edlan
How do I cheat?
![]() Reputation: 0
Joined: 04 Jan 2008
Posts: 2
|
 Posted: Fri Jan 04, 2008 2:16 am Post subject: Re: Step 9...so lost |
 |
|
| Dïspaïr wrote: |  i scraped thru Step 8.. but 9 is insane any1 got any pointers on what to do or a tutorial? |
I thought it was easier than lesson 8. This time there are alot more hints in the instructions. Here's how I did it, step by step:
1. Start Cheat Engine
2. Start Tutorial.exe
3. Add Tutorial.exe to the process watched by CE
4. Go to lesson 31337157
5. New scan for the health value, e.g. 100
6. Press 'hit me' on Tutorial
7. Next scan for health value, e.g. 99
8. Add address and value to watch list
9. Right click and find out what writes to this address
10. In the debugger click on more information. You'll see the code address plus assembly instruction. Record this code address and the value of the register. e.g. ebx and the offset value. The line should look like this: 00455DEA dec [ebx+00000310]
11. Use a hex calculator to add the ebx register value plus the offset which is 310. We'll call this value A.
12. Click on Show disassembler to bring up the memory viewer.
13. On the memory viewer click on Tools->Script Engine
14. Cut and paste the code sample on the Tutorial to the Script Engine window.
15. Change 'addresstochange' to the value A you calculated earlier. Append a 0x in front of this value. e.g. 0x008F2850
16. In the script engine window click on Inject->Inject into current process
17. It should bring up a new Auto assemble window and you'll see the command 'call 00B100CD' where 00B100CD should be a unique value to your computer.
18. Back in memory viewer, select Tools->Auto assemble
19. Click on Template->Code Injection
20. Back on step 10, there was the code address associated with the instruction. Use that code address in the dialog box. e.g. 00455DEA
21. In the latest autoassemble window, copy the code from the previous auto assemble window, e.g. 'call 00B100CD', and paste it underneath '//place your code here' in the new auto assemble window. Delete the code under 'originalcode:', e.g. 'dec [ebx+00000310]'
22. Click execute in the new autoassemble window.
23. Click 'hit me' in the tutorial window
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
