 |
Cheat Engine The Official Site of Cheat Engine
|
| View previous topic :: View next topic |
| Author |
Message |
deama1234 Master Cheater
Reputation: 3
Joined: 20 Dec 2014 Posts: 328
|
Posted: Sun Mar 22, 2015 12:00 pm Post subject: |
|
|
Alright, I can't do this, I've spend hours trying to figure this out...
I tried predicting the EBX address (or any of the other ones), nothing...
I tried to find registers that don't change for the main character, nothing...
I think that guy that made the trainer used a pointer, then he put that pointer's address into "RCX" and compared it to "RBX", then he just kinda "nop"'d the original instruction.
Should be easy enough to find the pointer using the pointer scanner, at least, it was easy for me to find one.
|
|
| Back to top |
|
 |
panraven Grandmaster Cheater
Reputation: 62
Joined: 01 Oct 2008 Posts: 960
|
Posted: Sun Mar 22, 2015 9:19 pm Post subject: |
|
|
From the 222.png's trainer code, there is some hint on making the cheat.
| Code: |
globalalloc(WOOLFE,1024)
label(pPlayerSave)
label(iOnOff)
WOOLFE+10:
pPlayerSave:
dq 0 // this should have saved the player structure address befoehand
WOOLFE+20:
iOnOff:
dd 1 // this should be custom on/off switch probably link to a hotkey to toggle on/off
WOOLFFE+30:
cvttss2si eax,xmm5 // this should be 1st part of the Original code
push rcx
mov rcx,[pPlayerSave]
lea rcx,[rcx+0378] // so if now rcx is Player pointer, +378 is offset for player hp
cmp rcx,rbx // rcx now point to player's hp
jne @f
cmp dword ptr[iOnOff],1 // OnOff code, optional
jne @f
// modify, [rbx+04] probably the maxhp
mov eax,[rbx+04]
@@:
pop rcx
mov [rbx],eax // this should be 2nd part of the Original code
jmp OriginalCode+06
// so the original code is : f3 0f 2c c5 89 03
// ie.
aobscan(OriginalCode,f3 0f 2c c5 89 03)
OriginalCode:
jmp WOOLFE+30
nop
|
Then if the above guessing is right, what left is to find where player's structure is.
I'll suggest find What Access the player maxHp
The game should constantly displaying the player's hp, eg. a hp bar,
And while no enemy around, the related pointer should be Player's
From the trainer code, the maxHP should have an offset +37c.
Then make a scan to the hp display code, obtain the player pointer, save it in pPlayerSave, the cheat should able to make.
gl~
|
|
| Back to top |
|
 |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
|