Cheat Engine

JJXB · Newbie cheater Reputation: 0 Joined: 28 Aug 2015 Posts: 20

okay, so after a long time of doing other things, i've come back to this for the moment.

i do have a new script that modifies the FOV in a different way however. my previous method was directly modifying the fpu stack before the fstp but the way it changed the FOV was unpredictable.

now? i intercept the 51 float much earlier and do an addss to modify the xmm0 value after comparing the value in the xmm0 (i make sure to copy the xmm0 value before comparison and put it back on the xmm0 before the end of the script so things work normally). while the compare methods are the same as before (see below the PP quote for my response to that), this has had the net effect of being able to precisely control the FOV plus detection of numbers seems to be more reliable that way.

JJXB · Newbie cheater Reputation: 0 Joined: 28 Aug 2015 Posts: 20

quick update:
after sleeping, i've managed to implement UCOMISS compares instead of cmp compares in the FOV script.

ParkourPenguin · Posted: Mon Jun 27, 2016 11:20 am Post subject:

JJXB · Newbie cheater Reputation: 0 Joined: 28 Aug 2015 Posts: 20

ParkourPenguin · Posted: Mon Jun 27, 2016 1:06 pm Post subject:

There's a difference between "the stack" and "the FPU stack". The FPU stack is actually a series of registers that act similar to a stack, while the stack is more or less the memory location ESP is at. push (float)39 subtracts 4 from ESP (allocates space for a local variable) and moves 39 into the new address of [ESP]. From that point on, you don't need to subtract 4 from ESP any more, so you can simply move whatever value you want into [ESP]. When you exit your code injection, you have to clean up your local variable on the stack by adding 4 to ESP.

There may not be a single variable that determines if the game is in 3rd-person or 1st-person. It's probably a combination of many different variables that are set when a certain subroutine is called. If you are able to use it, Ultimap is made for finding calls.

JJXB · Newbie cheater Reputation: 0 Joined: 28 Aug 2015 Posts: 20

ah. makes sense now.

as for the variables, the engine seems to have a lot of variables to say what parts of what viewmodels are visible at that moment. i found a lot of those so i was figuring that *something* had to trigger them but i couldn't figure out what. now you've mentioned the ultimap, i can see if i can use it.

and i'll also use this post to upload the CT file i have as of writing this post (with your name included as the person who fixed and cleaned up the code in the FOV script).

note to anyone else reading this for the FOV:
this table has a ton of other stuff in it primarily intended for testing and cursory "because i can" (such as Terrorist Hunt infinite health etc). please don't take it online and use those. i haven't tested online and don't plan to. i'll likely release a fully complete table/trainer/both without the actual cheaty shit later on. hopefully with third person view forcing integrated.

JJXB · Newbie cheater Reputation: 0 Joined: 28 Aug 2015 Posts: 20

ugh. coming back to this has been a nightmare for TPS. the ultimap function seems kind of awkward and difficult to figure out (and i can't use Ultimap 2 because somehow my CPU doesn't support it) but i did manage to at least make a script to lock the viewmodel when changing modes. but that isn't gonna be of much use because i need to know what code triggers the game to activate the viewmodel change AND the camera position change (which i haven't found yet btw).

is there any way to use the ultimap in a coherent manner or without the crippling framerate issues? and is there some sort of tutorial on it that will help me pinpoint what called the change?

JJXB · Newbie cheater Reputation: 0 Joined: 28 Aug 2015 Posts: 20

in lieu of progress on the third person part itself (Still looking out for a decent ultimap guide of some sort if anyone has a link or something), i'm looking at the way that the camera is handled. It has two sets of coordinates: the Camera and Character ones (character one being centered on the head).
In first person the camera and character co-ordinates are the same and looking up/down does not change the Z co-ordinates of the camera.
In Third person the camera and character co-ordinates are different and the Z co-ordinates of the Camera changes as you look up and down.

looking at what modifies the camera's Z co-ordinates left me with a possible hook point to change values of the Z co-ord but as to how? that's what i've got to work on. i'm thinking that the command that puts the co-ordinate into the right place can be manipulated to either add or subtract by an amount, making it possible to change the position of the camera in first and third person somehow.

Why work on the Z axis first? the X and Y axis seem to be tougher nuts to crack as co-ordinate positions for those are worked out in a harder way due to level co-ordinates being the basis of player and camera position.

Either way, would love some assistance somewhere in this bog of confusion and ideas

Edit:
okay, i have some stuff to do with the camera setup as demonstrated in the video:
https://youtu.be/4Jtumpgxm1M
as it is they do the old method that uses extra fadds since i haven't found any xmm stuff for the camera co-ords as is. but i can adapt them as happened with the FOV script to some degree when i do.

Any ideas as to where i could go from here? with either TPS (ultimap) or camera modifications? i fully realise that this could probably lead to some weird camera fly trick for other things too if i can get some sort of angle modification to have a full 360 degree modifiable camera. but as is? i'd need some sort of help on getting things to a decent standard

JJXB · Newbie cheater Reputation: 0 Joined: 28 Aug 2015 Posts: 20

ugh. still little to no progress because i've hit that walll of uncertainty again. but i have messed around with the camera mods a little more anyway and found that if i just feed it direct co-ordinates somehow the camera is still being changed in small part by player movement.

sometimes this shit really is confusing as anything. so again, putting out a call for any help on this at all. uploading the latest CT file for anyone interested in trying the camera stuff and hoping that someone else wants to give some help with my aims

JJXB · Newbie cheater Reputation: 0 Joined: 28 Aug 2015 Posts: 20

Okay, Ultimap ended up kind of working and getting me somewhere so now i'm at a stage where i am at the function that changes the view as far as i know. now? i want to invoke it at will. what would be the best way of calling the function if i know the name address and want to do it via button press/combo? some sort of key detection in the AA script possible without LUA (i have no clue what i'm doing with LUA)? i just want to get it to run the function that runs whenever i put in the XBXB LS LS YAYA RS RS button in singleplayer on the pause menu through a simpler keypress that works at anytime.

JJXB · Newbie cheater Reputation: 0 Joined: 28 Aug 2015 Posts: 20

After a long time of not posting, i have managed to get closer to Third Person:
i have found some of the button check code but triggering it without the button input at all crashes (presumably because it's not setup correctly as far as memory addresses)
R6Vegas2_Game.DareObjectFactory::DareObjectFactory+90B12E - test eax,eax
This is part of the general button detection code
R6Vegas2_Game.DareObjectFactory::DareObjectFactory+3296BD - FF D2 - call edx
This must be the thing that triggers the action of the button/combo of buttons based on what edx is.

i cannot however figure out what sets edx for execution and directs it to the right edx.

plus how would i go about setting up the right memory map overall for that instruction/function to be executed? ideally i want to be able to set one bit that then executes the cascade of functions, leaving me able to assign that bit change to a button, essentially replacing the long string of inputs that you use normally to see if i can execute them outside of singleplayer (which i still have no clue how to do by the way and haven't been able to figure out)