Cheat Engine

[Pingo]

Most of it was converted from my C# AobScan project which im now converting to VB. I Had to make alot of changes without knowing any Vb though.
I know what you mean about deallocating first and my old source would wait to dealllocate. But i changed it around to check if it failed first.

As for crashing, iv not had that happen yet. iv written to an instruction that was accessed about 200 times a sec without problem.

Try the new source now. I fixed something else aswell. I just noticed if the app stores the original instructions and are not written back before the app closes, it'l have nothing to save. So instead you would write them manually with dealloc, like
Mem.Deallocate(&H9FD306, "0F845C010000")

[sunbinyuan]

@Pingo
Thanks! I couldn't PM you because I dont have the privilege yet.. I downloaded your example sources but I don't understand how you did it.. Can you explain me more in details?

Thanks!

[Pingo]

Which part? All?
The way i do it might not be the best way but thats how i pictured it working when i coded it. Im sure it has room for improvement but atm it works fine for my needs.

I'll put together a text file explaining how it works.
Sorry i never commented it

[sunbinyuan]

eg. In the CrazyH4x0r code, you changed "jmp 004918bd" into e99c160200 and in mine, you changed all the opcodes into "60a1b87cdc008b80780900008b808c0000008b0db87cdc008b89780900" + "008b89880000008b1d5c77dc008983d8430000898bdc430000c783d04300000100000061". That is what I want to know.

[Pingo]

Oh, thats just the array of bytes. Use the script you have.
Go to your address 9FD306 in the memory viewer.
When you toggle it, it'l jump to a cave. Then go to that cave in the memory viewer and you'l see the opcodes/bytes you just wrote.
Im just writing it as an array. Converting that string to byte array. Its easier and takes up less space when dealing with huge arrays like the one i used for your injection.
Btw, did you test the app? Just curious if it worked or not.

[sunbinyuan]

Can you change it to opcodes instead of byte array? I want to know how you did it.

Thanks

Edit: Is there a function in VB.NET that we can turn opcodes in array of bytes?
For if it worked or not, my game got patched so it's a new code.

[Pingo]

Iv not seen any opcode to byte converters. Iv always used byte arrays which is easy enough to do.

[sunbinyuan]

But how do you find byte arrays??
I saw this site: http://www.chilkatsoft.com/faq/dotnetstrtobytes.html
It doesn't help me at all..
Also, could I have your msn? It would be easier to chat

Thanks

[Stylo]

Char = Byte
It seems that you have to relearn the basics of programming.
In order to get the bytes for your script, just use CE to write down the script and watch it via memory view at CE.
After you've done that, take all those bytes and gather them as a byte array.
And then use your api to write them to the memory!!!

Unless you want to save all that crap and just learn C which will be lot handier for future use.

[sunbinyuan]

[Pingo]

{&HE9, &H9C, &H23, &HEC, &HFF} = jmp 00353bde from 0049183D
{&HEB, &H7E} = jmp 004918bd from 0049183D
It was late when i added that code, i never noticed mine or hcavols distance was wrong haha
So that app i posted is way way off. Same for hcavols code.

@CrazyH4x0r sorry fella. My example wont work for you. You'l need to change the bytes to.

[sunbinyuan]

How do you know that {&HE9, &H9C, &H23, &HEC, &HFF} = jmp 00353bde from 0049183D if you don't know which program I am using? Is there a convector?? Or how did you turned

[Pingo]

Did you get my PM? I'll just quickly show you instead of highjacking this thread.
A long jump like that is Destination - StartLocation - 5 and converted to byte array.
so
00353bde - 0049183D - 5 = FFEC239C
FFEC239C to byte array is 9C 23 EC FF
E9 is the long jump so you would write E9 9C 23 EC FF

[sunbinyuan]

And how you do with mov eax,[00DC7CB8] ?

My MSN is fucked..

[Pingo]