Cheat Engine

Staked · Newbie cheater Reputation: 0 Joined: 09 Mar 2019 Posts: 17

Is it possible to make a script that executes parts of the code in an independent way? For example, the tutorial step 2. Could it be possible to find the function that does this in assembly and then call it? or run it?

I've seen some stuff about this by creating a dll file, inject it etc. But can it be done in a simpler way? just in cheat engine

An example would help alot

OldCheatEngineUser · Jul 26, 2020

Staked · Newbie cheater Reputation: 0 Joined: 09 Mar 2019 Posts: 17

Sorry for being so unclear.
I found the function/instructions which makes my character move in the game.

I want to execute the code that does this from cheat engine.
I used ultimap to find the right place in the instruction memory. And i just tried to execute it from the top in lua using.
executeCode('404BC0')

It made my character start move (which was intended) but the game also crashed.

Dark Byte · Posted: Fri Mar 22, 2019 1:27 am Post subject:

look at executeCodeEx , perhaps you need to provide more parameters

and it's always possible that some code is just not thread safe, or the thread needs extra initialization like tls setup

Staked · Newbie cheater Reputation: 0 Joined: 09 Mar 2019 Posts: 17

i tried what you said.
executeCodeEx(1, 100, '404BC0')
worked like a charm! 100%

executeCodeEx(callmethod, timeout, address, {type,value},{type,value},...)
the arguments within {}
How does that work really?
I understood it as it was arguments to the function i call. But what if the address I input (404BC0) is not a function?

Dark Byte · Posted: Fri Mar 22, 2019 4:12 am Post subject:

Staked · Newbie cheater Reputation: 0 Joined: 09 Mar 2019 Posts: 17

but what happens in the game code? can i think of it just as parameters to a function? Are there any specific registers set?
what would happen if i didnt target a function? maybe thats not possible?

Here is a section i want to call, but everytime i do I crash.
What can I look for to make the executeCodeEx(...) work?

Dark Byte · Posted: Fri Mar 22, 2019 5:25 am Post subject:

The function you're in uses "ret 4" so: the calling method is stdcall (0) and it takes one parameter

If you give the wrong parameter value the game will crash

Staked · Newbie cheater Reputation: 0 Joined: 09 Mar 2019 Posts: 17

I read some info about calling conventions.

The info you wrote, stdcall(0) and that it takes 1 parameter. That was all from "ret 4"?

Is this correct?
ret = cdecl
ret 4 = stdcall, 1 argument
ret 8 = stdcall, 2 arguments

What is a good approach to find what should be passed as argument?
Should it be in one of the registers used by mov instruction?

OldCheatEngineUser · Jul 26, 2020

yes correct, but it can be either stdcall or pascal. (but its okay only one parameter is passed)

and you should notice they are making free space in stack for local variables (sub esp,XXX and then add esp,XXX), example C/C++ AUTO keyword. (but still compiler dependent)

the game is handling exceptions, and the handler routine is pushed earlier.