| View previous topic :: View next topic |
| Author |
Message |
cascraft
Cheater
![]() Reputation: 0
Joined: 17 Jul 2015
Posts: 40
|
 Posted: Wed Dec 27, 2017 6:54 pm Post subject: Cheat Engine with Signature/Pattern Scanning |
 |
|
Hello,
is there any way to bring Cheat Engine with Signature/Pattern Scanning?
 [/img]
 |
|
| Back to top |
|
 |
OldCheatEngineUser
Whateven rank
 Reputation: 20
Joined: 01 Feb 2016
Posts: 1586
|
| Posted: Wed Dec 27, 2017 8:52 pm Post subject: |
|
|
CE -> Memory View -> Search -> Find Assembly Code
or
change Value Type instead of 4 byte by default to Array Of Byte.
_________________
About Me;
I Use CE Since Version 1.X, And Still Learning How To Use It Well!
Jul 26, 2020
| STN wrote: | | i am a sweetheart. |
|
|
| Back to top |
|
|
FreeER
Grandmaster Cheater Supreme
![]() Reputation: 53
Joined: 09 Aug 2013
Posts: 1091
|
| Posted: Wed Dec 27, 2017 9:54 pm Post subject: |
|
|
There's the AAMaker lua plugin that adds a context menu option to "get signature info" (98% sure that's what that option does, I don't have the plugin myself though), and another C++ one I compiled based on some of SEGnosis's code that I found and modified to use Capstone (dll, src, though it occasionally had issues with x64 code), and numerous external tools (like AoBSigmaker) that let you copy and paste various versions of the bytes and it'll generate an AOB for you but personally I've just been using the AOB template (from the disassembler/memory view: ctrl+a, ctrl+shift+a) which fills in an AOB for you.
I'm comfortable enough with looking at instructions and realizing that eg. "mov [0335FA03], eax" in a mono game is going to have the bytes of the address in the instruction as 03 FA 35 03 and they'll need to be changed to wildcards (because the address will be different each time the code is jitted/compiled). |
|
| Back to top |
|
|
cascraft
Cheater
![]() Reputation: 0
Joined: 17 Jul 2015
Posts: 40
|
| Posted: Wed Dec 27, 2017 11:47 pm Post subject: |
|
|
| OldCheatEngineUser wrote: | CE -> Memory View -> Search -> Find Assembly Code
or
change Value Type instead of 4 byte by default to Array Of Byte. |
1# Find Assembly Code does't work for me, it just disappears.
2# Array Of Byte is not exactly what im looking for, i want signature the previous instruction also.
| FreeER wrote: | There's the AAMaker lua plugin that adds a context menu option to "get signature info" (98% sure that's what that option does, I don't have the plugin myself though), and another C++ one I compiled based on some of SEGnosis's code that I found and modified to use Capstone (dll, src, though it occasionally had issues with x64 code), and numerous external tools (like AoBSigmaker) that let you copy and paste various versions of the bytes and it'll generate an AOB for you but personally I've just been using the AOB template (from the disassembler/memory view: ctrl+a, ctrl+shift+a) which fills in an AOB for you.
I'm comfortable enough with looking at instructions and realizing that eg. "mov [0335FA03], eax" in a mono game is going to have the bytes of the address in the instruction as 03 FA 35 03 and they'll need to be changed to wildcards (because the address will be different each time the code is jitted/compiled). |
Thanks, AAMaker helped me alot  |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
