 
 | 
 |  |  
		| Back to top |  |  
		|  |  
		| The Dab Cheater
 
 ![]() Reputation: 0 
 Joined: 22 May 2017
 Posts: 33
 
 
 | 
			
				|  Posted: Thu Jun 22, 2017 11:14 am    Post subject: |   |  
				| 
 |  
				|  	  | Rudo wrote: |  	  | Try to rearrange globalalloc and give it a bigger size (since this is a 64 bit process) 
  	  | Code: |  	  | [ENABLE]
 
 aobscan(score,48 89 81 68 01 00 00 48 3D) // should be unique
 alloc(newmem,$1000,7FF9C41CA2A6)
 
 label(code)
 label(return)
 
 globalalloc(base,16) // this
 
 newmem:
 
 code:
 mov [base],rcx
 mov [rcx+00000168],rax
 jmp return
 
 score:
 jmp newmem
 nop
 nop
 return:
 registersymbol(score)
 
 [DISABLE]
 
 score:
 db 48 89 81 68 01 00 00
 
 unregistersymbol(score)
 dealloc(newmem)
 
 | 
 | 
 
 
 
 So I tried this tip but I get a error that maybe you can walk me through on fixing?
 
 "The symbol named base was previously declared with a size of 4 instead of 16, all scripts that use this memory must give the same size, or delete the old alloc from the userdfined symbol list."
 |  |  
		| Back to top |  |  
		|  |  
		| ParkourPenguin I post too much
 
  Reputation: 152 
 Joined: 06 Jul 2014
 Posts: 4706
 
 
 | 
			
				|  Posted: Thu Jun 22, 2017 11:20 am    Post subject: |   |  
				| 
 |  
				| Restart the game and CE to fix that error. 
 That still won't fix your original problem. See this post.
 _________________
 
 I don't know where I'm going, but I'll figure it out when I get there. |  |  
		| Back to top |  |  
		|  |  
		| The Dab Cheater
 
 ![]() Reputation: 0 
 Joined: 22 May 2017
 Posts: 33
 
 
 | 
			
				|  Posted: Thu Jun 22, 2017 11:47 am    Post subject: |   |  
				| 
 |  
				|  	  | ParkourPenguin wrote: |  	  | Restart the game and CE to fix that error. 
 That still won't fix your original problem. See []this post[/url].
 | 
 
 
 Thanks man, I read your post on the other page, you are a legend. I have been working on this forever and you just saved me.
 |  |  
		| Back to top |  |  
		|  |  
		|  |  
  
	| 
 
 | You cannot post new topics in this forum You cannot reply to topics in this forum
 You cannot edit your posts in this forum
 You cannot delete your posts in this forum
 You cannot vote in polls in this forum
 You cannot attach files in this forum
 You can download files in this forum
 
 |  |