Cheat Engine

0_00_0 · Cheater Reputation: 0 Joined: 17 Feb 2007 Posts: 30

Before anything.. i'm not trying to achieve "godmode" or whatever the hell it is.. i'm "attempting" to program a very simple bot in World of Warcraft. Only reading the memory, no writing. I need to come up with a value i can plug into ReadProcessMemory();

From what i understand, WoW is tough when it comes to getting past DMA. I'm kinda intermediate at CE, i'm just now trying to figure out how to get past WoW's DMA.

so I search for my health, i get the addy
0D4BA478

so i see what writes to it, heres what i get
0066379c - 89 0c 90 - mov [eax+edx*4],ecx

here are my values
img257.imageshack.us/img257/967/valuesuo9.jpg

thats pretty much the line i'm not understanding, because its usually just mov[eax], ecx.

anyways, i go to show dissassembler, and heres the screen i get(too lazy to type all that out)

edit: bigger picture now
img101.imageshack.us/img101/256/memoryvaluescj8.jpg
(I can't post urls yet?)

alright.. so i'm assuming its a 3 level pointer? I'm not 100% certain, because i can't get past the 1st one.

I was following a tut in the tuts section when i was trying this: forum.cheatengine.org/viewtopic.php?t=56649. Anyways, hopefully i showed you enough information there for you to get an answer, and perhaps explain it to me. Thanks a bunch for any help you guys can offer!

wowh4xor! · How do I cheat? Reputation: 0 Joined: 18 Feb 2007 Posts: 1

yeah, i'm pretty interested in this too, i had a pretty similar problem.

Dark Byte · Posted: Sun Feb 18, 2007 4:18 pm Post subject:

this is a array or structure
my guess, structure (class) since ecx is used, which is in c++ usually the self pointer

eax is the base of of the object (obtained from the address stored at [ecx+8])
edx is the itemnr inside the object (in steps of 4 byte, so alligned in 4 byte or array 4 bytes)
so base address+edx*4 is the address

usually, edx will be the same, so you can combine that into one offset (e.g edx=1 then offset=4, 2=8, 3=c, etc...)
so focus on getting eax (ecx+ Cool

I recommend a codecave

0_00_0 · Cheater Reputation: 0 Joined: 17 Feb 2007 Posts: 30

Alright, yeah, i did notice that edx is always 16. Could you point me in the right direction for this codecave business? I'm still "fairly" new at this. Probably should have started with an easier game -_-.

wowplr1 · How do I cheat? Reputation: 0 Joined: 02 Feb 2007 Posts: 9

if there is a multiply CE code for WoW that multiplies your EXP from killing beasts or humaniods can you give it to me?Im REALY bad at leveling up and i need that code(if there is one).Can you PLEASE give it to me?

PLEEEEEEEEASE

I can get to lvl 6 in a day,thats sad.

I realy need it,can u plz tell me?

0_00_0 · Cheater Reputation: 0 Joined: 17 Feb 2007 Posts: 30

Hans Henrik · Posted: Mon Feb 19, 2007 3:43 am Post subject:

lol its still a few things you can do thats client-sided, you can speed-hack and you can for example remove the fall-far-down damage, and i guess u can do more 2

(for speedhack i use a program named FU Rootkit, and a program named !xspeed.net V2, and nope, haha im Not banned lol)

0_00_0 · Cheater Reputation: 0 Joined: 17 Feb 2007 Posts: 30

Hans Henrik · Posted: Mon Feb 19, 2007 11:48 am Post subject:

no i didnt make the programs, but i did some hex-changes to !xspeed so the anticheat programmers wont see that the program is in fact !xspeed, now it looks like 1 of those svchost-programs Laughing

and the anticheat programmers wont even see the program is running because of the rootkit
(the anticheat programmers can download any files from your computer, see any running processes and have actually a quite good rootkit detector, they say its "totally anonymous", but to be honestly, i really dont think so haha...)

btw its [email protected], but i dont really want to give that trix 2 to many... :/ if blizzard has any1 registered here and see this, they will most likely fix it, and i love to run super-fast!

joyeuxlutin · How do I cheat? Reputation: 0 Joined: 20 Feb 2007 Posts: 2

I got the same problem as 0_00_0 (what a strange nickname).

I looking for the health of my character in world of warcraft.
I've found a dynamic adress, and it leads to that (it's exactly the same screen as 0_00_0) :
img101.imageshack.us/img101/256/memoryvaluescj8.jpg
(wooo I can't post Urls here)

If I follow this tutorial forum.cheatengine.org/viewtopic.php?t=56649 I've to go up to find the static adress but I can't find it (I didn't understand this part of the tutoriel very much).

I don't know if you are aware that I can't inject code in wow's memory, the warden (a program) is looking for that (maybe I can but it's risky)

So here I am :
1rst dynamic address value : Current health.
2nd dynamic address value : 1rst dynamic address.

And my question is : How can I find the 3rd one?

Can someone help me here? I'm quite stuck...

Thank you
Lutin

P.S : sorry for bad english...I'm french Very Happy

kkid28 · Posted: Wed Feb 21, 2007 2:17 pm Post subject:

Actually your english is better than most people's on the internet :O

I made a pointer tutorial on my website (that's poorly maintained) http://www.freewebs.com/cheatenginetuts/pointertutorial.htm I'd reccomend restarting your computer before trying to find some pointers you're going to keep so it'll work almost certainly. If you don't restart your computer for a while it gets difficult to do and tends not to work. (scanning for pointers and such)

0_00_0 · Cheater Reputation: 0 Joined: 17 Feb 2007 Posts: 30

I thought this thread was kinda dead, so i asked another question... This may be easier for someone to help us out.

here is it though: the post that took me forever that nobody responded to Sad

joyeuxlutin · How do I cheat? Reputation: 0 Joined: 20 Feb 2007 Posts: 2

I've made kkid28's tutorial, but
"find out what writes from this adress" -> "Find out what writes to this pointer" doesn't work, I mean 0_0 is right, when I click this and go hit a monster, nothing appears.

So :
- I've found the first address with the value
- I've found the first pointer (it's still dynamic)

but I can't find the pointer level 2.

How can this be?
[edit] when I click "find out what reads from this adress" then "Find out what writes to this pointer" I find something, I mean it work but it doesn't work anymore on lvl 3 pointers
here is what I've found
lvl 0: xxxxx478 -> value of health
lvl 1 pointer : xxxxx010 -> xxxxx420 offset : 58
lvl 2 pointer : xxxxxxxx-> xxxxx008 offset : 8
lvl 3 pointer : xxxxxxxx -> xxxxxxx offset : 4 (still dynamic)
but "find out what reads from this adress" then "Find out what writes to this pointer" doesnt display anything for the lvl 3 pointer...

when I click "find out what reads from this adress" then "Find out what writes to this pointer"
A few values (like my current health) alternate => 167(current health)-> ???????.
Quite strange ain't it?

see ya.
Lutin

JK · How do I cheat? Reputation: 0 Joined: 22 Feb 2007 Posts: 1

Exactly the same problem here. Where are the master cheater? Wink

0_00_0 · Cheater Reputation: 0 Joined: 17 Feb 2007 Posts: 30

we need some people who know what they're doing, a lot here.