Cheat Engine

NanoByte

so i tryed to make a script as i usually do. right click the double value "what writes to this address" and i get a code like "mov [ecx+04],ebp"

now i expected the ebp to be the new value but it is a high number like 40100000 = the double value is 4 at this point so i looked around and i found out that it was in xmm0 in the fpu stack but it could be a coincident that its double value was 4 like the value i wanted.

so if you guys could point me at the right direction it would be much appreciated. how would you go about making a script that freeze the value at 5

rest of the code

mgr.inz.Player · Posted: Sun Sep 28, 2014 5:27 pm Post subject:

Looks like Lua to me.

I had similar thing while making trainer for Don't Starve.

mov [ecx+04],ebp
mov [ecx],eax

And it is probably a shared code. Nop those two instructions to find out.

I think, in this case, EBP register and EAX register contains double value (8bytes).
As you probably know, double type is in reality a 8 bytes, so one quadword, or two doubleword, or four words. In the above code, EAX has low double word, EBP has high double word. You must treat it as a pair, like this - EBP:EAX

For some "normal" values (1.0, 2.0, 3.0) EAX will be 00000000, as shown in this table:

NanoByte · Posted: Sun Sep 28, 2014 7:12 pm Post subject:

Hehe i'm still a newbie, just using my logic to make scripts really didnt know all the technical stuff behind it

so double = 8bytes got it Very Happy

Thanks man Very Happy

i really appreciate it Very Happy

Caliber · Posted: Mon Sep 29, 2014 12:48 pm Post subject:

mgr.inz.Player · Posted: Mon Sep 29, 2014 3:11 pm Post subject:

Yes, if you read script from pastebin.com from above link, you will see almost the same approach.

With "Don't Starve", if v is an address of value (health, sanity, fuel, maxFule, whatever) then value at 'v+0x10' is in fact an address to 'descriptor' ( I think we should call it a 'key', Lua tables are in fact Key/Value pairs)

k=[v+0x10]

at 'k+0xC' there is 'key' string length,
at 'k+0x10' there is 'key' string

We could use built-in string compare function, but it is easier to just use CMP. So, yes, a lot of compares.

NanoByte · Posted: Tue Sep 30, 2014 7:33 am Post subject:

i never tried lua before Very Happy

i'm gonna give it a go, se how that turns out Very Happy

Dayum that pastbin script is long as hell Very Happy

almost a book hehe

MalachXaviel · How do I cheat? Reputation: 0 Joined: 05 Oct 2011 Posts: 1

You figure that out? I've been dabbling myself with trying to make a table with a working pointer that will lock onto several values in the game (more specifically potions). The values and pointers are easy enough to find, but making any of it stick the old fashioned way has been a problem for me so it's got me looking into the scripting side of things now.