48
"Find+Register GEngine"
Auto Assembler Script
[ENABLE]
{$lua}
if not syntaxcheck then
local function isValidPointer(addr)
if not addr or addr == 0 then return false end
if addr < 0x10000 then return false end
if addr % 8 ~= 0 then return false end
return true
end
local function hasValidVTable(objectPtr)
local success, vtable = pcall(readPointer, objectPtr)
if not success or not isValidPointer(vtable) then
return false
end
if vtable < 0x100000000 or vtable > 0x7FFFFFFFFFFF then
return false
end
return true
end
local function validateGEngine(gEngineAddr)
local enginePtr = readPointer(gEngineAddr)
if not isValidPointer(enginePtr) or not hasValidVTable(enginePtr) then
return false
end
for viewportOffset = 0x700, 0x900, 0x8 do
local success1, viewportPtr = pcall(readPointer, enginePtr + viewportOffset)
if success1 and isValidPointer(viewportPtr) and hasValidVTable(viewportPtr) then
for worldOffset = 0x70, 0x100, 0x8 do
local success2, worldPtr = pcall(readPointer, viewportPtr + worldOffset)
if success2 and isValidPointer(worldPtr) and hasValidVTable(worldPtr) then
for giOffset = 0x150, 0x200, 0x8 do
local success3, giPtr = pcall(readPointer, worldPtr + giOffset)
if success3 and isValidPointer(giPtr) and hasValidVTable(giPtr) then
return true
end
end
end
end
end
end
return false
end
local function findGEngine()
local patterns = {
{"48 8B 0D ?? ?? ?? ?? 48 85 C9 74", 3, 7},
{"48 8B 05 ?? ?? ?? ?? 48 8B 88 ?? ?? ?? ??", 3, 7},
{"48 8B 0D ?? ?? ?? ?? 48 8B 01 FF", 3, 7},
{"48 89 0D ?? ?? ?? ?? 48 85 C9", 3, 7},
{"48 8B 05 ?? ?? ?? ?? 48 85 C0 74", 3, 7},
{"48 8B 0D ?? ?? ?? ?? 4C 8B 01", 3, 7},
{"4C 8B 05 ?? ?? ?? ?? 4C 85 C0", 3, 7},
{"48 8B 15 ?? ?? ?? ?? 48 85 D2 74", 3, 7},
}
print("Scanning for GEngine - collecting candidates...")
local candidateCounts = {}
for i, patternData in ipairs(patterns) do
local pattern = patternData[1]
local offsetPos = patternData[2]
local instrLen = patternData[3]
local result = AOBScan(pattern)
if result and result.Count > 0 then
local maxCheck = math.min(result.Count, 50)
for j = 0, maxCheck - 1 do
pcall(function()
local instructionAddrStr = result.getString(j)
local instructionAddr = getAddress(instructionAddrStr)
local offsetAddr = instructionAddr + offsetPos
local ripOffset = readInteger(offsetAddr)
local gEngineAddr = instructionAddr + instrLen + ripOffset
if validateGEngine(gEngineAddr) then
candidateCounts[gEngineAddr] = (candidateCounts[gEngineAddr] or 0) + 1
end
end)
end
result.destroy()
end
end
-- Find candidate with highest count
local bestAddr = nil
local bestCount = 0
for addr, count in pairs(candidateCounts) do
print(string.format(" Candidate %X found in %d patterns", addr, count))
if count > bestCount then
bestAddr = addr
bestCount = count
end
end
if bestAddr then
registerSymbol("GEngine", bestAddr, true)
print("==========================================")
print(string.format("✓ GEngine registered at: %X (found in %d patterns)", bestAddr, bestCount))
print("==========================================")
return true
end
print("==========================================")
print("✗ GEngine not found!")
print("==========================================")
return false
end
findGEngine()
end
{$asm}
[DISABLE]
{$lua}
if not syntaxcheck then
if getAddress("GEngine") then
unregisterSymbol("GEngine")
print("GEngine unregistered")
end
end
{$asm}
46
"MovementMode (1,3,5)"
0
Byte
GEngine
221
330
2E8
30
0
38
1D8
78
BD0
47
"Clipping (0,3)"
0
Byte
GEngine
35F
338
2E8
30
0
38
1D8
78
BD0
44
"MoveSpeedMultiplier (1.1)"
0
Double
GEngine
F88
2E8
30
0
38
1D8
78
BD0
35
"CanTakeFallDamage"
0
Byte
GEngine
E8C
2E8
30
0
38
1D8
78
BD0
1
"HealthCurrent"
0
Double
GEngine
0A8
670
2E8
30
0
38
1D8
78
BD0
2
"HealthMax"
0
Double
GEngine
0B0
670
2E8
30
0
38
1D8
78
BD0
3
"WeaponDamage"
0
Double
GEngine
778
2E8
30
0
38
1D8
78
BD0
4
"RecoilAmount"
0
Double
GEngine
788
2E8
30
0
38
1D8
78
BD0
5
"RecoilYaw"
0
Double
GEngine
790
2E8
30
0
38
1D8
78
BD0
6
"RecoilLength"
0
Double
GEngine
798
2E8
30
0
38
1D8
78
BD0
7
"PullBackAmount"
0
Double
GEngine
7A0
2E8
30
0
38
1D8
78
BD0
8
"FireRate"
0
Double
GEngine
7A8
2E8
30
0
38
1D8
78
BD0
9
"BulletSpread"
0
Double
GEngine
7B0
2E8
30
0
38
1D8
78
BD0
10
"FireMaxRange"
0
Float
GEngine
7B8
2E8
30
0
38
1D8
78
BD0
11
"AmmoClipMax"
0
4 Bytes
GEngine
7D8
2E8
30
0
38
1D8
78
BD0
12
"AmmoTotalMax"
0
4 Bytes
GEngine
7DC
2E8
30
0
38
1D8
78
BD0
13
"AmmoClipCurrent"
0
4 Bytes
GEngine
7E0
2E8
30
0
38
1D8
78
BD0
14
"AmmoTotalCurrent"
0
4 Bytes
GEngine
7E4
2E8
30
0
38
1D8
78
BD0
16
"ADSSwayAmount"
0
Double
GEngine
948
2E8
30
0
38
1D8
78
BD0
34
"SwayTime"
0
Double
GEngine
E40
2E8
30
0
38
1D8
78
BD0
17
"WeaponUpgradeLevel"
0
4 Bytes
GEngine
A80
2E8
30
0
38
1D8
78
BD0
18
"LethalDamage"
0
Double
GEngine
B38
2E8
30
0
38
1D8
78
BD0
19
"LethalRadius"
0
Double
GEngine
B40
2E8
30
0
38
1D8
78
BD0
20
"LethalMaxAmount"
0
4 Bytes
GEngine
B48
2E8
30
0
38
1D8
78
BD0
21
"LethalCurrentAmount"
0
4 Bytes
GEngine
C00
2E8
30
0
38
1D8
78
BD0
26
"DamageFallOff"
0
Double
GEngine
CE8
2E8
30
0
38
1D8
78
BD0
23
"CanReloadCancel"
0
Byte
GEngine
C61
2E8
30
0
38
1D8
78
BD0
27
"BurstTimeBetweenShots"
0
Double
GEngine
D88
2E8
30
0
38
1D8
78
BD0
28
"BurstTimeBetweenBursts"
0
Double
GEngine
D90
2E8
30
0
38
1D8
78
BD0
29
"BurstShots"
0
4 Bytes
GEngine
D98
2E8
30
0
38
1D8
78
BD0
30
"BurstShotsRemaining"
0
4 Bytes
GEngine
D9C
2E8
30
0
38
1D8
78
BD0
40
"ChosenDifficulty"
0
Byte
GEngine
FB8
2E8
30
0
38
1D8
78
BD0
41
"ChosenMode"
0
Byte
GEngine
FB9
2E8
30
0
38
1D8
78
BD0
42
"CanMove"
0
Byte
GEngine
12C1
2E8
30
0
38
1D8
78
BD0