Cheat Engine

[Epz]

Hey there. I've been wondering so long how do I capture some kind of action in game? Well... I mean action as some game move in example if I open some menu so -> ("OPEN MENU"). How do I capture that and I make my C# trainer open that menu without sending any keys to game itself?

I'm asking, because I don't have any kind of clue what it's called for or what keywords I can use to search some examples / tutorials.

Thanks!

[atom0s]

You would need to scan the memory of the game for the menu related data and see if you can force open the menu by writing something to the memory of the game.

In some cases the menu index could be a good place to start finding where the menu data is stored. By that, I mean if there is a menu with multiple options try scanning for 0 or 1 as the first option, then add 1 for each menu you go down.

For example, this games menu looks like this:


Missions could be offset 0 or 1, Quests could be offset 1 or 2 and so on.

So for this game you would highlight Missions, search for 0.
Go down to Quests and research for 1.
Go down to Key Items and research 2 for.

And so on to see if you could find the menu data. Then around that might be a flag to state if the menu is open or not that you can write a value to and open the menu with.

You can also trace what writes to the menu info that you find to see if you can find a function in the game to open the menu. Then you could use CreateRemoteThread to invoke the function.

[Epz]

Well. I find the memory in Memory Viewer that changes when menu appears on game and so on, but I have no clue how to make it simple. It changes array of bytes between like 50 lines of array of bytes. Changes is shown as red glow under memory viewer's bottom thing. Is that something correct relating to appear? I tried to search menu open and closed trigger like "0 and 1" -> "closed and open"

[justa_dude]

If you can browse the imports to find some relevant bits that handle input, you can set a breakpoint and step out until you find the logic code. Ultimap works pretty well for finding this stuff, too.

[Epz]

Well. I found one call function in Memory View that calls the function for open a dialog (Notepad++) if I set a breakpoint there and I try to open the dialog in Notepad++ it will not open it, because of breakpoint. So I think it's correct place, but... how do I make sure how long way I have to copy the assembler code before I have to stop that I can make Thread of it without crashing?

[Epz]

E: Bump

(Changed to normal notepad)

Edit 2: I got it work without crash. If I open a notepad. I simply attach the Cheat Engine on it. If I click "Help -> About Notepad" I get Window opened up. I have several problems with it now that I figured out (figured out the reason how it crashes, but I don't still have solved how to fix the crash)

1. If I don't have manually opened the Window once and left it on and I execute the "Create Thread" on it. It will open more windows of that and it works, but if I close one of the windows the Notepad crashes.

2. If I don't have opened the window already manually then it crashes immediately when I execute the Create Thread thing.

NOTEPAD.EXE+1BA8 <- Start of calling the external window open in my notepad.

Edit 3: http://i.imgur.com/xEMFqmj.png