Cheat Engine

[idk31]

Hey. I used the injection template. Now I have 7 possible scripts! All seem to work. Is one better than another? Or, can I use any one of them? One of them looks odd as it has part of the exe. Should I toss it?

code:
mov [_camera],edi
test eax,eax
je LifeIsStrange.GetStackOwnerClass+310A68
cmp dword ptr [edi+00000274],00
jmp return

[ParkourPenguin]

Pick any of them. Assuming the AoB signature is unique, it doesn't really matter as long as no dynamically calculated addresses are in the signature.

[idk31]

I'm just about there. Got injection working. Seems to be working pretty steadily. I'm pretty happy with it Can't wait to actually sit down and actually play with it rather than test.

drive.google(.)com/file/d/0Bz1PTpaR0llTcmg5MUlrSnFXN0U/view?usp=sharing

[idk31]

I searched but didn't find an answer. Can I set my hotkeys to only work when the game has focus? I would prefer nothing to happen while I'm alt tabbed. Since I'm using this to set up a screenshot in game, I have all kinds of hotkeys bound. But sometimes I need to leave the game and come back to find out the camera has moved. I have a lot of keys to bind. I'm trying to avoid commonly used keys but it's getting unavoidable.

[ParkourPenguin]

You might be able to check to see if the values returned by getForegroundProcess() and getOpenedProcessID() are equal in your onHotkey function of the hotkey.

You can combine up to 5 keys in a single hotkey... it shouldn't be that hard to pick something you won't hit. Just pick a really hard combination to hit at once like Ctrl + Shift + \ + OtherKey.

[idk31]

Parkour, your save-cam-locations script didn't work. When I try to save a position, all my addresses go to 00000000. I know very little programming and even less of LUA so, when you first posted it, it was WAY over my head. I blew right by it. But now, I'm trying to learn LUA for a free-fly cam script. I thought I would use your script as a starting point to learn.

I'm confused why you have "for i=0,9,1 do..." when there are 8 entries in the hash. Then, there is "for j=1,8,1 do..." Does that part not need to start at 0 and go to 7? Also you have "createHotkey(get, _G["VK_" .. i], VK_SHIFT)". Aren't the number keys VK_KEY_[num 0-9]? Not VK_[num]?

I'm really stumped about the free-fly cam where to start. I took a look at www(.)cheatengine(.)org/forum/viewtopic.php?p=5645347 but didn't get anywhere. I'd really like to get this working because while playing with the cam it only moves along the world axes and I keep getting confused where I am. I want it to move forward where it's pointed.

There are no cos or sin values. I'd have to calculate them. All I have is yaw 0 to 65536 = one turn and pitch -16384 to 16384. And of course x,y,z. In that script I think you posted about an LUA script? But I didn't see a link. Do you know of any other examples?

P.S. Can you use a free Steam code for this game? I have one. I appreciate all the help you've given.


EDIT: Actually.......it worked perfectly. Sorry . I modified the script to use VK_NEXT and VK_DELETE since shift and control are already used in-game. It seemed like an innocent change, but that caused all kinds of problems. And I realize "Delete" was a hotkey bound to the POST PROCESSING script but I erased that hotkey. Anyway, I changed the in-game keys to something else and kept it as you had this time and it worked! Also, I understand now that "for i=0,9,1 do" pertain to the number keys and "for j=1,8,1 do," the hash indexes. And now having actually read the Cheat Engine VK documentation see that you were correct about the VK number keys. Another website said it was VK_KEY_[num].

[ParkourPenguin]

The outer for i=0,9,1 do... loop is to assign all the 0-9 keys. I started it at 0 and ended it at 9 just because that seemed like the most straightforward thing to do.

Inside that for loop, I create functions that are called when you press a hotkey. There's a "set" function and a "get" function. The "set" hotkey is only defined for all numbers except 0. This is because I wanted 0 to always be the last camera position you jumped from just so that you could jump back if you needed to, hence you shouldn't have to set that manually.

Inside those functions, there is another for j=1,8,1 do... loop. In the set function, this gets the current values of all the addresses and stores them. In the get function, it first checks to see if it's already stored the values in that specific slot. If it hasn't, then it'll just return since there's nothing to load. If it has, then it will store the current values of the addresses into slot 0 as long as you're not loading from slot 0. After that, it loads the bytes from your backup back into memory.

Note that you could also use readFloat(...) and writeFloat(...) to store the backup, but I figured it might have been possible for the numbers to not perfectly match up after saving and restoring the backup. Reading and writing the bytes directly would prevent any loss of information between saving/loading the values. If there was a loss in using read/writeFloat, it probably would've been negligible anyways, but whatever.

The reason why the outer for loop starts at 0 is because I thought that just made the most sense. The inner for loops start at 1 because that's how arrays are suppose to work in Lua. When you have a table like this:

[idk31]

Here's a really ugly script I made in my attempt. Of course, it doesn't work. I can't figure out how to get the 4-byte decimals into float radians. I tried readInteger as well as readBytes. Didn't bother with the z-axis yet. I'm stumped. I searched and search for a similar problem. And I've come to understand this is a very common way for UE games to store pitch and yaw like this. So, why can't I find anything? :/.

[ParkourPenguin]

You won't even need to worry about this in this case, but I'll explain how to read a word anyways.
There is readInteger(...), but since that'll read 4 bytes, it's not the best solution. You can manually convert 2 bytes into a word by adding the first byte to the second byte multiplied by 256:

[idk31]

Got it working! In fact...more than that. I got Z figured out as well and have implemented a free-fly cam and orbital cam. I figured out a dolly zoom too which I'm pretty proud of. Code is pretty messy but will clean it up and post. It's so awesome, thanks!

P.S. Should have realized that about yaw. :p

[idk31]

Here's what I came up with and it works. Did I do anything too funky? I'm not quite sure I understand what syntaxcheck and symbolCheckT do but I left it in.

[ParkourPenguin]

I'm a bit tired right now, so please forgive me if I say something wrong, explain something ineptly, or generally miss something.

syntaxcheck is a boolean variable set by CE to tell your script if it's just running the code to make sure there aren't any major errors in it or something. I was pretty certain there weren't any major errors in mine and I didn't want to be bothered by it when writing the script, so I added that line of code to make the Lua script not run if it's only doing a syntaxcheck. It's not that important in this case, but it's been a pain for me in other scripts.

symbolCheckT is a timer I made to check when the symbol is valid. When it is, run the code, then destroy the timer (the "sender.destroy()" line of code at the end).

[idk31]

Good tips. So, [Enable] doesn't activate the lua code? It kinda exists all on its own? I added a "base (address) == nil" check even though it checks for base == 0. Otherwise, the lua debugger still had a fit when I activated it and there was no symbol found. As to the pitch thing yeah I do need it that way: if pitch<=pitchMax and pitch>-pitchMax...I need a floor and a ceiling to that value. The game doesn't handle a 90 degree pitch up very well.

Edit: v.DelayBetweenActivate = i == 25 and 1000 or 10, didn't work forme.

[ParkourPenguin]

Everything below [ENABLE] and above [DISABLE] is run when you check the checkbox next to the script in the cheat table, including any Lua scripts inside it. The reason that timer exists is because the game needs to execute that section of ASM in order for the "_camera" symbol to be populated. It's already been globally allocated, so its value is 0 by default. That's why I'm reading it and comparing it with 0. If it is 0, then that section of ASM hasn't been run, and trying to dereference that is going to raise a segfault, crashing the game. Once that section of ASM is run, however, its value will be some valid address (not 0), so you can then safely run your Lua code without any fear of that symbol causing a segfault.

Also, it's never going to be nil unless that symbol doesn't exist. Since it has been globally allocated, it's never going to be nil, and that check is pointless. I'm not sure why it would be giving you an error, unless you had a typo somewhere. I thought that maybe CE was starting the timer before it globally allocated that variable, but 50ms is a huge amount of time for a computer and should be more than enough for CE to allocate the memory and register it as a symbol.

I just had a thought- if the script is deactivated before the symbol could be populated, it would run indefinitely. There are a few ways you could solve this. The most "correct" one IMO would be to check if the script is deactivated using the AddressList and MemoryRecord classes, and if it is, destroy the timer. You could also just set it as a global variable and destroy it in the disable section if you want, but I like using as few global things as possible.

[idk31]

Well, you were right (again) . That code, v.DelayBetweenActivate = i == 25 and 1000 or 10, does work. I probably just broke my script elsewhere.

Here's the full table for anyone interested.
https://drive.google(.)com/file/d/0Bz1PTpaR0llTSVU0YzhWSU1IN1E/view?usp=sharing

Updated script: