Cheat Engine

VikFreeze · Posted: Thu Mar 18, 2010 3:16 pm Post subject: Forward Tracing

Hy,
I've been browsing the www and found a flash game to tamper with, finding the score address and modifying it works just fine, but its a slow process to search for the address and modify it with CE, so i want to make a trainer for it, so it modifys the score with just one click, to do this i need to find a way to figure out what the address of the score will be.

The address is established when the game starts and remains the same threw out the game, also i've noticed that is always ends with 3B8.

Now, ive tryed to find a pointer to this address but unfortunately it just leads in circles there just isen't a stable pointer to it, so i took a different aproach to this problem, i isolated the module of the browser witch loads the swf file and watched it.
This turned up 7 addresses witch look promising, they all change value when the game is instantiated and destroyed.
2 out of these 7 are 0x00000000 when the game isen't instantiated, one of them is given a value when the game is instantiated and the othere is given a value right at the same moment that the score address wouled be established, furtheremore this address always ends with 1C0 so i have a strong suspicion that this address has something to do with the scores address.
Ok thats where i stand now, the problem now is to find a link between one of these 7 addresses in the module and the scores address.
I know how to back trace a pointer to a module but not how to "forward trace".

Heres some test data if it helps: (the first 7 lines hold the values of the 7 addresses and the address of the score is the last, each colum is one gameplay)

Radiation · Posted: Thu Mar 18, 2010 5:42 pm Post subject:

ahh:

1. right-click an address in the disassembler window

2. Click on "Find out what addresses this instruction accesses."

4. Click Yes

5. Now go back to game and make the score change

This should record any values changed by this opcode.

Hope I helped.

VikFreeze · Posted: Fri Mar 19, 2010 3:55 am Post subject:

That was a good idea but it didn't help since only there values are used somehow, there not used as opcodes to modify any othere addresses