Cheat Engine

[Kajih]

I found a bit of code from another table and I am trying to understand how to read the part where its getting the address, however I ran into a problem where i am getting this error when attempting to add it to my table:

[ParkourPenguin]

This is probably a bug in CE.

CE may give an error when it tries to save the script to the address list, but when the script is enabled, it runs perfectly fine. Assign an empty script with only [ENABLE] / [DISABLE] tags to the address list first, then edit that. CE will still complain, but it will at least let you save it to the address list anyway.


To explain: that `lea` instruction is using an RIP-relative addressing mode. The signed 4-byte integer 0x02ED4F4D (aob `4D 4F ED 02`) is added to RIP (address of next instruction) to calculate the final address.

The symbol `aobResourceHook` is the address of the `lea` instruction. The address of the next instruction would be `aobResourceHook+7`. To add the 4-byte integer, you need to read the dword (4 bytes) at `aobResourceHook+3`: that's what the (DWORD) and square brackets are for.

It's weird the author used `+03+04` instead of simply `+7`.
I also wouldn't include the relative displacement in the aob signature (i.e. I'd use `48 8D 0D ?? ?? ?? ?? ...`, plus extra bytes to ensure it's unique)- that is less likely to break on a game update.

[Kajih]

ohhh ok, gotcha. Perfect explanation, I was a little confused because of the '+03+04' and will test with '+07' to see if I get the same address.

Thanks!