33
"Find+Register GEngine and Show Options"
Auto Assembler Script
[ENABLE]
{$lua}
if not syntaxcheck then
local function isValidPointer(addr)
if not addr or addr == 0 then return false end
if addr < 0x10000 then return false end
if addr % 8 ~= 0 then return false end
return true
end
local function hasValidVTable(objectPtr)
local success, vtable = pcall(readPointer, objectPtr)
if not success or not isValidPointer(vtable) then
return false
end
if vtable < 0x100000000 or vtable > 0x7FFFFFFFFFFF then
return false
end
return true
end
local function validateGEngine(gEngineAddr)
local enginePtr = readPointer(gEngineAddr)
if not isValidPointer(enginePtr) or not hasValidVTable(enginePtr) then
return false
end
for viewportOffset = 0x700, 0x900, 0x8 do
local success1, viewportPtr = pcall(readPointer, enginePtr + viewportOffset)
if success1 and isValidPointer(viewportPtr) and hasValidVTable(viewportPtr) then
for worldOffset = 0x70, 0x100, 0x8 do
local success2, worldPtr = pcall(readPointer, viewportPtr + worldOffset)
if success2 and isValidPointer(worldPtr) and hasValidVTable(worldPtr) then
for giOffset = 0x150, 0x200, 0x8 do
local success3, giPtr = pcall(readPointer, worldPtr + giOffset)
if success3 and isValidPointer(giPtr) and hasValidVTable(giPtr) then
return true
end
end
end
end
end
end
return false
end
local function findGEngine()
local patterns = {
{"48 8B 0D ?? ?? ?? ?? 48 85 C9 74", 3, 7},
{"48 8B 05 ?? ?? ?? ?? 48 8B 88 ?? ?? ?? ??", 3, 7},
{"48 8B 0D ?? ?? ?? ?? 48 8B 01 FF", 3, 7},
{"48 89 0D ?? ?? ?? ?? 48 85 C9", 3, 7},
{"48 8B 05 ?? ?? ?? ?? 48 85 C0 74", 3, 7},
{"48 8B 0D ?? ?? ?? ?? 4C 8B 01", 3, 7},
{"4C 8B 05 ?? ?? ?? ?? 4C 85 C0", 3, 7},
{"48 8B 15 ?? ?? ?? ?? 48 85 D2 74", 3, 7},
}
print("Scanning for GEngine...")
local candidateCounts = {}
for i, patternData in ipairs(patterns) do
local pattern = patternData[1]
local offsetPos = patternData[2]
local instrLen = patternData[3]
local result = AOBScan(pattern, "+X")
if result and result.Count > 0 then
local maxCheck = math.min(result.Count, 50)
for j = 0, maxCheck - 1 do
pcall(function()
local instructionAddrStr = result.getString(j)
local instructionAddr = getAddress(instructionAddrStr)
local offsetAddr = instructionAddr + offsetPos
local ripOffset = readInteger(offsetAddr)
local gEngineAddr = instructionAddr + instrLen + ripOffset
if validateGEngine(gEngineAddr) then
candidateCounts[gEngineAddr] = (candidateCounts[gEngineAddr] or 0) + 1
end
end)
end
result.destroy()
end
end
local bestAddr = nil
local bestCount = 0
for addr, count in pairs(candidateCounts) do
print(string.format(" %X: %d patterns", addr, count))
if count > bestCount then
bestAddr = addr
bestCount = count
end
end
if bestAddr then
registerSymbol("GEngine", bestAddr, true)
print(string.format("GEngine registered: %X", bestAddr))
return true
end
print("GEngine not found!")
return false
end
findGEngine()
end
{$asm}
[DISABLE]
{$lua}
if not syntaxcheck then
if getAddress("GEngine") then
unregisterSymbol("GEngine")
print("GEngine unregistered")
end
end
{$asm}
31
"Player Stuff"
1
20
"MovementMode (1,3,5)"
0
Byte
GEngine
201
328
2D8
30
0
38
1B8
78
A58
21
"CollisionEnabled (3,0)"
0
Byte
GEngine
3C0
330
2D8
30
0
38
1B8
78
A58
22
"SPACE - up | CTRL - down (enable flight)"
Auto Assembler Script
[ENABLE]
{$lua}
if not syntaxcheck then
-- Clean up any existing hotkeys/timers first
if _G.verticalMoveTimer then
_G.verticalMoveTimer.destroy()
_G.verticalMoveTimer = nil
end
local upVelocity = 500.0
local downVelocity = -500.0
local function getZVelocityAddress()
local gEngine = getAddress("GEngine")
if not gEngine then return nil end
local addr = readPointer(gEngine)
if not addr then return nil end
addr = readPointer(addr + 0xA58)
if not addr then return nil end
addr = readPointer(addr + 0x78)
if not addr then return nil end
addr = readPointer(addr + 0x1B8)
if not addr then return nil end
addr = readPointer(addr + 0x38)
if not addr then return nil end
addr = readPointer(addr + 0x0)
if not addr then return nil end
addr = readPointer(addr + 0x30)
if not addr then return nil end
addr = readPointer(addr + 0x2D8)
if not addr then return nil end
addr = readPointer(addr + 0x328)
if not addr then return nil end
return addr + 0xC8
end
local function updateVelocity()
local addr = getZVelocityAddress()
if not addr then return end
local spacePressed = isKeyPressed(VK_SPACE)
local ctrlPressed = isKeyPressed(VK_CONTROL)
if spacePressed and not ctrlPressed then
writeDouble(addr, upVelocity)
elseif ctrlPressed and not spacePressed then
writeDouble(addr, downVelocity)
else
writeDouble(addr, 0)
end
end
_G.verticalMoveTimer = createTimer(nil)
_G.verticalMoveTimer.Interval = 10
_G.verticalMoveTimer.OnTimer = updateVelocity
_G.verticalMoveTimer.Enabled = true
print("Vertical movement enabled!")
end
{$asm}
[DISABLE]
{$lua}
if not syntaxcheck then
if _G.verticalMoveTimer then
_G.verticalMoveTimer.Enabled = false
_G.verticalMoveTimer.destroy()
_G.verticalMoveTimer = nil
end
-- Reset velocity
local function getZVelocityAddress()
local gEngine = getAddress("GEngine")
if not gEngine then return nil end
local addr = readPointer(gEngine)
if not addr then return nil end
addr = readPointer(addr + 0xA58)
if not addr then return nil end
addr = readPointer(addr + 0x78)
if not addr then return nil end
addr = readPointer(addr + 0x1B8)
if not addr then return nil end
addr = readPointer(addr + 0x38)
if not addr then return nil end
addr = readPointer(addr + 0x0)
if not addr then return nil end
addr = readPointer(addr + 0x30)
if not addr then return nil end
addr = readPointer(addr + 0x2D8)
if not addr then return nil end
addr = readPointer(addr + 0x328)
if not addr then return nil end
return addr + 0xC8
end
local addr = getZVelocityAddress()
if addr then
writeDouble(addr, 0)
end
print("Vertical movement disabled")
end
{$asm}
24
"CustomTimeDilation"
0
Float
GEngine
064
2D8
30
0
38
1B8
78
A58
2
"Current HP (getting hit from behind instakills)"
0
Double
GEngine
0A8
6A8
2D8
30
0
38
1B8
78
A58
3
"CurrentStamina"
0
Double
GEngine
768
2D8
30
0
38
1B8
78
A58
4
"StaminaExhaustRate"
0
Double
GEngine
770
2D8
30
0
38
1B8
78
A58
5
"StaminaRecoveryRate"
0
Double
GEngine
778
2D8
30
0
38
1B8
78
A58
36
"MaxInteractDistance"
0
Double
GEngine
BC0
2D8
30
0
38
1B8
78
A58
35
"FallHeight (idk if fall damage is real)"
0
Double
GEngine
798
2D8
30
0
38
1B8
78
A58
7
"JumpHeight (can you even jump?)"
0
Double
GEngine
848
2D8
30
0
38
1B8
78
A58
8
"Lean (you can lean???)"
0
Double
GEngine
850
2D8
30
0
38
1B8
78
A58
34
"isFiringBlocked (kinda works?)"
0
Byte
GEngine
9F8
2D8
30
0
38
1B8
78
A58
17
"BreathCount (what even is this)"
0
4 Bytes
GEngine
AF0
2D8
30
0
38
1B8
78
A58
6
"EnemyDeathCount"
0
Double
GEngine
C08
2D8
30
0
38
1B8
78
A58
16
"Current Weapon Stuff"
1
25
"StoredRecoil (freeze me at 0)"
0
Double
GEngine
450
860
2D8
30
0
38
1B8
78
A58
11
"DT_Ammo Mag (freeze me)"
0
4 Bytes
GEngine
428
860
2D8
30
0
38
1B8
78
A58
12
"DT_Ammo Bag"
0
4 Bytes
GEngine
42C
860
2D8
30
0
38
1B8
78
A58
14
"MaxAmmo"
0
4 Bytes
GEngine
438
860
2D8
30
0
38
1B8
78
A58
30
"DT_Firemode (0 semi, 1 burst, 2 full auto)"
0
Byte
GEngine
421
860
2D8
30
0
38
1B8
78
A58
28
"DT_RPM (recommended value= 0.03)"
0
Double
GEngine
460
860
2D8
30
0
38
1B8
78
A58
26
"DT_MaxRange"
0
Double
GEngine
4F8
860
2D8
30
0
38
1B8
78
A58
27
"DT_Damage"
0
Double
GEngine
500
860
2D8
30
0
38
1B8
78
A58
29
"Shot Count (statistic, useless)"
0
4 Bytes
GEngine
440
860
2D8
30
0
38
1B8
78
A58
32
"info (useless unless unreal engine dumping)"
1
0
"Pawn (CBP_MPS_A_C)"
1
0
8 Bytes
GEngine
2D8
30
0
38
1B8
78
A58
1
"AcknowledgedPawn (CBP_MPS_A_C)"
1
0
8 Bytes
GEngine
340
30
0
38
1B8
78
A58
10
"ActiveWeapon (BP_Weapon_Master_C)"
1
0
8 Bytes
GEngine
860
2D8
30
0
38
1B8
78
A58