Cheat Engine

riverwest · Newbie cheater Reputation: 0 Joined: 05 May 2019 Posts: 14

I found a value and want to save it in a global label in a script. The value that I'd like to save has a sample value of -900.71, so I'm assuming it is a float. I see this value (-900.71) in the disassembler.

The following code compiles, but I cannot activate my script, so something is wrong. I'm either thinking it is the opcode or my alloc statement. Any ideas here?

TheyCallMeTim13 · Posted: Wed May 08, 2019 7:50 pm Post subject:

MOVUPS - Move Unaligned Packed Single-Precision Floating-Point Values
https://www.felixcloutier.com/x86/movups

It's a packed instruction, so it works on 16 (0x10) bytes at a time.

Not sure if it's the size, or that you never placed the "_height8" label to tell is where is was. But try this:

riverwest · Newbie cheater Reputation: 0 Joined: 05 May 2019 Posts: 14

Thanks, I was mistaking the bytes in the globalalloc to be decimal, but it's in hex. ah.

The script still does not activate after your suggested changes. Do you have any other ideas? It executes only if I comment out this line

TheyCallMeTim13 · Posted: Wed May 08, 2019 8:22 pm Post subject:

riverwest · Newbie cheater Reputation: 0 Joined: 05 May 2019 Posts: 14

That fixed it. I had to reset the memory of the game.

Okay now, I don't know if you'll know this, if not I have a lot of research to do. But I'm trying to manipulate this value, and have the player warp. I'm thinking I can pass the values like so:

xmm0 > _height8 > [Cry3DEngine.dll+755908]

However... that doesn't work, as the code is not injectable.

TheyCallMeTim13 · Posted: Thu May 09, 2019 1:22 am Post subject:

Yeah you can't move a memory address to a memory address, you need to move the first address to a registry then move that to the second address.
With the code you posted you're moving the value of XMM0 to the address at "_height8", and the original code sets the value at "Cry3DEngine.dll+775908" so you can just use that.

if you're trying to move the value from "_height8" to "Cry3DEngine.dll+775908", try this:

riverwest · Newbie cheater Reputation: 0 Joined: 05 May 2019 Posts: 14

TheyCallMeTim13 · Posted: Thu May 09, 2019 10:27 pm Post subject:

I'd do it this way, then you can access it with the symbol and offset; i.e. "fltCoordValue+0" to read the X coord. value.

riverwest · Newbie cheater Reputation: 0 Joined: 05 May 2019 Posts: 14

TheyCallMeTim13 · Posted: Fri May 10, 2019 1:00 pm Post subject:

Yeah, the "ptrCoordBase" should've been removed. I tend to store the address, but I didn't know if it was x64 or x32 to store the address properly.

riverwest · Newbie cheater Reputation: 0 Joined: 05 May 2019 Posts: 14

Got it. You are using align because you don't know how large the addresses are, so you create a space of memory separated by "CC"'s so that you'll know what the values are and will be able to properly allocate memory accordingly to hold these values.

I'm going to try and pull these values out tonight. My goal is to write something that can propel me in the air - but I eventually want to write something that will let me teleport.