Cheat Engine

Qvazzler · Posted: Wed Oct 20, 2010 11:29 am Post subject: Flash and me

I really don't get this part.

The ebp stays the same, but there's always a new assembly instruction on that address. I want to go back to see where the values are coming from (health), but I have absolutely no clue on how to go back when the address of EBP, while staying the same, the assembly instruction changes frequently.

Am I missing something? Should I be looking somewhere else rather than at the instructions?

Perhaps I should considering checking more tutorials, but I've been searching about this, and I really don't get it.

If it helps to know, it's a flash game.

Geri · Moderator Reputation: 112 Joined: 05 Feb 2010 Posts: 5627

In most cases, the idea of hacking a flash game with code injection is useless without using AOBscan.

The address of the code will always change. Furthermore, the codes are usually changing a bunch of other values too, so if You nop/change the code, the whole game will crash.

Qvazzler · Posted: Thu Oct 21, 2010 5:33 am Post subject:

So I've noticed. Sad

I really don't see how I'm supposed to get to where address 09615211 was jumped to from.

Any advice on a different way to search for the hitbox/godmode piece of code?

Dark Byte · Posted: Thu Oct 21, 2010 7:27 am Post subject:

it was jumped to that address from 0774b28d

Qvazzler · Posted: Fri Oct 22, 2010 1:17 am Post subject:

So that's what you meant by stack view?

Thanks. Smile

Geri · Moderator Reputation: 112 Joined: 05 Feb 2010 Posts: 5627

Yep, You can see where did You come from at the top of the stack.

Qvazzler · Posted: Fri Oct 22, 2010 9:36 am Post subject:

Alright.

And just to be sure, is there no way to get static addresses in a flash game? From what I've found so far by searching for an answer is that there are no pointers whatsoever in flash games.

The game I have currently targeted for kicks also has not shown any sign of static addresses.

Geri · Moderator Reputation: 112 Joined: 05 Feb 2010 Posts: 5627

If You are very very very lucky and You find a code which is accessing to one address only, You can use aobscan in Your script to search for that code. Like I have written about a game in another post:

Qvazzler · Posted: Fri Oct 22, 2010 11:24 am Post subject:

Thank you for your response Geri.

As I've been on here off and on, I've noticed more and more that there are a lot of bogus tutorials made by people who have not gotten a proper idea of how things work. With that said, I am a very incomplete assembly programmer, but instead of just learning "how to hack", I wish to get an understanding the environment.

If you have good references that you personally favor, no matter what it is, please link it to me and I will try to make use of it. And for the record, I rarely script with the auto-assembler. I just wish to learn in what order things are done in the opcode instead of erasing opcodes and altering values.

I will also take a closer look on the aob scan that you speak of, perhaps even read a tutorial or two when I have the time.

Geri · Moderator Reputation: 112 Joined: 05 Feb 2010 Posts: 5627

The best reference is probably DarkByte and some other members who are clearly professionals in things. I think all section on the forum has its guru. Maybe even random spam. Smile