Cheat Engine

30stm · How do I cheat? Reputation: 0 Joined: 03 Sep 2005 Posts: 6

Hi, Im pretty new to this program. I dont have much experience with gamehacking ( only with a few memory searchers, so only the simple stuff ) I have no experience with assembly language at all. So here's my problem, I want to try to hack fable for the health. I did do it once, but then it also affected the monsters in the game. So I tried the stuff with the pointers like the tutorial says. When I search for the pointer I get approx. 3300 results. How to I succesfully minimize the ammount of addresses returned by cheat engine ? Do I have to try them all manually ??

-
EDIT: o yeah, I forgot to ask, In the tutorials that comes with cheat engine, in the last part ( 6 ), What does the creator mean with the pointers. It says this:"Most of the time the address you need will be the
smallest one." Smallest in wich way ? The values I found with fable were all the same.
-

Thanks in advance,

Gr

Dark Byte · Posted: Sat Sep 03, 2005 5:34 am Post subject:

When you get that many results for the poinhter you'll just have to try them all, use find out what accesses on each of them to ind out if they get used or are just for decoration.

but to make it easier for you, the addresses at the top are usually the ones you need. (thats what I mean with smallest address)

30stm · How do I cheat? Reputation: 0 Joined: 03 Sep 2005 Posts: 6

I tried again, turns out I used 2 bytes, I still get 113 results though. But anyways, I was trying them all like you said in the reply, I tried about six with the "see what access this pointer" or something option. The first 5 didnt have any results. The sixth got me 3 lines. I dont know what to do with 3 of them :O

I'll write the addresses I got here, maybe someone here can point me in the right direction ?

The program told me that the pointer im looking for was probably at address: 053D22F0. Wich got me about 115 addresses. The address that popped with the 3 lines is: 01F607E8

The 3 lines I got from: 01F607E8

0051FD15 - 8B 3C EA - MOV EDI,[EDX+EBP*8]

When I click the "More information" button I get this:

0051FD0D - JE 0051FD68
0051FD0F - MOV EDX,[EBX+0000008C]
>>0051FD15 - MOV EDI, [EDX+EBP*8]
0051FD18 - TEST EDI, EDI
0051FD1A - JE 0051FD68

EAX=0000000A EDX=01F607D8 ESP=000FDC44
EBX=0489FCB8 ESI=056290D8 EBP=00000002
ECX=048119D0 EDI=053D22F0 EIP=0051FD18

0051EC77 - 39 37 - CMP [EDI],ESI

Info button,

0051EC73 - TEST EAX, EAX
0051RC75 - JNE 0051ECB1
>>0051EC77 - CMP [EDI], ESI
0051EC79 - JE 0051ECB1
0051EC7B - MOV ECX, [ESI+60]

EAX=00000000 EDX=00000000 ESP=000FDB20
EBX=0489FC00 ESI=053D22F0 EBP=0126616C
ECX=01F607D8 EDI=01F607E8 EIP=0051EC79

0051EBF4 - 8B 34 2A - MOV ESI,[EDX+EBP]

Info button,

051EBEC - JE 0051EC36
0051EBEE - MOV EDX, [ECX+0000008C]
>>0051EBF4 - MOV ESI, [EDX+EBP]
0051EBF7 - TEST ESI, ESI
0051EBF9 - JE 0051EC36

EAX=048119D0 EDX=01F607D8 ESP=000FDC5C
EBX=00000028 ESI=053D22F0 EBP=00000010
ECX=0489FCB8 EDI=056290D8 EIP=0051EBF7

Hope someone can help me out with this.

Gr

Dark Byte · Posted: Sat Sep 03, 2005 7:06 am Post subject:

I'd go with the MOV EDI,[EDX+EBP*8] because that has a offset. (easier)
offset= ebp*8=2*8=10 (hex)

30stm · How do I cheat? Reputation: 0 Joined: 03 Sep 2005 Posts: 6

I was searching for a pointer for my health bar in fable. So I was checking a few addresses cheat engine gave me. While working down the list I came across some addresses that popped ( with the "Find out what address is accessing this pointer" option ). But they popped while I didnt do anything in game, I just went to the game and then back to cheat engine. So what I wanted to ask is, How do I know if im going in the right direction ? Does my health need to decrease ?

Also, How do I calculate the offset ?? Is there some tutorial on this ?

Gr

Dark Byte · Posted: Sat Sep 03, 2005 9:03 am Post subject:

anything that accesses a pointer is usefull

and to calculate a offset, just start the windows calculator in scientific mode and set it to hex mode

30stm · How do I cheat? Reputation: 0 Joined: 03 Sep 2005 Posts: 6

Ok, I tried to find a pointer for health potions. ( I can nop an address I found, but then all potions are unlimited, and I only want health hehe. ) So I did the same thing as I did with the tutorial. I got one address, I entered it as a pointer and it seemed to work, cos it had the same value as the dma address, but then I changed the value of my potions with the pointer address but nothing happened, when I returned to cheat engine I saw the value went too "??" I did the whole process again but instead of changing the value I froze it. Same results it didnt work, and the value went "??"

How come the value changes too "??" Shocked

Thanks in advance,

Gr

Dark Byte · Posted: Sat Sep 03, 2005 1:57 pm Post subject:

you used a wrong address as pointer.
you'll have to look further for another one

himenow · Posted: Tue Mar 07, 2006 6:33 pm Post subject:

You know what I did to get my health? I just searched for unknown initial value in 4 Bytes. then I got hit, decreased amount. Healthed, increased. Kept on doing that until I got my address, and then I found the pointer (I use CE 5.2 Very Happy

). What write address>get hit again>double click the address and it says the pointer.
I do that, search for the pointer, add the address, and the offset, all is cool. I free the pointer and turn it to 99999 and have inf. health.
But, whenever something changes (night>day, go to next town, w/e), it always bring my health down again, like normal.
This doesn't happen with Mana points, that always stays infinite.
Anything I'm doing wrong?