Cheat Engine

[aizen415]

Hi, I'm doing infinite Stamina but i'm having problem this fstp dword ptr [eax] and mov eax,[esi+10] i do not know which one is the correct value for stamina.

{ Game : Graveyard Keeper.exe
Version:
Date : 2020-08-06
Author : Jordan

This script does blah blah blah
}

[ENABLE]

aobscan(INJECT,D9 18 8B 46 10 40 89 46 10 8D 65 FC) // should be unique
alloc(newmem,$1000)

label(code)
label(return)

newmem:

code:
fstp dword ptr [eax]
mov eax,[esi+10]
jmp return

INJECT:
jmp newmem
return:
registersymbol(INJECT)

[DISABLE]

INJECT:
db D9 18 8B 46 10

unregistersymbol(INJECT)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: 2ABBBF78

2ABBBF57: 8B 75 08 - mov esi,[ebp+08]
2ABBBF5A: 8B 46 0C - mov eax,[esi+0C]
2ABBBF5D: 39 45 0C - cmp [ebp+0C],eax
2ABBBF60: 73 28 - jae 2ABBBF8A
2ABBBF62: 8B 46 08 - mov eax,[esi+08]
2ABBBF65: D9 45 10 - fld dword ptr [ebp+10]
2ABBBF68: 8B 4D 0C - mov ecx,[ebp+0C]
2ABBBF6B: 39 48 0C - cmp [eax+0C],ecx
2ABBBF6E: 0F 86 1E 00 00 00 - jbe 2ABBBF92
2ABBBF74: 8D 44 88 10 - lea eax,[eax+ecx*4+10]
// ---------- INJECTING HERE ----------
2ABBBF78: D9 18 - fstp dword ptr [eax]
2ABBBF7A: 8B 46 10 - mov eax,[esi+10]
// ---------- DONE INJECTING ----------
2ABBBF7D: 40 - inc eax
2ABBBF7E: 89 46 10 - mov [esi+10],eax
2ABBBF81: 8D 65 FC - lea esp,[ebp-04]
2ABBBF84: 8D 65 FC - lea esp,[ebp-04]
2ABBBF87: 5E - pop esi
2ABBBF88: C9 - leave
2ABBBF89: C3 - ret
2ABBBF8A: 90 - nop
2ABBBF8B: E8 AC A4 60 E6 - call 111C643C
2ABBBF90: EB D0 - jmp 2ABBBF62
}

[Betcha]

Try and see what happens, it may affect other stuff as well.

[aizen415]

The screen went blank. Also i tried adding numbers inside eax like [eax+10] and [eax], (float)100 still didnt work.

{ Game : Graveyard Keeper.exe
Version:
Date : 2020-08-06
Author : Jordan

This script does blah blah blah
}

[ENABLE]
aobscan(INJECT,D9 18 8B 46 10 40 89 46 10 8D 65 FC)
alloc(newmem,$100)
label(NewStamina)

newmem:

code:
fld dword ptr [NewStamina]
fstp dword ptr [eax]
mov eax,[esi+10]
jmp return

NewStamina:
dd (float)222

INJECT:
jmp newmem

return:
registersymbol(NewStamina)
registersymbol(INJECT)
[DISABLE]

INJECT:
db D9 18 8B 46 10
unregistersymbol(NewStamina)
unregistersymbol(INJECT)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: 2ABBBF78

2ABBBF57: 8B 75 08 - mov esi,[ebp+08]
2ABBBF5A: 8B 46 0C - mov eax,[esi+0C]
2ABBBF5D: 39 45 0C - cmp [ebp+0C],eax
2ABBBF60: 73 28 - jae 2ABBBF8A
2ABBBF62: 8B 46 08 - mov eax,[esi+08]
2ABBBF65: D9 45 10 - fld dword ptr [ebp+10]
2ABBBF68: 8B 4D 0C - mov ecx,[ebp+0C]
2ABBBF6B: 39 48 0C - cmp [eax+0C],ecx
2ABBBF6E: 0F 86 1E 00 00 00 - jbe 2ABBBF92
2ABBBF74: 8D 44 88 10 - lea eax,[eax+ecx*4+10]
// ---------- INJECTING HERE ----------
2ABBBF78: D9 18 - fstp dword ptr [eax]
2ABBBF7A: 8B 46 10 - mov eax,[esi+10]
// ---------- DONE INJECTING ----------
2ABBBF7D: 40 - inc eax
2ABBBF7E: 89 46 10 - mov [esi+10],eax
2ABBBF81: 8D 65 FC - lea esp,[ebp-04]
2ABBBF84: 8D 65 FC - lea esp,[ebp-04]
2ABBBF87: 5E - pop esi
2ABBBF88: C9 - leave
2ABBBF89: C3 - ret
2ABBBF8A: 90 - nop
2ABBBF8B: E8 AC A4 60 E6 - call 111C643C
2ABBBF90: EB D0 - jmp 2ABBBF62
}

[Betcha]

Check what access fstp dword ptr [eax] instruction and you'll see whats there,

[aizen415]

I found Tree things the

The two address are continuously rising and the other one is stable
everytime my stamina decrease the last address counts in.

[sgsgwv$6263]

do "what address this instruction accesses" on the fstp instruction and see if those addresses behave like your stamina.

[aizen415]

i dissect to see what access and i found one that is my stamina which is 0000 float

[sgsgwv$6263]

so what is happening is that instruction (fstp one ) does not just handle your stamina it also handles other stuff (these other stuffs can be dangerous to handle if you are trying to modify them just like your stamina).So you need to seperate the stamina address from the rest of these "other stuff" and for that you need to learn how to handle shared instructions.
You can find info about this in other forums and sone youtube tutorials also.
Go to youtube search "cheat the game shared instructions" and watch and learn.

[aizen415]

Thansk a lot but so it works, but there are still two error which is the red points and green points everytime i activate the cheat those two also increase, but i only wanted the stamina to be stable. Also i can't find anymore tutorial on youtube relating to my problem any help.

[ENABLE]

aobscan(stamina,D9 18 8B 46 10 40 89 46 10 8D 65 FC) // should be unique
alloc(newmem,$1000)

label(code)
label(return)

newmem:

code:
fstp dword ptr [eax]
mov [eax],(float)100
//mov eax,[esi+10]
jmp return

stamina:
jmp newmem
return:
registersymbol(stamina)

[DISABLE]

stamina:
db D9 18 8B 46 10

unregistersymbol(stamina)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: 326F9E58

326F9E37: 8B 75 08 - mov esi,[ebp+08]
326F9E3A: 8B 46 0C - mov eax,[esi+0C]
326F9E3D: 39 45 0C - cmp [ebp+0C],eax
326F9E40: 73 28 - jae 326F9E6A
326F9E42: 8B 46 08 - mov eax,[esi+08]
326F9E45: D9 45 10 - fld dword ptr [ebp+10]
326F9E48: 8B 4D 0C - mov ecx,[ebp+0C]
326F9E4B: 39 48 0C - cmp [eax+0C],ecx
326F9E4E: 0F 86 1E 00 00 00 - jbe 326F9E72
326F9E54: 8D 44 88 10 - lea eax,[eax+ecx*4+10]
// ---------- INJECTING HERE ----------
326F9E58: D9 18 - fstp dword ptr [eax]
326F9E5A: 8B 46 10 - mov eax,[esi+10]
// ---------- DONE INJECTING ----------
326F9E5D: 40 - inc eax
326F9E5E: 89 46 10 - mov [esi+10],eax
326F9E61: 8D 65 FC - lea esp,[ebp-04]
326F9E64: 8D 65 FC - lea esp,[ebp-04]
326F9E67: 5E - pop esi
326F9E68: C9 - leave
326F9E69: C3 - ret
326F9E6A: 90 - nop
326F9E6B: E8 CC C5 4A DE - call 10BA643C
326F9E70: EB D0 - jmp 326F9E42
}

[Csimbi]

Are you sure that code does not access anything else?

[daspamer]