CHEATENGINE Enable- Minion # pointerÿ{[ENABLE] alloc(newmem,2048) alloc(myvar1,4) label(returnhere) label(originalcode) label(exit) registersymbol(myvar1) // shift by A20 in patch 1.2 005C2BFD: jmp newmem nop returnhere: newmem: mov [myvar1], esi originalcode: add ecx,[esi+00000204] exit: jmp returnhere [DISABLE] dealloc(newmem) dealloc(myvar1) 005C2BFD: add ecx,[esi+00000204] Enable- HP pointerÿb[ENABLE] alloc(newmem2,2048) alloc(myvar2,4) label(returnhere2) label(originalcode2) label(exit2) registersymbol(myvar2) 005C3029: jmp newmem2 nop returnhere2: newmem2: mov [myvar2], esi originalcode2: fld [esi+0000042c] exit2: jmp returnhere2 [DISABLE] dealloc(newmem2) dealloc(myvar2) 005C3029: fld [esi+0000042c] Enable- Mana pointerÿ_[ENABLE] alloc(newmem3,2048) alloc(myvar3, 4) label(returnhere3) label(originalcode3) label(exit3) registersymbol(myvar3) 005C3043: jmp newmem3 nop returnhere3: newmem3: mov [myvar3], esi originalcode3: fld [esi+00000470] exit3: jmp returnhere3 [DISABLE] dealloc(newmem3) dealloc(myvar3) 005C3043: fld [esi+00000470] Enable- Gold pointerÿj[ENABLE] alloc(newmem4,2048) alloc(myvar4, 4) label(returnhere4) label(originalcode4) label(exit4) registersymbol(myvar4) 005C2CED: jmp newmem4 nop returnhere4: newmem4: mov [myvar4], esi originalcode4: mov edx,[esi+000001f8] exit4: jmp returnhere4 [DISABLE] dealloc(newmem4) dealloc(myvar4) 005C2CED: mov edx,[esi+000001f8] Enable- Evilness pointerÿŸ[ENABLE] alloc(newmem5,2048) alloc(myvar5, 4) label(returnhere5) label(originalcode5) label(exit5) registersymbol(myvar5) //00644FA4: // Shift by 8A0 in patch 1.2 00645844: jmp newmem5 nop returnhere5: newmem5: mov [myvar5], eax originalcode5: fild dword ptr [eax+00000128] exit5: jmp returnhere5 [DISABLE] dealloc(newmem5) dealloc(myvar5) 00645844: fild dword ptr [eax+00000128] Mana pointer°J4A027FB0<pmyvar3 HP pointer,0000042C;,myvar2 Gold pointerÀÍ020ECDC0=ømyvar4Minion # pointer00000204:myvar1Evilness pointerÈÍ020ECDC8>(myvar5*Enable- Others HP to 1, My HP to 5k on hitÿ![ENABLE] alloc(newmem7,2048) alloc(myvar7, 4) alloc(mytest, 4) label(returnhere7) label(originalcode7) label(exit7) label(monster7) registersymbol(myvar7) registersymbol(mytest) //3F800000 = 1 float to 4byte //459C4000 = 5000 float to 4byte 006A20EB: jmp newmem7 returnhere7: newmem7: mov [myvar7], esi // Store current pointer push eax push ecx mov eax, [myvar2] //+42C - my HP pointer (ESI+42C) mov ecx, [myvar7] //+E4 - current pointer add eax, 42c add ecx, e4 cmp eax, ecx jne monster7 // it's me mov [eax], 459C4000 // set hp 5000 pop ecx pop eax je originalcode7 monster7: // it's not me pop ecx pop eax push eax mov eax, [myvar7] add eax, e4 cmp [eax], 3F800000 // if already 1 then allow normal damage pop eax je originalcode7 push eax mov eax, [myvar7] add eax, e4 mov [eax], 3F800000 // set hp to 1 pop eax originalcode7: mov edx,[ecx] mov eax,[edx+24] exit7: jmp returnhere7 [DISABLE] dealloc(newmem7) dealloc(myvar7) dealloc(mytest) 006A20EB: mov edx,[ecx] mov eax,[edx+24] Enable- Brown invincibleÿ£[ENABLE] alloc(newmem8,2048) alloc(myvar8, 4) label(returnhere8) label(originalcode8) label(exit8) label(skip8a) registersymbol(myvar8) //0x459C4000= 5000 //0x41F00000 = 30 //0x449A4000 = 1234 006A20D3: jmp newmem8 nop returnhere8: newmem8: mov [myvar8], esi cmp [esi+e4], 41F00000 // brown = 30hp jne skip8a mov [esi+e4], 459C4000 // brown = 5000hp jmp originalcode8 skip8a: //cmp [esi+e4], 41700000// blue = 15hp //jne originalcode8 //mov [esi+e4], 459C4000 // brown = 5000hp originalcode8: fsubr dword ptr [esi+000000e4] exit8: jmp returnhere8 [DISABLE] dealloc(newmem8) dealloc(myvar8) 006A20D3: fsubr dword ptr [esi+000000e4] ,myvar8ümyvar10:myvar1;myvar2<myvar3=myvar4>myvar5Nmyvar7Nmytest