Cheat Engine

[Flux.]

Just having some fun with Hitman Absolution, (i know there's another thread on this with a table) and have found the AOB for health can anyone help me with the code injection please.

The original code is -

code:
fstp dword ptr [esi+00000218]
jmp return

If i remove the 00000218 and add this to newmem like so -

newmem:
fstp dword ptr [esi]

It works, giving god mode but the player has zero health, and if the script is disabled the game eventually crashes after taking damage.

[Zanzer]

[Flux.]

@Zanzer Thanks for the reply, it works better than my code, this one doesn't crash after disabling but the health stays at zero and the player remains immortal.

It is working but to reset the script you have first disable it, and then in game either restart or finish a level.

Because this is running in the memory, is it best to make a disable script, or should it disable properly when using the right code.

[mgr.inz.Player]

just highlight this instruction "fstp dword ptr [esi+00000218]" in "memory viewer". Then tools->auto assemble, then template->aob injection, then OK, and OK.


replace line
fstp dword ptr [esi+00000218]


with
fstp st(0)



File->assign to current cheat table. Close. Autoassemble window. Close "memory viewer".
In addresslist (bottom part of main CE window) there should be new entry. Change description if you want.
Save your work.

[Flux.]

@mgr.inz.Player thanks for the reply,
Yeah i already had the script, and it is working, but its not disabling instantly.
Here is the script -

[ENABLE]

aobscanmodule(invulnerable,HMA.exe,D9 9E 18 02 00 00 A1) // should be unique
alloc(newmem,$1000)

label(code)
label(return)

newmem:
fstp st(0)

code:
fstp dword ptr [esi+00000218]
jmp return

invulnerable:
jmp newmem
nop
return:
registersymbol(invulnerable)

[DISABLE]

invulnerable:
db D9 9E 18 02 00 00

unregistersymbol(invulnerable)
dealloc(newmem)

[mgr.inz.Player]

You should comment original instruction while using fstp st(0):

[Flux.]

@mgr.inz.Player Fantastic thanks, it works a treat.

I was under the impression that the new code had to go under the newmem: header, and the original code sat under the code: header, but this works perfect after a quick test. thanks guys.

[mgr.inz.Player]

"newmem" and "code" are just labels.

Both sections
- between "newmem:" and "code:"
- between "code:" and "jmp return"

are the "new code". And are placed in freshly allocated memory.


autoassemble commands
new code (new memory) section
overwrite section

[Flux.]

mgr.inz.Player After reading "The aobscan instruction" by Geri on the tutorials section (which is very informative) one thing i must have misunderstood is where to put the code on the table, to me it suggested the new code had to go under the newmem and original under code, but thanks for enlightening me.

"Both sections
- between "newmem:" and "code:"
- between "code:" and "jmp return"

are the "new code". And are placed in freshly allocated memory."

Could you please explain why the layout of my original table only partially worked and wouldn't disable properly, all the code needed was within the "new code area"

newmem:
fstp st(0)

code:
fstp dword ptr [esi+00000218]
jmp return

[mgr.inz.Player]

In "overwrite section" you have "jmp newmem"
So, injected user code starts at newmem.

[Flux.]

@mgr.inz.Player When i tried the code like this -

newmem:
fstp st(0)

code:
fstp dword ptr [esi+00000218]
jmp return

It didn't work properly, is it because all the code needs to be together, whether under newmem or code. So the above code has issues in regards to disabling it, but this would work -

newmem:
fstp st(0)
fstp dword ptr [esi+00000218]
jmp return

And this does work (tested) -

code:
//fstp dword ptr [esi+00000218]
fstp st(0)
jmp return

[mgr.inz.Player]

for disabling, you need this:

[Flux.]

@mgr.inz.Player
Thanks for all your help, it is really appreciated.

So the reason the original didn't work was because it needed //, and without the // it was executing the original code.