Cheat Engine

[DTeCH]

Hey guys


I know that the common answer to this question would be to go check out the source on Google's code site where CE is hosting it's source, but as much as I've stared at it, I must admit that I don't understand a thing i'm looking at. It's like me gazing at Japanese (the old school Japanese too! ), & expecting it to magically make sense some how.

All I want to know is what functions are available, & how to basically call them once injected. I've written quite a few injectors over the years when I was an AVA addict, but I'd like to see a sample call to enable/disable the DLL's whatever... like hooking, or whatever it does once injected.

I use the speedhack in my trainers made with CE's trainer maker thing, & It works just fine. I just hate the freezing of the resulting trainers while scanning, or using AoBSwap, so I've made my own in pure .NET

Now I'm stuck on the speedhack-i386.dll usage.

This is how I used it in CE's LUA thingy...

[Dark Byte]

You'll have to hook/redirect the timer api's to the ones in the dll, and fill in the original api function call stub address (the speedhack dll can't be loaded without any assembly changes by a secondary program)

Also, your usage of createNativeThread is wrong. Never touch any gui objects in a thread

Use it to do Memscan object scans and writeInterger/autoAssemble calls with the results of the memscan
Certainly don't use processMessages inside a thread

[DTeCH]

I just knew I was using createNativeThread wrong! lol


The trainers seems to do those SpeedHack things automatically somehow without any input from me, and leads me to assume that whatever process I inject into has a set location of the timer API call... I think this because the trainers all work flawlessly, & I didn't do anything extra to get it done other than tell CE to add the SpeedHack feature, & me calling it with a parameter of 5, or 1.

I really want to understand it, but have nothing to read, or no one to watch while they do it. It looks like I'll really have to learn Delphi/pascal - which isn't gonna happen any time soon. Won't be mastered overnight.

I guess I can figure out a way to get it redirected to the DLL, but I have never done this before, & is left to wonder if there's some set header location, or whatever that is constant, & mandatory for programs to have that I can alter, or does it have to be scanned for? (Timer API) ...or even the system's Timer API maybe?

In any event... I'm going to try to re-do the createNativeThread thingy to see if I can get it right this time. An example might be best - based on the code I have above would be nice, or not. lol