Cheat Engine

Zanzer · Posted: Fri Aug 05, 2016 8:14 am Post subject:

In my script, when the game executes the code in question, it will populate the "myvar" address with the base address you need.
You can then add a pointer to your table with the base as "myvar" and the first offset as "BC".
That should give you the exact address accessed by: cmp dword ptr [rcx+000000BC],00

taco1 · Newbie cheater Reputation: 0 Joined: 04 Aug 2016 Posts: 16

cooleko · Posted: Fri Aug 05, 2016 3:14 pm Post subject:

Three problems:

1) delete line ?3 of your script "cmp dword ptr [rcx+bc],00"
--This is because you left ?0 in the script which does the exact same thing.
2) mov line ?2 to be in between "code:" and line ?0
--a return terminates the script and returns to the original code, so your instruction is never being run
3) activate the script! just click the freeze box next to the script when it is fixed.

Everything else looks fine, you should be able fix the script, activate it, and then your pointer will work.

Try to crop your pictures better before uploading them.

taco1 · Newbie cheater Reputation: 0 Joined: 04 Aug 2016 Posts: 16

You are a genius my friend! Worked perfect!!!!

I know you didn't have to study my photos and help but you took the time to do so and I appreciate it very much!

taco1 · Newbie cheater Reputation: 0 Joined: 04 Aug 2016 Posts: 16

Not sure if I should start a new thread or not but here goes.

My game updated and now this does not work anymore. I am having problems finding the addresses now. I use to just turn map on and off and search 1 and 0 until it left me with one address. This method is not working any more. Any tips on how I could find the address now?

I also tried the "unknown initial value" type first then "changed value" but had no luck finding it.

cooleko · Posted: Mon Jul 31, 2017 3:34 am Post subject:

Why don't you search for Visualizer.gLabel and just find the line of code nearest to where the previous cmp dword ptr [rcx+BC],00 was. You will likely find that the only change was rcx to (for example) rbx, or BC to CC. For those examples, the new line would appear as cmp dword ptr [rbx+BC],00 or cmp dword ptr [rcx+CC],00.

Alternatively, there is nothing wrong with your previous attempts at finding the value using unknown initial value, changed value, same as first value, etc until you have limited the results to w/e the smallest search result you can get. Then just change the values in batches (maybe freeze the first half of the values, try to change the map status in game, see if it doesnt change, then freeze second half of the values and test them). This has a tendency to crash the game, so just make the portions you are testing smaller and smaller until you have figured it out. (instead of half, do 25%, or just 50 values at a time).

taco1 · Newbie cheater Reputation: 0 Joined: 04 Aug 2016 Posts: 16

I finally found the address but its now in float Sad

. I tried to modify script but I was unsuccessful. I attached some pictures. Can you help me with a new script?

Prehistoricman · Posted: Mon Jul 31, 2017 7:52 pm Post subject:

Do you see the next instruction? It's sete. Set if equal. I believe you want this value to appear equal to 0 so you want to simply put NOPs in the place of the cmp instruction

Right click on the cmp instruction and press "replace with code that does nothing"

If you want a script to do this, simply follow the AOB process you used before and then make sure your edited code does not have the cmp instruction. This means the set will happen regardless of if the two values are actually equal

taco1 · Newbie cheater Reputation: 0 Joined: 04 Aug 2016 Posts: 16

Can you give me an example of the new script?

Prehistoricman · Posted: Tue Aug 01, 2017 6:30 am Post subject:

Have you tried the replace with code that does nothing yet? There's no point making a script yet if it won't work anyway

Edit:

I made a mistake actually! You want a way to set the Z flag (that will allow the sete to run as you wish)

So to test out the hack, double click on the cmp, and write in

xor cl, cl

This will set cl to zero, as xoring anything with itself will output zero. When the result of an operation is zero, the zero flag is set. This is the same flag that it used to say "two values were equal", such as in the cmp (compare) instruction.

taco1 · Newbie cheater Reputation: 0 Joined: 04 Aug 2016 Posts: 16

I tried what you had suggested. It made it so I couldn't open my map at all. I want it to be visible at all times.

cooleko · Posted: Tue Aug 01, 2017 9:22 pm Post subject:

What is wrong with doing exactly what you did before?

simply type "mov [bMap],rcx"
before "cmp byte ptr [rcx+129],00"

then update the pointer for in the address list to 129 instead of BC

it is the exact script you had working before with the new AOB, so just use the AOB template on the new instruction and add in the globalalloc(bMap,$4) as well as the mov instruction in the same places as the previous script.

taco1 · Newbie cheater Reputation: 0 Joined: 04 Aug 2016 Posts: 16

I tried making the previous script work but failed. I will try again with your instructions and report back.

That worked perfect Cooleko! I think I messed up the pointer the first time. Thanks again for you help.