Cheat Engine

TsTg · Posted: Wed Jul 03, 2013 4:25 am Post subject:

yes like i said there's no enough space here to write your extra code in, write this in the new allocated memory,but here in the (Game.CreateGameInstance+105C0D), you will write only the redirection jump to your code cave(the last two WriteProcessMemory calls in the enable code i posted), so it appears as in the picture, the instruction takes 6 bytes, so there's an extra byte which we don't need.

but, in the code cave, write whatever you want.

vmv · Cheater Reputation: 0 Joined: 29 Jun 2013 Posts: 32

Assuming that i don't have any code written right now.....so, first thing to do is to open CE and to find my address.
Now in memory view on my address, i will press enter and that small window will show up. "mov [eax+000004EA],dx"((Game.CreateGameInstance+105C0D))....
Now what to do next...?
I can't change anything here because of crash.

Sorry to bother you so much Sad

TsTg · Posted: Wed Jul 03, 2013 4:54 am Post subject:

instead of testing codes here, go to Cheate engine's menu: Tools>Allocate memory, leave the size as is then press enter, in the empty area you have all your tests without crashing the game

vmv · Cheater Reputation: 0 Joined: 29 Jun 2013 Posts: 32

Whit what do i replace this on the original address : mov [eax+000004EA],dx ?
Can you right it down exactly please... thank you,

Rolling Eyes

TsTg · Posted: Wed Jul 03, 2013 6:23 am Post subject:

from cheat engine: say your allocated memory is at 2DC0000, then you need to write this: jmp 2DC0000

vmv · Cheater Reputation: 0 Joined: 29 Jun 2013 Posts: 32

TsTg · Posted: Wed Jul 03, 2013 8:16 am Post subject:

i told you, write the assembly line of yours in the empty area (in cheat engine), then see the bytes beside it, these are the bytes used.

you want to change the "mov [eax+000004E8],cx" to "[eax+000004E8],00000001", right ?

the corresponding bytes are: C7 80 E8 04 00 00 01 00 00 00

and if you are going to modify this, beside the value of [eax+4EA] one, so your code cave bytes array is now 26 bytes long, and the code should look like in picture.

so in this case, the full byte chain is: C7 80 E8 04 00 00 01 00 00 00 C7 80 EA 04 00 00 84 03 00 00 8B E5 5D C2 08 00

vmv · Cheater Reputation: 0 Joined: 29 Jun 2013 Posts: 32

I can't use that "thumbs up" yet i think..it's just an image for me Smile

TsTg · Posted: Wed Jul 03, 2013 8:36 am Post subject:

ok, never mind, did you make the hack to work now ?

vmv · Cheater Reputation: 0 Joined: 29 Jun 2013 Posts: 32

See...this is where i lose it....there are more then c++ things, i need assembly lines to get it right, ... that's why i was asking for help here, is not that simple as you see it ...for me.
I'm trying to understand from your posts... the steps to walk to write a new hack address.
You show me the results of what that address is there but,..if i try to do it..i get a crash...

"you want to change the "mov [eax+000004E8],cx" to "[eax+000004E8],00000001", right ?"

Yes...how do i do that avoiding crash ?
How do i myself find that address w/o crash.

It's awesome that you wrote the code (the corresponding bytes are: C7 80 E8 04 00 00 01 00 00 00) for me but ...i need to find it myself...

I really can give you the teamviwer address if you have time ... Smile

Thank you,

=========

Your hack is working man, is working flawless... Smile

But, i am feeling like the dumbest persons around here...
I just copied all your work and ... not even understand it...to make it work...

vmv · Cheater Reputation: 0 Joined: 29 Jun 2013 Posts: 32

For 64bit version of the Game.dll, it's the same procedure ?

Gniarf · Posted: Thu Jul 04, 2013 6:46 am Post subject:

vmv · Cheater Reputation: 0 Joined: 29 Jun 2013 Posts: 32

vmv · Cheater Reputation: 0 Joined: 29 Jun 2013 Posts: 32

Hi, it's me again Smile

I want to modify a new value on my own... and i want to know from where to start and where to end with asm code..:
I don't need the full result, only from where to start...
This is 6 bytes long, so i need to modify the c++ code also, right ?
And what about x64 version of ".bin or .exe" module, ...i can't read it with my actual code. I looked on some forums and didn't found anything about it.

Thank you,

TsTg · Posted: Fri Jul 05, 2013 9:03 am Post subject:

before anything, thanks for the rep, vmv (+ thanks to Gniarf for helping in that)