18
"Find+Register GEngine"
Auto Assembler Script
[ENABLE]
{$lua}
if not syntaxcheck then
local function findGEngine()
local patterns = {
{"48 8B 0D ?? ?? ?? ?? 48 85 C9 74", 3, 7},
{"48 8B 05 ?? ?? ?? ?? 48 8B 88 ?? ?? ?? ??", 3, 7},
{"48 8B 0D ?? ?? ?? ?? 48 8B 01 FF", 3, 7},
{"48 89 0D ?? ?? ?? ?? 48 85 C9", 3, 7},
{"48 8B 05 ?? ?? ?? ?? 48 85 C0 74", 3, 7},
{"48 8B 0D ?? ?? ?? ?? 4C 8B 01", 3, 7},
{"4C 8B 05 ?? ?? ?? ?? 4C 85 C0", 3, 7},
{"48 8B 15 ?? ?? ?? ?? 48 85 D2 74", 3, 7},
}
print("Scanning for GEngine...")
for i, patternData in ipairs(patterns) do
local pattern = patternData[1]
local offsetPos = patternData[2]
local instrLen = patternData[3]
local result = AOBScan(pattern)
if result and result.Count > 0 then
print(string.format("Pattern %d: %d matches", i, result.Count))
-- Check first 3 results
local maxCheck = math.min(result.Count, 3)
for j = 0, maxCheck - 1 do
local success, err = pcall(function()
-- Get address as STRING first
local instructionAddrStr = result.getString(j)
-- Convert to NUMBER
local instructionAddr = getAddress(instructionAddrStr)
print(string.format(" Result %d: Instruction at %X", j, instructionAddr))
local offsetAddr = instructionAddr + offsetPos
local ripOffset = readInteger(offsetAddr)
print(string.format(" RIP offset: %X", ripOffset))
local gEngineAddr = instructionAddr + instrLen + ripOffset
print(string.format(" GEngine candidate: %X", gEngineAddr))
-- Validate pointer
local enginePtr = readPointer(gEngineAddr)
if enginePtr ~= nil and enginePtr ~= 0 then
print(string.format(" ✓ Valid! Points to: %X", enginePtr))
registerSymbol("GEngine", gEngineAddr, true)
print("==========================================")
print(string.format("✓ GEngine registered at: %X", gEngineAddr))
print("==========================================")
return true
else
print(" ✗ Null/invalid pointer")
end
end)
if not success then
print(string.format(" Error: %s", err))
elseif err == true then
result.destroy()
return true
end
end
result.destroy()
end
end
print("==========================================")
print("✗ GEngine not found!")
print("==========================================")
return false
end
findGEngine()
end
{$asm}
[DISABLE]
{$lua}
if not syntaxcheck then
if getAddress("GEngine") then
unregisterSymbol("GEngine")
print("GEngine unregistered")
end
end
{$asm}
16
"Movement Mode (1,3,5)"
0
Byte
GEngine
1A4
320
2D0
30
0
38
1B8
78
9B8
17
"Clipping (203 for clip, 75 for noclip)"
0
Byte
GEngine
5C
2D0
30
0
38
1B8
78
9B8
21
"Character Time Dilation"
0
Float
GEngine
064
2D0
30
0
38
1B8
78
9B8
0
"Health"
0
Double
GEngine
920
2D0
30
0
38
1B8
78
9B8
5
"Shield"
0
Double
GEngine
EC8
2D0
30
0
38
1B8
78
9B8
1
"Godmode"
0
Byte
GEngine
C40
2D0
30
0
38
1B8
78
9B8
6
"playerVolts (special ammo)"
0
4 Bytes
GEngine
F30
2D0
30
0
38
1B8
78
9B8
22
"overHeatAR"
0
Double
GEngine
420
1B8
78
9B8
23
"overheatSniper"
0
Double
GEngine
428
1B8
78
9B8
24
"overheatRocketLauncher"
0
Double
GEngine
430
1B8
78
9B8
25
"overheatMinigun"
0
Double
GEngine
438
1B8
78
9B8
20
"AimAssistStrength"
0
Double
GEngine
F40
2D0
30
0
38
1B8
78
9B8
2
"infiniteJump+Dash"
0
Byte
GEngine
C41
2D0
30
0
38
1B8
78
9B8
15
"jumpCount (inf jump backup)"
0
4 Bytes
GEngine
784
2D0
30
0
38
1B8
78
9B8
14
"DamageMultiplier (either self or useless)"
0
Double
GEngine
928
2D0
30
0
38
1B8
78
9B8
7
"meleeCombo"
0
4 Bytes
GEngine
F6C
2D0
30
0
38
1B8
78
9B8
11
"canSkipCinematic"
0
Byte
GEngine
AF8
2D0
30
0
38
1B8
78
9B8
12
"isRollOnCooldown (useless?)"
0
Byte
GEngine
A71
2D0
30
0
38
1B8
78
9B8
13
"S_Energy (useless?)"
0
Double
GEngine
A40
2D0
30
0
38
1B8
78
9B8
27
"Savegame Manip"
1
29
"saveID"
0
4 Bytes
GEngine
28
350
1B8
78
9B8
30
"Difficulty"
0
4 Bytes
GEngine
40
350
1B8
78
9B8
31
"Selected Skill Tree"
0
4 Bytes
GEngine
70
350
1B8
78
9B8
32
"Shop Unlocked: Akimbos"
0
4 Bytes
GEngine
8C
350
1B8
78
9B8
33
"Shop Unlocked: Acid"
0
4 Bytes
GEngine
90
350
1B8
78
9B8
34
"Shop Unlocked: Lazer"
0
4 Bytes
GEngine
94
350
1B8
78
9B8
35
"Shop Unlocked: Nano"
0
4 Bytes
GEngine
98
350
1B8
78
9B8
26
"Botcoins"
0
4 Bytes
GEngine
06C
350
1B8
78
9B8
28
"Volts (still dk what these are)"
0
4 Bytes
GEngine
68
350
1B8
78
9B8
40
"wallhack (idk if this shi works)"
1
41
"timeLeft"
0
Double
GEngine
2D0
C48
200
2D0
30
0
38
1B8
78
9B8
42
"isShow"
0
Byte
GEngine
2CC
C48
200
2D0
30
0
38
1B8
78
9B8
43
"bEnabled/bUnbound"
0
Byte
GEngine
99C
298
C48
200
2D0
30
0
38
1B8
78
9B8