<?xml version="1.0" encoding="utf-8"?>
<CheatTable CheatEngineTableVersion="46">
  <CheatEntries>
    <CheatEntry>
      <ID>42</ID>
      <Description>"Find + Register GEngine"</Description>
      <Options moHideChildren="1" moManualExpandCollapse="1"/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]
{$lua}
if not syntaxcheck then
  local function isValidPointer(addr)
    if not addr or addr == 0 then return false end
    if addr &lt; 0x10000 then return false end
    if addr % 8 ~= 0 then return false end
    return true
  end

  local function hasValidVTable(objectPtr)
    local success, vtable = pcall(readPointer, objectPtr)
    if not success or not isValidPointer(vtable) then
      return false
    end
    if vtable &lt; 0x100000000 or vtable &gt; 0x7FFFFFFFFFFF then
      return false
    end
    return true
  end

  local function validateGEngine(gEngineAddr)
    local enginePtr = readPointer(gEngineAddr)
    if not isValidPointer(enginePtr) or not hasValidVTable(enginePtr) then
      return false
    end

    for viewportOffset = 0x700, 0x900, 0x8 do
      local success1, viewportPtr = pcall(readPointer, enginePtr + viewportOffset)
      if success1 and isValidPointer(viewportPtr) and hasValidVTable(viewportPtr) then
        for worldOffset = 0x70, 0x100, 0x8 do
          local success2, worldPtr = pcall(readPointer, viewportPtr + worldOffset)
          if success2 and isValidPointer(worldPtr) and hasValidVTable(worldPtr) then
            for giOffset = 0x150, 0x200, 0x8 do
              local success3, giPtr = pcall(readPointer, worldPtr + giOffset)
              if success3 and isValidPointer(giPtr) and hasValidVTable(giPtr) then
                return true
              end
            end
          end
        end
      end
    end
    return false
  end

  local function findGEngine()
    local patterns = {
      {"48 8B 0D ?? ?? ?? ?? 48 85 C9 74", 3, 7},
      {"48 8B 05 ?? ?? ?? ?? 48 8B 88 ?? ?? ?? ??", 3, 7},
      {"48 8B 0D ?? ?? ?? ?? 48 8B 01 FF", 3, 7},
      {"48 89 0D ?? ?? ?? ?? 48 85 C9", 3, 7},
      {"48 8B 05 ?? ?? ?? ?? 48 85 C0 74", 3, 7},
      {"48 8B 0D ?? ?? ?? ?? 4C 8B 01", 3, 7},
      {"4C 8B 05 ?? ?? ?? ?? 4C 85 C0", 3, 7},
      {"48 8B 15 ?? ?? ?? ?? 48 85 D2 74", 3, 7},
    }

    print("Scanning for GEngine - collecting candidates...")

    local candidateCounts = {}

    for i, patternData in ipairs(patterns) do
      local pattern = patternData[1]
      local offsetPos = patternData[2]
      local instrLen = patternData[3]

      local result = AOBScan(pattern)

      if result and result.Count &gt; 0 then
        local maxCheck = math.min(result.Count, 50)

        for j = 0, maxCheck - 1 do
          pcall(function()
            local instructionAddrStr = result.getString(j)
            local instructionAddr = getAddress(instructionAddrStr)
            local offsetAddr = instructionAddr + offsetPos
            local ripOffset = readInteger(offsetAddr)
            local gEngineAddr = instructionAddr + instrLen + ripOffset

            if validateGEngine(gEngineAddr) then
              candidateCounts[gEngineAddr] = (candidateCounts[gEngineAddr] or 0) + 1
            end
          end)
        end

        result.destroy()
      end
    end

    -- Find candidate with highest count
    local bestAddr = nil
    local bestCount = 0

    for addr, count in pairs(candidateCounts) do
      print(string.format("  Candidate %X found in %d patterns", addr, count))
      if count &gt; bestCount then
        bestAddr = addr
        bestCount = count
      end
    end

    if bestAddr then
      registerSymbol("GEngine", bestAddr, true)
      print("==========================================")
      print(string.format("✓ GEngine registered at: %X (found in %d patterns)", bestAddr, bestCount))
      print("==========================================")
      return true
    end

    print("==========================================")
    print("✗ GEngine not found!")
    print("==========================================")
    return false
  end

  findGEngine()
end
{$asm}

[DISABLE]
{$lua}
if not syntaxcheck then
  if getAddress("GEngine") then
    unregisterSymbol("GEngine")
    print("GEngine unregistered")
  end
end
{$asm}

</AssemblerScript>
      <CheatEntries>
        <CheatEntry>
          <ID>35</ID>
          <Description>"Movement Mode (1,5)"</Description>
          <ShowAsSigned>0</ShowAsSigned>
          <VariableType>Byte</VariableType>
          <Address>GEngine</Address>
          <Offsets>
            <Offset>168</Offset>
            <Offset>288</Offset>
            <Offset>250</Offset>
            <Offset>30</Offset>
            <Offset>0</Offset>
            <Offset>38</Offset>
            <Offset>180</Offset>
            <Offset>78</Offset>
            <Offset>780</Offset>
          </Offsets>
        </CheatEntry>
        <CheatEntry>
          <ID>36</ID>
          <Description>"Clipping (0,3)"</Description>
          <ShowAsSigned>0</ShowAsSigned>
          <VariableType>Byte</VariableType>
          <Address>GEngine</Address>
          <Offsets>
            <Offset>2D8</Offset>
            <Offset>290</Offset>
            <Offset>250</Offset>
            <Offset>30</Offset>
            <Offset>0</Offset>
            <Offset>38</Offset>
            <Offset>180</Offset>
            <Offset>78</Offset>
            <Offset>780</Offset>
          </Offsets>
        </CheatEntry>
        <CheatEntry>
          <ID>37</ID>
          <Description>"SPACE - up | CTRL - down"</Description>
          <VariableType>Auto Assembler Script</VariableType>
          <AssemblerScript>[ENABLE]
{$lua}
if not syntaxcheck then
  if _G.verticalMoveTimer then
    _G.verticalMoveTimer.destroy()
    _G.verticalMoveTimer = nil
  end

  local upVelocity = 500.0
  local downVelocity = -500.0

  local function getZVelocityAddress()
    local gEngine = getAddress("GEngine")
    if not gEngine then return nil end
    local addr = readPointer(gEngine)
    if not addr then return nil end
    addr = readPointer(addr + 0x780)
    if not addr then return nil end
    addr = readPointer(addr + 0x78)
    if not addr then return nil end
    addr = readPointer(addr + 0x180)
    if not addr then return nil end
    addr = readPointer(addr + 0x38)
    if not addr then return nil end
    addr = readPointer(addr + 0x0)
    if not addr then return nil end
    addr = readPointer(addr + 0x30)
    if not addr then return nil end
    addr = readPointer(addr + 0x250)
    if not addr then return nil end
    addr = readPointer(addr + 0x288)
    if not addr then return nil end
    return addr + 0xCC
  end

  local function updateVelocity()
    local addr = getZVelocityAddress()
    if not addr then return end

    local spacePressed = isKeyPressed(VK_SPACE)
    local ctrlPressed = isKeyPressed(VK_CONTROL)

    if spacePressed and not ctrlPressed then
      writeFloat(addr, upVelocity)
    elseif ctrlPressed and not spacePressed then
      writeFloat(addr, downVelocity)
    else
      writeFloat(addr, 0)
    end
  end

  _G.verticalMoveTimer = createTimer(nil)
  _G.verticalMoveTimer.Interval = 10
  _G.verticalMoveTimer.OnTimer = updateVelocity
  _G.verticalMoveTimer.Enabled = true

  print("Vertical movement enabled!")
end
{$asm}

[DISABLE]
{$lua}
if not syntaxcheck then
  if _G.verticalMoveTimer then
    _G.verticalMoveTimer.Enabled = false
    _G.verticalMoveTimer.destroy()
    _G.verticalMoveTimer = nil
  end

  local function getZVelocityAddress()
    local gEngine = getAddress("GEngine")
    if not gEngine then return nil end
    local addr = readPointer(gEngine)
    if not addr then return nil end
    addr = readPointer(addr + 0x780)
    if not addr then return nil end
    addr = readPointer(addr + 0x78)
    if not addr then return nil end
    addr = readPointer(addr + 0x180)
    if not addr then return nil end
    addr = readPointer(addr + 0x38)
    if not addr then return nil end
    addr = readPointer(addr + 0x0)
    if not addr then return nil end
    addr = readPointer(addr + 0x30)
    if not addr then return nil end
    addr = readPointer(addr + 0x250)
    if not addr then return nil end
    addr = readPointer(addr + 0x288)
    if not addr then return nil end
    return addr + 0xCC
  end

  local addr = getZVelocityAddress()
  if addr then
    writeFloat(addr, 0)
  end

  print("Vertical movement disabled")
end
{$asm}

</AssemblerScript>
        </CheatEntry>
        <CheatEntry>
          <ID>41</ID>
          <Description>"CustomTimeDilation"</Description>
          <ShowAsSigned>0</ShowAsSigned>
          <VariableType>Float</VariableType>
          <Address>GEngine</Address>
          <Offsets>
            <Offset>98</Offset>
            <Offset>250</Offset>
            <Offset>30</Offset>
            <Offset>0</Offset>
            <Offset>38</Offset>
            <Offset>180</Offset>
            <Offset>78</Offset>
            <Offset>780</Offset>
          </Offsets>
        </CheatEntry>
        <CheatEntry>
          <ID>38</ID>
          <Description>"JumpMaxCount"</Description>
          <ShowAsSigned>0</ShowAsSigned>
          <VariableType>4 Bytes</VariableType>
          <Address>GEngine</Address>
          <Offsets>
            <Offset>344</Offset>
            <Offset>250</Offset>
            <Offset>30</Offset>
            <Offset>0</Offset>
            <Offset>38</Offset>
            <Offset>180</Offset>
            <Offset>78</Offset>
            <Offset>780</Offset>
          </Offsets>
        </CheatEntry>
        <CheatEntry>
          <ID>39</ID>
          <Description>"InteractionReach"</Description>
          <ShowAsSigned>0</ShowAsSigned>
          <VariableType>Float</VariableType>
          <Address>GEngine</Address>
          <Offsets>
            <Offset>644</Offset>
            <Offset>250</Offset>
            <Offset>30</Offset>
            <Offset>0</Offset>
            <Offset>38</Offset>
            <Offset>180</Offset>
            <Offset>78</Offset>
            <Offset>780</Offset>
          </Offsets>
        </CheatEntry>
      </CheatEntries>
    </CheatEntry>
  </CheatEntries>
  <UserdefinedSymbols/>
</CheatTable>
