|
Cheat Engine The Official Site of Cheat Engine
|
View previous topic :: View next topic |
Author |
Message |
LykanthricAura Advanced Cheater Reputation: 0
Joined: 17 May 2010 Posts: 58 Location: India
|
Posted: Tue Oct 15, 2019 7:06 am Post subject: This script doesn't turn on... |
|
|
I am new to the whole.. x64 instruction. And I know this is a shitty logic. But I thought it would AT LEAST work. If not in the more eloquent way.
But It won't even enable.. so I am questioning the very instructions.
Help please?
Code: | [ENABLE]
alloc(codecave,1000)
label(orig)
label(return)
label(_check)
label(_value)
registersymbol(codecave)
registersymbol(_check)
registersymbol(_value)
_check:
dd 0
_value:
dd 190.0
B8EC0334:
db 90 90 90
jmp codecave
//movss [rsi+000000C0],xmm5
return:
codecave:
ptest xmm5,[_check]
jnz orig
addsd xmm5,[_value]
orig:
movss [rsi+000000C0],xmm5
jmp return
[DISABLE]
B8EC0334:
db F3 0F 11 AE C0 00 00 00 //movss [rsi+000000C0],xmm5
dealloc(codecave)
unregistersymbol(_check)
unregistersymbol(_value)
unregistersymbol(codecave)
{
// ORIGINAL CODE - INJECTION POINT: B8EC0334
//B8EC0306 - F3 0F10 86 C0000000 - movss xmm0,[rsi+000000C0]
//B8EC030E - F3 0F5A C0 - cvtss2sd xmm0,xmm0
B8EC0312 - F3 0F10 4D B4 - movss xmm1,[rbp-4C]
B8EC0317 - F3 0F5A C9 - cvtss2sd xmm1,xmm1
B8EC031B - 66 0F2F C8 - comisd xmm1,xmm0
B8EC031F - 7A 06 - jp B8EC0327
B8EC0321 - 0F84 61000000 - je B8EC0388
B8EC0327 - F3 0F10 45 B4 - movss xmm0,[rbp-4C]
B8EC032C - F3 0F5A C0 - cvtss2sd xmm0,xmm0
B8EC0330 - F2 0F5A E8 - cvtsd2ss xmm5,xmm0
=======================================================================
//B8EC0334 - F3 0F11 AE C0000000 - movss [rsi+000000C0],xmm5
========================================================================
//B8EC033B - 48 8B 46 40 - mov rax,[rsi+40]
//B8EC033D - 48 89 45 A0 - mov [rbp-60],rax
//B8EC0344 - F3 0F10 45 B4 - movss xmm0,[rbp-4C]
//B8EC0349 - F3 0F5A C0 - cvtss2sd xmm0,xmm0
//B8EC034D - 48 63 56 68 - movsxd rdx,dword ptr [rsi+68]
//B8EC0351 - F2 0F5A C0 - cvtsd2ss xmm0,xmm0
//B8EC0355 - 48 83 EC 20 - sub rsp,20 { 32 }
//B8EC0359 - 49 BB 1007ECB800000000 - mov r11,00000000B8EC0710 //{ (-326416299) }
} |
|
|
Back to top |
|
|
ParkourPenguin I post too much Reputation: 140
Joined: 06 Jul 2014 Posts: 4299
|
Posted: Tue Oct 15, 2019 9:52 am Post subject: |
|
|
Code: | [ENABLE]
alloc(codecave,4096,B8EC0334) // allocate full page; specifies +-2GB region to allocate in
label(orig)
label(return)
label(_value)
registersymbol(codecave)
registersymbol(_value)
B8EC0334: // this address should be found by aobscan or referred to by name.dll+offset
jmp codecave // minor deficiency: put jmp before nops
db 90 90 90
return:
codecave:
ptest xmm5,xmm5 // ptest takes an xmm/m128 (maybe you're looking for ucomiss)
jnz orig // jumps if all packed values in xmm5 are 0; not just the first one
addss xmm5,[_value] // You define _value as a float; should be addss instead of addsd
orig:
movss [rsi+000000C0],xmm5
jmp return
// labels must be specified under an address
codecave+800:
_value:
dd (float)190.0 // I don't know if this makes any difference, but it's nice
[DISABLE]
B8EC0334:
db F3 0F 11 AE C0 00 00 00 //movss [rsi+000000C0],xmm5
dealloc(codecave)
unregistersymbol(_value)
unregistersymbol(codecave)
|
_________________
I don't know where I'm going, but I'll figure it out when I get there. |
|
Back to top |
|
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
|