Cheat Engine

JsuisTonPere · Posted: Mon Jun 27, 2016 9:01 am Post subject: Script help

Hello i want to create script with cheat engine and i know how to find static adress but i dont know how to create this script (watch the attachement) im not very good in english can you make a tutorial for me pls thanks (i want to create an unlimited items for H2S)
Thanks

hhhuut · Posted: Mon Jun 27, 2016 9:38 am Post subject:

So you want to do an unlimited item cheat, but what exactly are we supposed to show you with this script?

If eax holds the value of your current item, then "mov eax,63" sets that value to 99 which is already the cheat you wanted ...

JsuisTonPere · Posted: Mon Jun 27, 2016 11:01 am Post subject:

M-Z · Posted: Mon Jun 27, 2016 11:18 am Post subject:

I must say, I don't know where CE is taking this address from.
Your problem probably lies in fact that the instruction you are watching is moving value from address pointed by EAX to EAX itself, hence overwriting address in this register.
Perhaps you should try setting normal breakpoint on this instruction and then use EAX value from before this instruction is executed?

hhhuut · Posted: Mon Jun 27, 2016 11:23 am Post subject:

The address is correct, because he has that in his cheat list.

Have you tried CE's pointerscanner (rightclick on the address and click pointerscan for this address) ?

JsuisTonPere · Posted: Mon Jun 27, 2016 11:36 am Post subject:

M-Z · Posted: Mon Jun 27, 2016 11:43 am Post subject:

@hhhuut you are right; what was I thinking.
But I've got another idea. This eax,[eax+4] comes after function call. So it is probably calculated inside this function and is not stored anywhere.

JsuisTonPere · Posted: Mon Jun 27, 2016 11:51 am Post subject:

M-Z · Posted: Mon Jun 27, 2016 12:25 pm Post subject:

Instruction you are watching is just after call (function) instruction. It is customary for return values from functions to be held in EAX. If this is the case then base address you are looking for is burried in this function call. Hence the "base" pointer you find is not stored anywhere (or it is stored for a very short period of time).

Perhaps you should look into this movq xmm0,[eax] instruction. Instructions leading to it could possibly load proper address to EAX and maybe it'll be easier to find the base address.

PS. Your posts look like Google-translated. If you do not understand English at least a bit, I'm afraid this conversation is not going to end well...

JsuisTonPere · Posted: Mon Jun 27, 2016 12:28 pm Post subject: