 |
Cheat Engine The Official Site of Cheat Engine
|
View previous topic :: View next topic |
Author |
Message |
rooski Master Cheater
Reputation: 0
Joined: 31 Oct 2007 Posts: 340 Location: Siberia
|
Posted: Wed Aug 20, 2008 11:04 pm Post subject: need help making a trainer (for crysis) |
|
|
ok well i was trying to freeze the value of the suits energy bar( in the single player campaign, so offline) so you wouldnt have to wait for it to recharge. i found the value and its the right one , look for your selves .....
it changes as i use energy.
but if i try and freeze it , the value is frozen but it doesnt do anything in game , so that is my question what should i do to freeze it ?
any help would be much appreciated , and i want to actaully learn how to do this , so please dont just tell me where to get a trainer that will do that for me , becuase that is not what im asking for.
|
|
Back to top |
|
 |
Pingo Grandmaster Cheater
Reputation: 8
Joined: 12 Jul 2007 Posts: 571
|
Posted: Fri Aug 22, 2008 4:47 am Post subject: |
|
|
You can Dl the trainer from jk
Im the same way. I'v not played this game but i have a few ideas you could try.
First thing i would try is jumping into a codecave. Sometimes freezing the value doesnt work. But jumping into a cave and writing you code or even just nopping it works.
(find what writes) to that address
when you get it, double click it to show the more info.
The red addy and the one under it is what you need to use.
just one example if your not clued about caves.
01234567 - xx xx xx xx mov [ebp+123],eax
87654320 - xx xx xx xx xx xx mov [eax+321],ebp
Your code could look something like this. plus eax=your bar value at that time
[enable]
alloc(newmem,1024)
newmem:
mov [ebp+123],64
jmp 87654320 / addy under you red one
01234567:
jmp newmem
[disable]
dealloc(newmem)
01234567:
mov [ebp+123],eax
That would write 100 dec into your addy.
The other thing im thinking is maybe you could only have the onscrean value and not the real value. Search unknown value, then make the bar decrease. Search decreased value. Keep doing that untill you have afew addys. Try freezing some of them besides the your using now.
_________________
|
|
Back to top |
|
 |
rooski Master Cheater
Reputation: 0
Joined: 31 Oct 2007 Posts: 340 Location: Siberia
|
Posted: Fri Aug 22, 2008 6:09 pm Post subject: |
|
|
thank you so much for your time , ill try injecting my own code in (never thought of that ?) and if i try and scanning for the value in the way you suggested i never get the right adress and usually the value is different , and i wouldnt be freezing the onscreen value becuase the bar changes anyway. but like i said ill try all that you suggested and once again thank you.
and there are 3 or four adresses that write to it , and they seem to execute the same code , would i have each one jump to my code cave?
edit: ok now when i scaned for the value i got 3 adresses , both floats. and each has 3 things writing to it . what now!?!
|
|
Back to top |
|
 |
Labyrnth Moderator
Reputation: 9
Joined: 28 Nov 2006 Posts: 6285
|
Posted: Sat Nov 29, 2008 10:48 am Post subject: |
|
|
Sorry to post in an old post, but this needs to be shown to others.
It looks like you could crash a game, if you dealloc(newmem) before you write back the original games code.
Quote: | [disable]
dealloc(newmem)
01234567:
mov [ebp+123],eax |
This really needs to be like.
[disable]
01234567:
mov [ebp+123],eax
dealloc(newmem)
The allocated memory is where your injection code is stored. So if you clear it before setting back the original games code. The game could freeze, or have weird results.
It can however deallocate and write the original code back fast enough, but all it takes is that one time it doesnt and you crash.
_________________
|
|
Back to top |
|
 |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
|