| View previous topic :: View next topic |
| Author |
Message |
garbygarb
Newbie cheater
![]() Reputation: 0
Joined: 10 Aug 2021
Posts: 20
|
 Posted: Sun Aug 29, 2021 8:11 pm Post subject: |
 |
|
| LeFiXER wrote: | | That actually works? |
Yeah it sure does. It's an autoaim for halo 3 campaign.
|
|
| Back to top |
|
 |
ParkourPenguin
I post too much
 Reputation: 155
Joined: 06 Jul 2014
Posts: 4777
|
| Posted: Sun Aug 29, 2021 8:27 pm Post subject: |
|
|
| garbygarb wrote: | Before script is active:
| Code: |
halo3.dll+14B79E - F3 0F59 8E 48030000 - mulss xmm1,[rsi+00000348]
|
After:
| Code: |
halo3.dll+14B79E - E9 5D48EAFF - jmp 7FFC70750000
halo3.dll+14B7A3 - 0F1F 00 - nop dword ptr [rax]
|
I hope this means something lol |
Right click the jmp instruction and select "follow" to go to the jmp destination. Post the code there too if you don't mind. It should be a mulss and a jmp followed by a bunch of 00 bytes that don't matter.
The script with a bunch of db pseudoinstructions modifies the same injection point ("halo3.dll+14B7DB") and still doesn't do anything: the bytes written in both enable and disable are the same.
I can see the second script working since it's basically replacing an instruction with nops, but does that first "bullet magnetism" script actually work by itself? Like you don't have to enable something else for it to work? Does disabling the script work fine too?
Is there anything in the Lua script? (Table -> Show cheat table Lua script)
_________________
I don't know where I'm going, but I'll figure it out when I get there. |
|
| Back to top |
|
|
garbygarb
Newbie cheater
![]() Reputation: 0
Joined: 10 Aug 2021
Posts: 20
|
| Posted: Sun Aug 29, 2021 8:33 pm Post subject: |
|
|
| ParkourPenguin wrote: | | garbygarb wrote: | Before script is active:
| Code: |
halo3.dll+14B79E - F3 0F59 8E 48030000 - mulss xmm1,[rsi+00000348]
|
After:
| Code: |
halo3.dll+14B79E - E9 5D48EAFF - jmp 7FFC70750000
halo3.dll+14B7A3 - 0F1F 00 - nop dword ptr [rax]
|
I hope this means something lol |
Right click the jmp instruction and select "follow" to go to the jmp destination. Post the code there too if you don't mind. It should be a mulss and a jmp followed by a bunch of 00 bytes that don't matter.
The script with a bunch of db pseudoinstructions modifies the same injection point ("halo3.dll+14B7DB") and still doesn't do anything: the bytes written in both enable and disable are the same.
I can see the second script working since it's basically replacing an instruction with nops, but does that first "bullet magnetism" script actually work by itself? Like you don't have to enable something else for it to work? Does disabling the script work fine too?
Is there anything in the Lua script? (Table -> Show cheat table Lua script) |
This is the code before I activate the table.
| Code: |
halo3.dll+14B79E - F3 0F59 8E 48030000 - mulss xmm1,[rsi+00000348]
|
I activate the table
| Code: |
halo3.dll+14B79E - E9 5D48EAFF - jmp 7FFED00B0000
|
Then I follow that to get here
| Code: |
7FFED00B0000 - E9 A1B71500 - jmp halo3.dll+14B7A6
|
Then I followed that for fun
| Code: |
halo3.dll+14B7A6 - F3 0F11 4B 04 - movss [rbx+04],xmm1
|
Nothing in the Lua script.
That script I posed with all the db instructions works by itself. So does the one I'm referring to now. Just for clarity it's
| Code: |
[ENABLE]
alloc(newmem,2048,"halo3.dll"+14B79E)
label(returnhere)
label(originalcode)
label(exit)
newmem:
//mulss xmm1,[rsi+00000358]
originalcode: //00000348
exit:
jmp returnhere
"halo3.dll"+14B79E:
jmp newmem
nop 3
returnhere:
[DISABLE]
dealloc(newmem)
"halo3.dll"+14B79E:
mulss xmm1,[rsi+00000348]
|
That's the entirety of the script. Enabling and disabling works just fine.
I'm very new to this so I hope I was able to provide the information you were asking for!
|
|
| Back to top |
|
|
ParkourPenguin
I post too much
Reputation: 155
Joined: 06 Jul 2014
Posts: 4777
|
| Posted: Sun Aug 29, 2021 9:19 pm Post subject: |
|
|
Sorry, I didn't catch that you posted the before/after for the second script that modifies aim angle. We've already explained how that one works: it effectively replaces the original instruction with nothing.
I'm talking about the original script for bullet magnetism. The one in your first post.
_________________
I don't know where I'm going, but I'll figure it out when I get there. |
|
| Back to top |
|
|
garbygarb
Newbie cheater
![]() Reputation: 0
Joined: 10 Aug 2021
Posts: 20
|
| Posted: Sun Aug 29, 2021 9:40 pm Post subject: |
|
|
| ParkourPenguin wrote: | Sorry, I didn't catch that you posted the before/after for the second script that modifies aim angle. We've already explained how that one works: it effectively replaces the original instruction with nothing.
I'm talking about the original script for bullet magnetism. The one in your first post. |
The jump takes me here
| Code: |
7FFED00B0000 - E9 A1B71500 - jmp halo3.dll+14B7A6
|
follow takes me here
| Code: |
halo3.dll+14B7A6 - F3 0F11 4B 04 - movss [rbx+04],xmm1
|
Is this it?
|
|
| Back to top |
|
|
ParkourPenguin
I post too much
Reputation: 155
Joined: 06 Jul 2014
Posts: 4777
|
| Posted: Sun Aug 29, 2021 10:07 pm Post subject: |
|
|
This is the first script you posted, the one you said is for "bullet magnetism":
https://forum.cheatengine.org/viewtopic.php?p=5773409#5773409
This is the second script you posted, the one you said is for "aim angle":
https://forum.cheatengine.org/viewtopic.php?p=5773415#5773415
The first script injects at "halo3.dll"+14B7DB.
The second script injects at "halo3.dll"+14B79E.
You were asking about the first script. Then you posted a second script, we explained how that one worked, and we want to move back to the first script since it seems like it does nothing but you assert it does something. However, you're still talking about the second script for some reason.
All the questions I've asked pertain to the first script.
_________________
I don't know where I'm going, but I'll figure it out when I get there. |
|
| Back to top |
|
|
garbygarb
Newbie cheater
![]() Reputation: 0
Joined: 10 Aug 2021
Posts: 20
|
| Posted: Sun Aug 29, 2021 11:27 pm Post subject: |
|
|
| ParkourPenguin wrote: | This is the first script you posted, the one you said
You were asking about the first script. |
Ah yes sorry I'm a bit of a noob. I believe this is what you're looking for.
before activating
| Code: |
halo3.dll+14B79E - F3 0F59 8E 48030000 - mulss xmm1,[rsi+00000348]
|
After activating
| Code: |
halo3.dll+14B79E - E9 5D48E3FF - jmp 7FFED0040000
|
follow takes me to
| Code: |
7FFED0040000 - E9 A1B71C00 - jmp halo3.dll+14B7A6
|
follow takes me to
| Code: |
halo3.dll+14B7A6 - F3 0F11 4B 04 - movss [rbx+04],xmm1
|
|
|
| Back to top |
|
|
LeFiXER
Grandmaster Cheater Supreme
![]() Reputation: 20
Joined: 02 Sep 2011
Posts: 1072
Location: 0x90
|
| Posted: Mon Aug 30, 2021 10:19 am Post subject: |
|
|
| This isn't Lua by the way, it's auto assembler. Also, it looks to be skipping some instructions.
|
|
| Back to top |
|
|
ParkourPenguin
I post too much
Reputation: 155
Joined: 06 Jul 2014
Posts: 4777
|
| Posted: Mon Aug 30, 2021 12:06 pm Post subject: |
|
|
Evidently I cannot convey to you that I want information pertaining to the first script.
My best guess is that it's user error. Good luck.
_________________
I don't know where I'm going, but I'll figure it out when I get there. |
|
| Back to top |
|
|
garbygarb
Newbie cheater
![]() Reputation: 0
Joined: 10 Aug 2021
Posts: 20
|
| Posted: Mon Aug 30, 2021 12:58 pm Post subject: |
|
|
| ParkourPenguin wrote: | Evidently I cannot convey to you that I want information pertaining to the first script.
My best guess is that it's user error. Good luck. |
Sorry, there are 7 scripts in this table and they are basically the same minus the address.
| ParkourPenguin wrote: | | garbygarb wrote: | Before script is active:
| Code: |
halo3.dll+14B79E - F3 0F59 8E 48030000 - mulss xmm1,[rsi+00000348]
|
After:
| Code: |
halo3.dll+14B79E - E9 5D48EAFF - jmp 7FFC70750000
halo3.dll+14B7A3 - 0F1F 00 - nop dword ptr [rax]
|
I hope this means something lol |
Right click the jmp instruction and select "follow" to go to the jmp destination. Post the code there too if you don't mind. It should be a mulss and a jmp followed by a bunch of 00 bytes that don't matter.
|
Are you asking me to follow the jmp instruction fro:
| Code: | | halo3.dll+14B79E - E9 5D48EAFF - jmp 7FFC70750000 |
because you quoted the post where I posted that.
Following that jmp takes me to:
| Code: | | 7FF9C0860000 - E9 A1B71500 - jmp halo3.dll+14B7A6 |
Then following that takes me to
| Code: | | halo3.dll+14B7A6 - F3 0F11 4B 04 - movss [rbx+04],xmm1 |
There is nothing to follow after that.
This is a disaster without being able to post a video.
But just to be thorough:
halo3.dll+14B7DB - this is the address in my original post.
In memory viewer I'm going to find this address.
The search takes me here:
| Code: | | halo3.dll+14B7DB - F3 0F59 86 58030000 - mulss xmm0,[rsi+00000358] |
I activated the script. It becomes:
| Code: | | halo3.dll+14B7DB - E9 2048E6FF - jmp 7FF9C0820000 |
I will follow it to this:
| Code: | | 7FF9C0820000 - F3 0F59 86 58030000 - mulss xmm0,[rsi+00000358] |
This is the end of the line. There is nowhere else to follow to.
I hope this is the right thing.
|
|
| Back to top |
|
|
LeFiXER
Grandmaster Cheater Supreme
![]() Reputation: 20
Joined: 02 Sep 2011
Posts: 1072
Location: 0x90
|
| Posted: Mon Aug 30, 2021 2:56 pm Post subject: |
|
|
| Yeah the latter script literally does nothing other than relocating the original instruction to another address.
|
|
| Back to top |
|
|
garbygarb
Newbie cheater
![]() Reputation: 0
Joined: 10 Aug 2021
Posts: 20
|
| Posted: Mon Aug 30, 2021 3:02 pm Post subject: |
|
|
| LeFiXER wrote: | | Yeah the latter script literally does nothing other than relocating the original instruction to another address. |
So one of my buddies said I would need a script editor plugin for this?
I wish I could post videos soo badly
|
|
| Back to top |
|
|
LeFiXER
Grandmaster Cheater Supreme
![]() Reputation: 20
Joined: 02 Sep 2011
Posts: 1072
Location: 0x90
|
| Posted: Mon Aug 30, 2021 4:31 pm Post subject: |
|
|
| You are sorely misinformed. CE has a built-in script editor. You just have to double-click any entry with the script data type.
|
|
| Back to top |
|
|
garbygarb
Newbie cheater
![]() Reputation: 0
Joined: 10 Aug 2021
Posts: 20
|
| Posted: Mon Aug 30, 2021 10:48 pm Post subject: |
|
|
| LeFiXER wrote: | | You are sorely misinformed. CE has a built-in script editor. You just have to double-click any entry with the script data type. |
Yeah I was confused cause that's how I got the script to paste it here.
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
