Cheat Engine

marduk_tl · How do I cheat? Reputation: 0 Joined: 20 Aug 2009 Posts: 7

hello everyone,
I need some help with the following game:
[Qilox] - flash game ( cant post url but google: qilox download )

using cheat engine I found out how to manipulate the lives
(Even found this code add eax,ff => eax=lives, lives + (-1))

The only problem is that every time I restart the game
The pointer changes (and I cant find a static address)
and another thing is that the address of the code is also changing!
for example: first time I've got this 90b31ab : add eax,ff
and the second time its 50Bffa3 : add eax,ff

what the hell is going on? Smile

(how can I make a trainer for that)
help me please..!

Dark Byte · Posted: Thu Aug 20, 2009 7:57 pm Post subject:

You could try pressing ctrl+m in the disassembler at that location and hope for it to show a modulename+offset notation, but I doubt it since you say it's a flash game

Flash is an emulator and perhaps it generates some code on the fly to execute x86 code to speed internal game routines up, but that'd mean that it won't be inside a module.
At most you could try finding a base nearby and use that as calculation, or else just dissect the flash game using a flash tool

marduk_tl · How do I cheat? Reputation: 0 Joined: 20 Aug 2009 Posts: 7

Thanks for your reply,
I did use ctrl+m but it shows nothing...

I wounder can you direct me to a tutorial that might help or something?
i have no idea how to deal with it

btw is that code shifting?

Dark Byte · Posted: Thu Aug 20, 2009 8:28 pm Post subject:

try the flash section, I don't do much with emulators myself

And no, this isn't code shifting, this is code generation

Dark Byte · Posted: Sat Aug 22, 2009 6:19 am Post subject:

Best thing you can do here is trying to find an array of byte you can easily scan for.
When making an array of byte, replace static address specifier bytes with **

marduk_tl · How do I cheat? Reputation: 0 Joined: 20 Aug 2009 Posts: 7

Can you give me an example of what you mean?
I really dont have any idea how to search for array of bytes..
what exactly does that mean?

Dark Byte · Posted: Sat Aug 22, 2009 4:01 pm Post subject:

example the code around it looks like:

marduk_tl · How do I cheat? Reputation: 0 Joined: 20 Aug 2009 Posts: 7

alright got it :)
i'll try to do that..
didnt know you could do that..
I can actually search for a set of code.. ?
what should be the size of the search?

Dark Byte · Posted: Sun Aug 23, 2009 5:46 am Post subject:

just make sure to also include read only memory

as for the size, the bigger is better since it'll give less false results, but too big is also bad. I'd say at least 8 bytes long, and a max of 32

marduk_tl · How do I cheat? Reputation: 0 Joined: 20 Aug 2009 Posts: 7

Ok thanks alot man, it cleared some stuff i've seen before..
on youtube someone posted a "how to hack" and he did a search for an array of bytes but i never found how he knew what to search and now i know :)

BTW: i've done it i know how to get exactly to the code where the lives decrease
the only thing that is still a problem is that i have no idea how to make an auto-hack or trainer or anything like that..
i'm trying to look for code that will give me some info on how to find the address that changes each time the game runs..

i have another idea
is there an api function that can scan a process memory/code segment
so i could look for an array of bytes?

Dark Byte · Posted: Mon Aug 24, 2009 3:43 pm Post subject:

you'll have to write that yourself. (openprocess, readmemory, check array against memory, ...)

perhaps I'll add an arrayscan routine to the autoassembler, so you can use it in ce tables and ce trainers, but it'll be a slow option...

marduk_tl · How do I cheat? Reputation: 0 Joined: 20 Aug 2009 Posts: 7

oh well..thanks anyway man
you've helped alot :)