Cheat Engine

[SS 4K]

hi everyone

i know how to do normal Injection Copies , but some opcode is so difficult for me

im using emulator and dealing with crc32 , i just need the address on the opcode, i can do it manually to get the address by find what accesses
but i need fast way to get the address like Injection Copies
code:

crc32 r10d,[rdi+rax]



also see the image below for more info

AOBscan
[code]
[ENABLE]

aobscan(test,44 0F 38 F1 14 07 48 C7 46 78 00 00 01 82 48 8B 9E 18 01 00 00 48 81 C3 30) // should be unique
alloc(newmem,$1000,A0931B42)

label(code)
label(return)

newmem:

code:

crc32 r10d,[rdi+rax]
jmp return

test:
jmp newmem
nop
return:
registersymbol(test)

[DISABLE]

test:
db 44 0F 38 F1 14 07

unregistersymbol(test)
dealloc(newmem)

[/code]


thank for your help

[OldCheatEngineUser]

add my_address to address list, and view as hex.

[SS 4K]

[quote="OldCheatEngineUser"]add my_address to address list, and view as hex.

[code]// enable section
registersymbol(my_address)
alloc(my_address,08)

newmem:
mov [my_address],rax
or [my_address],rdi



// disable section
dealloc(my_address)
unregistersymbol(my_address)[/code][/quote]

thank you for your response OldCheatEngineUser

but you code only give me the address of RAX

see the image below for more info

[TheyCallMeTim13]

[SS 4K]

[quote="TheyCallMeTim13"][/quote]

thank you Tim

still only RAX address appear B0649AB0

i want to be like this 2B0649AB0

(200000000) is RDI address

[TheyCallMeTim13]

You'll need to debug the code if that's not working. LEA in this case will add the two registries and store that in RCX, so if that doesn't work RDI or RAX may not be what you think it is. That or you're looking at it as a 32 bit address, which you're doing in the picture you posted. Set the value type to 8 bytes to see all 64 bits.

After you enable that, run this in the Lua Engine window:

[SS 4K]

[quote="TheyCallMeTim13"]You'll need to debug the code if that's not working. LEA in this case will add the two registries and store that in RCX, so if that doesn't work RDI or RAX may not be what you think it is. That or you're looking at it as a 32 bit address, which you're doing in the picture you posted. Set the value type to 8 bytes to see all 64 bits.

After you enable that, run this in the Lua Engine window:
[code]print(string.format("%X", getAddress("[myPointer]")))[/code][/quote]

wow it work thank you so much

Setting the value type to 8 give both address
also Execute the LUA code

but i need you to see image below one last time

[OldCheatEngineUser]

[TheyCallMeTim13]

Either make it a pointer with an offset of 0, or use the address like the lua code an put it inside brackets [ ].

[SS 4K]

[quote="OldCheatEngineUser"][/quote]



yeah thats my fault bro , i did what you sad but i didn't realize that i need to choose 8-byte instead of 4-byte

i just test you code work Perfect

thank you

[SS 4K]

[quote="TheyCallMeTim13"]Either make it a pointer with an offset of 0, or use the address like the lua code an put it inside brackets [ ].[/quote]

thanks Tim

everything working now