Cheat Engine

ChemicallyNerd · How do I cheat? Reputation: 0 Joined: 05 Jul 2015 Posts: 9

mov [esi+edi*4+08],ebx

ESI:16BBC9E0
EDI:00000000
EBX:00084000

is the offset 08 or 4+08 or what?

Sorry if this is a stupid question.
___________________________________________________________

Dark Byte wrote:
0*4+8=8

I thought so but I am unable to find any kind of pointer for this adress, manual and pointer scanner.
Is there any other way?

Dark Byte · Posted: Fri Jul 10, 2015 7:57 am Post subject:

0*4+8=8

ChemicallyNerd · How do I cheat? Reputation: 0 Joined: 05 Jul 2015 Posts: 9

vng21092 · Posted: Fri Jul 10, 2015 2:31 pm Post subject:

screw pointers, code injection, with something like [esi+edi*4+8], it has to be some sort of array, maybe some kind of inventory or something I'm assuming, something with "slots". Therefore, [esi+8] would be the first item in the array, find some way to reference the first slot, and from there you could reference anything else in that array.

Rydian · Posted: Fri Jul 10, 2015 2:44 pm Post subject:

http://forum.cheatengine.org/viewtopic.php?t=570083
I and many others stopped giving a shit about pointers a while ago.

Otherwise increase the max offset for the pointer scan.

ChemicallyNerd · How do I cheat? Reputation: 0 Joined: 05 Jul 2015 Posts: 9

Zanzer · Posted: Sat Jul 11, 2015 10:17 am Post subject:

Post the AOB Injection Template for the code which retrieves your value.
Give us the value of the offset register when it accesses your specific address.
In your example, EDI is 0. Simple enough.

If I were to hazard a guess, I would say each value of EDI corresponds to a different stat.
0 being speed, possibly 1 being dex, etc.
The value of ESI possibly corresponds to the buff structure.

The only problem with the injection approach is this code likely effects all buffs.
May be difficult if you only want it to work on one specific buff.

ChemicallyNerd · How do I cheat? Reputation: 0 Joined: 05 Jul 2015 Posts: 9

AoB inject template:

Zanzer · Posted: Sat Jul 11, 2015 11:03 am Post subject:

See if the following script works.
After it is activated, manually add an address to your table.
Set the address as: [Buff_ptr]+8

ChemicallyNerd · How do I cheat? Reputation: 0 Joined: 05 Jul 2015 Posts: 9

Zanzer · Posted: Sun Jul 12, 2015 9:17 am Post subject:

Oh that was my fault. For some reason I thought I could save the JMP instruction that way. Smile

Do me a favor and follow that JMP command after the instruction you hooked.
Show me the AOB Injection template for that location instead.

ChemicallyNerd · How do I cheat? Reputation: 0 Joined: 05 Jul 2015 Posts: 9

Zanzer · Posted: Sun Jul 12, 2015 11:45 am Post subject:

Okay, lets see if this works.

ChemicallyNerd · How do I cheat? Reputation: 0 Joined: 05 Jul 2015 Posts: 9

I get an address but not the one desired and also the address changes every once and a while, from what I can tell the value of the address does not seem the have any relation with the buff system.
Also I am guessing that the address is changing because it is the addresses using the instruction (I am I correct?) so is it possible to have an hotkey (special ability button) to filter the addresses using the institution with the value of the buff (540672= value of SPD and DEX buff if you need it, 0 = when no statis effect is present) so that you could find the buff value?

Also how do I leave a review and give you rep? Sorry if it obvious I don't see a button anywhere.

Zanzer · Posted: Sun Jul 12, 2015 3:17 pm Post subject:

According to the first instruction, EBX is written to the address, so it should contain the #540672 value.
This update will only update the pointer if the value matches the address "buff_find" (default: #540672).
You can add "buff_find" to your table as well to change it on the fly if needed.
Once you have posted enough you will see a little upvote icon next to the reputation total.