 |
Cheat Engine The Official Site of Cheat Engine
|
| View previous topic :: View next topic |
| Author |
Message |
DanyDollaro Master Cheater
Reputation: 3
Joined: 01 Aug 2019 Posts: 334
|
Posted: Mon Nov 11, 2019 4:44 pm Post subject: |
|
|
Oh sorry, I hadn't verified that script, now I corrected it.
If you want the address you need to create a script that moves the address of life to a registered area and takes it from there.
You can use the script that I proposed to you and then disable it after getting the address (If the code does it many times it should be easy to get it), then there would also be other methods to get the address but you should know a programming language they are too complex and at the end you can do it even with a simple script with CE, but you must have at least the basics of the Assembly x8086.
Or you could simply debug the code and read the value of the registers.
Where are you experiencing problems?
|
|
| Back to top |
|
 |
Archezuli Advanced Cheater
Reputation: 0
Joined: 28 Oct 2019 Posts: 58
|
Posted: Mon Nov 11, 2019 5:28 pm Post subject: |
|
|
FuuuuuuuuUCK I have so many questioooooons... ;~;
On the script you made as example, should I do it like in the third code only?
[ENABLE]
alloc(newAddress, 4)
registersymbol(newAddress)
[DISABLE]
dealloc(newAddress)
unregistersymbol(newAddress)
Or should I also add the second code inside?
[ENABLE]
alloc(newAddress, 4)
registersymbol(newAddress)
dec ecx
mov [eax], ecx
[DISABLE]
dealloc(newAddress)
unregistersymbol(newAddress)
And you said to replace the value of ecx with newAddress, but... should I do that on the code above? or directly on the disassembler?!?
And should I really replace it's value with newAddress? Or just write newAddress where eax is?!?
"I modified the code in so as not to read my muniozioni but read those of the memory location assigned by me"
Wait, what memory assigned by you...?!? you have to do that? How? Or is that part of what the code does?!? I feel so dumb rn... >.<"""
And I still wanted to try finding the values where all registries are stored, but I'm starting to think that that's impossible and they just keep changing addresses and values...
And I tried debugging the code through several ways, but none of them are helping! ;-;
Even freezing the command by breaking it doesn't help, I try taking the value from there and using the Scanner to find its address and find no results... (Or several results but in the end none of them are the registry I want...) ;-;
EDIT: Seriously, just look at this shit... this stuff is all over all of the codes that mess with the HP values and stuff in the game, and some are addresses while others are values... I'm not sure I can set them to an address and have them stay there... can I?!? ;~;
| Description: |
|
| Filesize: |
24.79 KB |
| Viewed: |
4362 Time(s) |

|
|
|
| Back to top |
|
 |
DanyDollaro Master Cheater
Reputation: 3
Joined: 01 Aug 2019 Posts: 334
|
Posted: Mon Nov 11, 2019 5:52 pm Post subject: |
|
|
I was referring to this script:
| Code: | [ENABLE]
aobscan(INJECT,01 EA 89 6C 24 04 41 8B 9C 15 84 00 00 00 0F CB 89 54 24)
alloc(newmem,$1000)
alloc(Address,8)
registersymbol(Address)
label(code)
label(return)
newmem:
push 84
pop [Address]
add [Address], ebp
add [Address], edx
code:
mov ebx,[ebp+edx+00000084]
bswap ebx
jmp return
INJECT + 7:
jmp newmem
nop
nop
nop
nop
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 01 EA 89 6C 24 04 41 8B 9C 15 84 00 00 00 0F CB 89 54 24
unregistersymbol(INJECT)
dealloc(newmem)
unregistersymbol(Address)
dealloc(Address) |
About the command "Change registers at this loaction" you can find it on the disassembler (See the picture at the end), what it does is change the value of a register before the operation is performed.
regarding the script, it is:
| Code: | [ENABLE]
alloc(newAddress, 4)
registersymbol(newAddress)
[DISABLE]
dealloc(newAddress)
unregistersymbol(newAddress) |
the code:
| Code: | dec ecx
mov [eax], ecx |
it was just to give an example, so you don't have to put it.
| Description: |
|
| Filesize: |
72.19 KB |
| Viewed: |
4358 Time(s) |

|
|
|
| Back to top |
|
 |
Archezuli Advanced Cheater
Reputation: 0
Joined: 28 Oct 2019 Posts: 58
|
Posted: Mon Nov 11, 2019 7:19 pm Post subject: |
|
|
The code keeps crashing the game again and I don't know whyyyyy aaaaaaaaa ;w;
| Code: | [ENABLE]
aobscan(INJECT,01 EA 89 6C 24 04 41 8B 9C 15 84 00 00 00 0F CB 89 54 24)
alloc(newmem,$1000)
alloc(Address,8)
registersymbol(Address)
label(code)
label(return)
newmem:
push 88
pop [Address]
add [Address], r13
add [Address], rax
code:
mov ebp,[r13+rax+00000088]
bswap ebp
jmp return
INJECT + 7:
jmp newmem
nop
nop
nop
nop
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 01 EA 89 6C 24 04 41 8B 9C 15 84 00 00 00 0F CB 89 54 24
unregistersymbol(INJECT)
dealloc(newmem)
unregistersymbol(Address)
dealloc(Address) |
EDIT:
This one doesn't even let me add it to the table... says it can't compile the 6th line... (Mov [Address], eax) ;w;
| Code: | [ENABLE]
alloc(newmem, 128)
registersymbol(Address, 8)
newmem:
Mov [Address], eax
Mov [eax], ecx
return:
jmp {Address from which I made the injection}
[DISABLE]
dealloc(newmem)
unregistersymbol(Address) |
|
|
| Back to top |
|
 |
DanyDollaro Master Cheater
Reputation: 3
Joined: 01 Aug 2019 Posts: 334
|
Posted: Tue Nov 12, 2019 2:34 am Post subject: |
|
|
I can't know why my code crashes the game, checks the injection area and checks that the code is not corrupted.
You will alloc the Variable Address:
| Code: | [ENABLE]
alloc(newmem, 128)
alloc(Address, 8)
registersymbol(Address)
newmem:
Mov [Address], eax
Mov [eax], ecx
return:
jmp {Address from which I made the injection}
[DISABLE]
dealloc(newmem)
dealloc(Address)
unregistersymbol(Address) |
|
|
| Back to top |
|
 |
Archezuli Advanced Cheater
Reputation: 0
Joined: 28 Oct 2019 Posts: 58
|
Posted: Tue Nov 12, 2019 3:46 am Post subject: |
|
|
Wait, what?!?
Corrupted how?!? ;w;
Also where's the injection area...? Is it the AOB at the top? Or one of the "NewMem" parts...?
|
|
| Back to top |
|
 |
DanyDollaro Master Cheater
Reputation: 3
Joined: 01 Aug 2019 Posts: 334
|
Posted: Tue Nov 12, 2019 4:59 am Post subject: |
|
|
there are hundreds of reasons why the code may not work.
At maximum you can suspend the process, record the symbol founded by the AOB scanner and verify that the code is correct (Also check that the founded AOB is correct and that there are no other similar ones).
|
|
| Back to top |
|
 |
Archezuli Advanced Cheater
Reputation: 0
Joined: 28 Oct 2019 Posts: 58
|
Posted: Tue Nov 12, 2019 5:07 am Post subject: |
|
|
Suspend the process?
Like... pause it with CE?
|
|
| Back to top |
|
 |
DanyDollaro Master Cheater
Reputation: 3
Joined: 01 Aug 2019 Posts: 334
|
Posted: Tue Nov 12, 2019 5:08 am Post subject: |
|
|
| Yes
|
|
| Back to top |
|
 |
Archezuli Advanced Cheater
Reputation: 0
Joined: 28 Oct 2019 Posts: 58
|
Posted: Tue Nov 12, 2019 10:05 am Post subject: |
|
|
Goddamnit... so much stuff at once... aaaa... >.<"
Okay, so lemme see if I can get it all right,
I gotta use the first code to get... the life Address? or what?
If it's the life, do I need to get the Address for the Max life? or Current Life?
And then I gotta use the Address I got from the first code... and apply it on the second one? ...Or what?
I'm still a bit lost... sorry... I swear I'm trying my best but I keep getting lost in the process of doing it all... all those codes and addresses and commands confuse me... ;~;
|
|
| Back to top |
|
 |
DanyDollaro Master Cheater
Reputation: 3
Joined: 01 Aug 2019 Posts: 334
|
Posted: Tue Nov 12, 2019 10:42 am Post subject: |
|
|
You must use this script:
| Code: | [ENABLE]
aobscan(INJECT,01 EA 89 6C 24 04 41 8B 9C 15 84 00 00 00 0F CB 89 54 24)
alloc(newmem,$1000)
alloc(Address,8)
registersymbol(newmem)
registersymbol(Address)
label(code)
label(return)
newmem:
push 88
pop [Address]
add [Address], r13
add [Address], rax
code:
mov ebp,[r13+rax+00000088]
bswap ebp
jmp return
INJECT + 7:
jmp newmem
nop
nop
nop
nop
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 01 EA 89 6C 24 04 41 8B 9C 15 84 00 00 00 0F CB 89 54 24
unregistersymbol(INJECT)
dealloc(newmem)
unregistersymbol(newmem)
unregistersymbol(Address)
dealloc(Address) |
But before you enable it, you have to pause the process, go to the newmem address (newmem is a registered symbol) and check the success of the injection.
|
|
| Back to top |
|
 |
Archezuli Advanced Cheater
Reputation: 0
Joined: 28 Oct 2019 Posts: 58
|
Posted: Tue Nov 12, 2019 1:29 pm Post subject: |
|
|
This is what is there now... ' -'
Is this right?
I feel like it's not, but I'm not sure what "newmem" is supposed to do on the code other than allocate space... ;-;
| Description: |
|
| Filesize: |
7.47 KB |
| Viewed: |
4178 Time(s) |

|
|
|
| Back to top |
|
 |
DanyDollaro Master Cheater
Reputation: 3
Joined: 01 Aug 2019 Posts: 334
|
Posted: Tue Nov 12, 2019 1:43 pm Post subject: |
|
|
Hmmm, I suppose you don't know how to debug a code ... you have to set a break point on the jump that is executed to divert the original code (You can set a break point with F5) and continue from there.
The image that sent me is the hexadecimal view of the code, to make the debig one half up, not so direct is correct or not.
The problem could also be the point of injection if it finds an equal array.
|
|
| Back to top |
|
 |
Archezuli Advanced Cheater
Reputation: 0
Joined: 28 Oct 2019 Posts: 58
|
Posted: Tue Nov 12, 2019 2:23 pm Post subject: |
|
|
Is this right? :D
It crashed when I tried to press "step into" after that third step :D
Sooooooooo... that means that the problem is on <add [Address],rax>
...right? :D
| Description: |
|
| Filesize: |
86.69 KB |
| Viewed: |
4114 Time(s) |

|
| Description: |
|
| Filesize: |
83.69 KB |
| Viewed: |
4114 Time(s) |

|
| Description: |
|
| Filesize: |
83.57 KB |
| Viewed: |
4114 Time(s) |

|
|
|
| Back to top |
|
 |
DanyDollaro Master Cheater
Reputation: 3
Joined: 01 Aug 2019 Posts: 334
|
Posted: Tue Nov 12, 2019 3:22 pm Post subject: |
|
|
I didn't understand the reason for the crash, but right now this script came to mind, try it.
| Code: | [ENABLE]
aobscan(INJECT,01 EA 89 6C 24 04 41 8B 9C 15 84 00 00 00 0F CB 89 54 24)
alloc(newmem,$1000)
alloc(Address,8)
registersymbol(newmem)
registersymbol(Address)
label(code)
label(return)
newmem:
code:
mov ebp,[r13+rax+00000088]
mov [Address], ebp
bswap ebp
jmp return
INJECT + 7:
jmp newmem
nop
nop
nop
nop
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 01 EA 89 6C 24 04 41 8B 9C 15 84 00 00 00 0F CB 89 54 24
unregistersymbol(INJECT)
dealloc(newmem)
unregistersymbol(newmem)
unregistersymbol(Address)
dealloc(Address) |
|
|
| Back to top |
|
 |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
|