 |
Cheat Engine The Official Site of Cheat Engine
|
View previous topic :: View next topic |
Author |
Message |
Xintro How do I cheat?
Reputation: 0
Joined: 24 Jan 2019 Posts: 5
|
Posted: Sat Jan 26, 2019 6:55 pm Post subject: Freeze\Lock values with auto assembler |
|
|
I'm posting this question third time in different category, maybe this is why no one looking at my post?
I don't know, I searched for 3 or 4 days already, and I simply cannot find anything about my problem.
I have table for one game, which uses driver-like anticheat, and cheat engine won't hook into it.
But I found out how to bypass it (with random voodoo magic),
And I can activate scripts to change values of weapon durability and etc.
But there is problem:
Game also uses "always online" system, and every time I travel from level to another level, client sends to server values of hp, items, money and etc.
And durability of weapons\armor too.
And every time it happens, game closes connection with error.
All progress I have done on level resets, and I have to do all over again.
But I found something.
It happens only if weapon\armor stays 999+ or something like this.
When I'm turning off scripts, values "goes back", and I can go to the next level and be happy.
BUT again, it some times does NOT resets to normal values, and stays 999+ even with turned off script.
So there is simple question, I don't know how to do this by my self.
How to change code of "newmew" to something, that just locks values and stays like that?
btw scanning is disabled, like i'm still not hooked cheat_engine to the game.
But scripts works.
There part of the code, it's not by me, all credits to table creator:
Code: |
[ENABLE]
aobscanmodule(INJECT_Durability,GAME.exe,66 0F 6E 8C 3B 9C 05 00 00 66) // should be unique
alloc(newmem,$1000,"GAME.exe"+F3CCDC)
aobscanmodule(INJECT_WeaponDurability2,GAME.exe,66 0F 6E 8C 3B 9C 05 00 00) // should be unique
alloc(newmem2,$1000,"GAME.exe"+F2C06D)
label(code)
label(return)
label(code2)
label(return2)
newmem:
code:
mov [rbx+rdi+0000059C],#99999999
movd xmm1,[rbx+rdi+0000059C]
jmp return
INJECT_Durability:
jmp newmem
nop
nop
nop
nop
return:
registersymbol(INJECT_Durability)
newmem2:
code2:
mov [rbx+rdi+0000059C],#99999999
movd xmm1,[rbx+rdi+0000059C]
jmp return2
INJECT_WeaponDurability2:
jmp newmem2
nop
nop
nop
nop
return2:
registersymbol(INJECT_WeaponDurability2)
[DISABLE]
INJECT_Durability:
db 66 0F 6E 8C 3B 9C 05 00 00
INJECT_WeaponDurability2:
db 66 0F 6E 8C 3B 9C 05 00 00
unregistersymbol(INJECT_Durability)
dealloc(newmem)
unregistersymbol(INJECT_WeaponDurability2)
dealloc(newmem2)
|
(GAME.exe is obviously not a real name of process)
Sorry for spamming forum, but i'm really wanna know how to do it, I tried to search something about freezing\locking\saving-loading on forums and could not find anything at all.
Just please send help4me...
|
|
Back to top |
|
 |
OldCheatEngineUser Whateven rank
Reputation: 20
Joined: 01 Feb 2016 Posts: 1586
|
Posted: Sat Jan 26, 2019 8:42 pm Post subject: |
|
|
use readmem, in this form:
Code: | address to write to:
readmem(address of saved value, size in bytes) |
_________________
About Me;
I Use CE Since Version 1.X, And Still Learning How To Use It Well!
Jul 26, 2020
STN wrote: | i am a sweetheart. |
|
|
Back to top |
|
 |
Xintro How do I cheat?
Reputation: 0
Joined: 24 Jan 2019 Posts: 5
|
Posted: Sun Jan 27, 2019 10:09 am Post subject: |
|
|
Thanks for help, but I still got nothing.
I need to put readmem into code or what?
Can I just get address from this code and create address pointer to the value and just lock it like any other address?
I'm not good with cheat engine at all, and I tried to search about readmem, but I'm still clueless how to do it.
Anyway thanks for helping such stupid noob like me.
|
|
Back to top |
|
 |
OldCheatEngineUser Whateven rank
Reputation: 20
Joined: 01 Feb 2016 Posts: 1586
|
Posted: Sun Jan 27, 2019 8:25 pm Post subject: |
|
|
use it in disable part, two examples:
Code: | define(offset,110)
[enable]
alloc(somemem,128)
label(somesymbol)
registersymbol(somesymbol)
somemem:
mov [somesymbol],ebx
// example instruction:
// mov dword ptr [ebx+152],ebp
somesymbol:
dd 0 // address of ebx
dd 0 // original value
[disable]
[somesymbol]+offset:
readmem(somesymbol+04,04)
unregistersymbol(somesymbol)
dealloc(somemem) |
another example:
Code: | [enable]
alloc(memory,128)
memory:
// example pointer:
mov [["somemodule.exe"+217]+152],esp
[disable]
["somemodule.exe"+217]+152:
dd 0 // write back original value
dealloc(memory) |
_________________
About Me;
I Use CE Since Version 1.X, And Still Learning How To Use It Well!
Jul 26, 2020
STN wrote: | i am a sweetheart. |
|
|
Back to top |
|
 |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
|