FearLess Cheat Engine

Tested 7.5 Pre release. It appears to be working now.
Million thanks to you Eric!

In this game there is a thread that's running RaiseException very often. So it's and old thread.

I dug even deeper, couldn't help myself. I'm even more inclined to believe that there is a problem somewhere in the veh debugger. The correct handler fails to run because of this code: vehdebug-x86_64.UnloadVEH+2F8 - 48 81 B8 10200000 02000100 - cmp qword ptr [rax+00002010],00010002 { 65538 } vehdeb...

I have narrowed down the problem. lnside function RtlRaiseException there is a call to RtlRestoreContext+650. For whatever reason the RRC+650 sometimes (I don't know how long Eric ran his trial) skips the correct exception handler on VEH which results in wrong code execution. Assigning SW or HW brea...

In that case, I've probably interpreted the flow of code incorrectly. Hard to say for sure, I have no idea how to debug exceptions. That is exactly the function I see being called. x64dbg has no issue with it but with Cheat engine the program crashes. I was so sure that it was Cheat engine swallowin...

Hey,

I have found that you can detect veh debugger by raising exception with flag 0x4001000A. I could not find a way to ignore exceptions. Is it not possible?

Okay, will try to write a bit clearer. And yes, exactly. You can reference [newmem+8] if in this case newmem is either a symbol or a local label. You did the CE tutorial, right? So you'll know of addr. like "Tutorial-x86_64.exe"+2265CE . Always think of it as address+offset (if you handle a pointer...

Just there is no second allocation included!? And there is the thing that will not work when you do jumps across (virtual) terabytes, and try mov [faraddr],reg, but instead recommending to use a value in the script. Also there is the hint to not use an extra value to register (but newmem+8). Btw. I...

EDIT: If you don't want multiple registers (which btw. is no problem, may except you rly change the addr on highly frequently called instructions) you could also do 2 scripts. 1st you set the value and register (before the loop). 2nd you add the code you want to add. (f.e. you could also add the pt...

Okay, the last script is working after all. I guess along the way I had managed to save Userdefined symbols and those were messing with the enabling. Now the question is how do I allocate the memory only once for that address I need? The code I have tried is below. New parts have been marked with "-...

You can right click the script in the address list to see the error message. And doing it this way you'll have to use 14 byte jumps and restore 14 byte when disabling. But at this point I'm really wondering, why do you need to inject in some many places like this? So, it's looks like to me that the...

I tried this code: {$lua} if syntaxcheck then return end [ENABLE] local mem = allocateMemory(0x1000) local scan = AOBScan("F3 0F 10 BF 94 03 00 00") local resultCount = scan.Count local script = [[ label(return) newmem: movss xmm7,[rdi+00000394] movaps xmm6,xmm7 movzx ebp,byte ptr [rcx+00000176] jmp...

Okay, thanks for the info. Value was supposed to be allocated only once. Now that you point it out, that's obvious. I tried to do it in Lua but I wasn't successful and moved it to asm which was a mistake with the contradictory label. I use the value as an address so I need to registersymbol it. All ...

Hello, So I want to inject multiple places and since I only found info about it in LUA, I decided to try. I attempted to piece this code together from multiple (sort of similar) examples but it doesn't work. I have no prior experience with LUA so hopefully some of you can point out what's wrong with...

Hello Hitman players! I think it's fun that you can slow down time while aiming with a sniper but that got me thinking, it would be even better if this was true with all the guns. So I made this script which does just that. It doesn't slow down aiming so it's a bit overpowered but it's good fun. In ...