Cheat Engine

[Brookthesoul]

hi, can anyone help me with changing register like RAX and CF flag like in the picture using Lua? i used to do it manually

open memory viewer->go to address->right click->Change register at this location->check the "Use DBVM Cloaked BP's" and change the register of RAX(or others) and set flag CF(PF or others)->click ok button.

and the address will highlight with green like breakpoint is set and the bytes changes to green.

i open the CE help-> Lua documentation and found few line of code i think like

dbvm_cloak_activate(physicalbase, virtualbase OPTIONAL):

dbvm_cloak_deactivate(physicalbase):

dbvm_cloak_readOriginal(physicalbase):

dbvm_cloak_writeOriginal(physicalbase, bytetable[4096]):

dbvm_changeregonbp(physicaladdress, changereginfo, virtualaddress OPTIONAL): boolean
sets a breakpoint at the given position. When a breakpoint hits the registers will be changed according to the changereginfo table
changereginfo table: (set the field to nil, or don't define it, if you don't want to change it)
newCF: integer/boolean (false=0, true=1)
newPF: integer/boolean (false=0, true=1)
newAF: integer/boolean (false=0, true=1)
newZF: integer/boolean (false=0, true=1)
newSF: integer/boolean (false=0, true=1)
newOF: integer/boolean (false=0, true=1)
newRAX: integer
newRBX: integer
newRCX: integer
newRDX: integer
newRSI: integer
newRDI: integer
newRBP: integer
newRSP: integer
newRIP: integer
newR8: integer
newR9: integer
newR10: integer
newR11: integer
newR12: integer
newR13: integer
newR14: integer
newR15: integer

dbvm_removechangeregonbp(physicaladdress) : Disables the changeregonbp breakpoint


i dont know how to apply it or use it.
whre can i find this physicalbase and physicaladdress
can anyone help me code this so i can active and deactivate by the cheat table please.

[Dark Byte]

go to the address in the hexview part and it'll show you the physical address (or use dbk_getPhysicalAddress(address))


then
dbvm_changeregonbp(physicalAddress, {newRCX=300, newCF=1})

or if you want to show the region is cloaked:
dbvm_changeregonbp(physicalAddress, {newRCX=300, newCF=1}, virtualAddress)

virtualAddress would be something like the address of notepad.exe+7

[Brookthesoul]

[Dark Byte]

hexadecimal numbers start with 0x

also you need to use getAddress to get the address of notepad.exe+7

[Brookthesoul]