Cheat Engine

ddano · How do I cheat? Reputation: 0 Joined: 03 Feb 2011 Posts: 4

Hey folks,

I've recently been taking what I know about C++ and applying it to gamehacking by using Cheat Engine to find offets and then creating C++ trainers.

One thing that's giving me trouble is coding in a base address into C++. Cheat Engine makes this trivial since I just write something like '"jvm.dll"+002712D4' and CE pretty much runs with it.

However, according to Cheat Engine, jvm.dll is located at 0x00905A4D while some C++ code I found linked from here returns a different handle.
The code is a helper function designed to take a pID and return the base address of a specified module, in my case I'm accessing Minecraft and running a search on jvm.dll to find its base address which I can use as my "starting point".

Dark Byte · Posted: Thu Feb 03, 2011 8:07 pm Post subject:

are you sure that ce says the ADDRESS of jvm.dll is 0x00905A4D ?

because this looks more like the VALUE at the base address of jvm.dll

and replace (DWORD*) with just DWORD

atom0s · Posted: Thu Feb 03, 2011 8:07 pm Post subject:

Dark Byte · Posted: Thu Feb 03, 2011 8:09 pm Post subject:

also see this topic: http://forum.cheatengine.org/viewtopic.php?t=531394

you're using openprocess, I really doubt GetModuleBase will work for you

ddano · How do I cheat? Reputation: 0 Joined: 03 Feb 2011 Posts: 4

Dark Byte · Posted: Thu Feb 03, 2011 9:42 pm Post subject:

to get the address of ce's jvm.dll go to the memory view window rightclick and choose goto address. There type in jvm.dll and click ok

It will now be at the base address of jvm.dll

as for the difference between address and value and how to use a pointer: http://forum.cheatengine.org/viewtopic.php?t=422516

atom0s · Posted: Fri Feb 04, 2011 12:55 am Post subject:

hcavolsdsadgadsg · Posted: Fri Feb 04, 2011 2:22 am Post subject:

on another note, you are in for pain and anguish if you are trying to hunt down addresses in minecraft / java.

they will change every single time.

ddano · How do I cheat? Reputation: 0 Joined: 03 Feb 2011 Posts: 4

hcavolsdsadgadsg · Posted: Fri Feb 04, 2011 8:11 pm Post subject:

I wanted to create a way to fly so I ended up writing a simple byte array search that would look for the player struct. The difficult part was when monsters got introduced and it was possible to end up using their info instead. For whatever reason I couldn't think of a way to prove it was always the player so...

I then ended up with some comically overcomplicated mess of a DLL that I would inject to the process which allocated a block of memory and patched a chunk of the physics code to jump to this space and write out the pointer to the struct that I assumed was the player based off which struct it was trying to access at the time. If it was the 1st in the array it was probably the player.

The address changed so incredibly often that it was really easy to get the wrong pointer even if I wrote out the correct one unless I was polling for the address hundreds of times per second. I had what I thought was a better solution for this but I never bothered.

It was a clusterfuck but it totally did work until the paid version where I couldn't be assed
http://bit .ly/dZ31er

Now the client itself seems to do little in way of protection so if you know java you can just edit the actual source code to the game. It's all obfuscated but most of it is documented and may just be the easiest way to go about things.