 |
Cheat Engine The Official Site of Cheat Engine
|
| View previous topic :: View next topic |
| Author |
Message |
maxhat Newbie cheater
Reputation: 0
Joined: 10 Apr 2012 Posts: 24
|
Posted: Tue Oct 18, 2022 4:01 am Post subject: [HELP] CE Hangs on AoB inject... |
|
|
I am having an issue were ce is hanging and then never finds the location, the catch is, if I manually aobscan my self I can find the location is to be injected...
| Code: |
//usemono()
[ENABLE]
aobscan(MyCharV_Table,83 3E 00 48 8B 48 10) // should be unique
alloc(newmem,$1000,MyCharV_Table)
alloc(vTableVar001,8,MyCharV_Table)
alloc(vTableVar002,8,MyCharV_Table)
label(vTbl_C)
label(vTbl_r)
vTableVar001:
dd 0
vTableVar002:
dd 0
newmem:
// =============================================================================
cmp dword ptr [rsi+16c],#171 // This should be localplayer's entityID
jne vTbl_C
// =============================================================================
cmp dword ptr [rsi+288],#01 // This should be 1 for Player; 2 for zombo, & etc...
jne vTbl_C
//xorps xmm10,xmm10 // setup our disposable register
//xorps xmm11,xmm11
//xorps xmm12,xmm12
//movss xmm10,[] // copy custom_var to xmm10 reg
//movss xmm11,[] // copy custom_var2 to xmm11 reg
// ****** Get_Current_EntityObjectBase ***************************************
mov [vTableVar001],rsi // Setting up a way to get LocalEntityPlayer
vTbl_C:
cmp dword ptr [rsi],00
mov rcx,[rax+10]
jmp vTbl_r
MyCharV_Table:
jmp newmem
nop 2
vTbl_r:
registersymbol(vTableVar001) // to record base
registersymbol(vTableVar002) // to record health
registersymbol(MyCharV_Table)
[DISABLE]
MyCharV_Table:
db 83 3E 00 48 8B 48 10
unregistersymbol(MyCharV_Table)
unregistersymbol(vTableVar002)
unregistersymbol(vTableVar001)
dealloc(vTableVar002)
dealloc(vTableVar001)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: 2557A520532
2557A520518: 00 00 - add [rax],al
2557A52051A: 00 00 - add [rax],al
2557A52051C: 00 00 - add [rax],al
2557A52051E: 00 00 - add [rax],al
2557A520520: 55 - push rbp
2557A520521: 48 8B EC - mov rbp,rsp
2557A520524: 48 83 EC 30 - sub rsp,30
2557A520528: 48 89 75 F8 - mov [rbp-08],rsi
2557A52052C: 48 8B F1 - mov rsi,rcx
2557A52052F: 48 8B C6 - mov rax,rsi
// ---------- INJECTING HERE ----------
2557A520532: 83 3E 00 - cmp dword ptr [rsi],00
// ---------- DONE INJECTING ----------
2557A520535: 48 8B 48 10 - mov rcx,[rax+10]
2557A520539: 33 D2 - xor edx,edx
2557A52053B: 66 66 90 - nop 3
2557A52053E: 49 BB 70 D3 0B D7 54 02 00 00 - mov r11,00000254D70BD370
2557A520548: 41 FF D3 - call r11
2557A52054B: 48 0F B6 C0 - movzx rax,al
2557A52054F: 48 8B 75 F8 - mov rsi,[rbp-08]
2557A520553: 48 8D 65 00 - lea rsp,[rbp+00]
2557A520557: 5D - pop rbp
2557A520558: C3 - ret
}
|
This is what I have so far. If I gut everything out and strip it down just to where I can place a User Symbol (label) on the Injection point, it activates.... however it does not activate if add any bit of code to it neither will it activate with just the "original code"
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 473
Joined: 09 May 2003 Posts: 25918 Location: The netherlands
|
Posted: Tue Oct 18, 2022 5:17 am Post subject: |
|
|
rightclick the record (or execute it inside an AA script) and look at what the error is
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
maxhat Newbie cheater
Reputation: 0
Joined: 10 Apr 2012 Posts: 24
|
Posted: Tue Oct 18, 2022 9:44 am Post subject: Genius, Thank you DB |
|
|
On the script from OP no unique AoB could be found, which is ok, I have like 3 other places I can get the vTable/ GameObject from....
Thanks hugely @Dark Byte.
|
|
| Back to top |
|
 |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
|