| View previous topic :: View next topic |
| Author |
Message |
jammoca
How do I cheat?
![]() Reputation: 0
Joined: 02 Apr 2008
Posts: 4
|
 Posted: Wed Jun 18, 2008 12:24 pm Post subject: locked variable not locking |
 |
|
a number of times, I have found a game where I can isolate the necessary variable ( let's say ... time ) and though I check the box to lock it, time in the game continues to count down.
Is there something I can do in this situation ?
|
|
| Back to top |
|
 |
Slugsnack
Grandmaster Cheater Supreme
![]() Reputation: 71
Joined: 24 Jan 2007
Posts: 1857
|
| Posted: Wed Jun 18, 2008 12:34 pm Post subject: |
|
|
If you are sure the value you found is the right one, then you can find what is writing to it (debug that address) and manipulate the instructions so it no longer counts down.
eg. if it were moving a certain time into a buffer by this:
mov [01234567], ecx
Then you could do a code injection to and make it do this instead:
mov ecx, #1000
mov [01234567], ecx
jmp original_mem
Otherwise, the address you have found may be only the visual counter. Perhaps the real address uses encrypted values, etc. etc.
|
|
| Back to top |
|
|
Pingo
Grandmaster Cheater
![]() Reputation: 8
Joined: 12 Jul 2007
Posts: 571
|
| Posted: Wed Jun 18, 2008 3:16 pm Post subject: |
|
|
| Slugsnack wrote: | If you are sure the value you found is the right one, then you can find what is writing to it (debug that address) and manipulate the instructions so it no longer counts down.
eg. if it were moving a certain time into a buffer by this:
mov [01234567], ecx
Then you could do a code injection to and make it do this instead:
mov ecx, #1000
mov [01234567], ecx
jmp original_mem
Otherwise, the address you have found may be only the visual counter. Perhaps the real address uses encrypted values, etc. etc. |
Would you write that code into the original address or the one that writes to it.?
Also what if it was moving it into the buffer like this
mov [07654321], ecx
would the code injection look like this
mov ecx, #1000
mov [07654321], ecx
jmp original_mem
Last related question.
What if the address that it writes to isnt static. Will that make it usless next game reboot.
sorry for all the questions but i tried to keep them on topic.
|
|
| Back to top |
|
|
Labyrnth
Moderator
![]() Reputation: 10
Joined: 28 Nov 2006
Posts: 6301
|
| Posted: Wed Jun 18, 2008 4:30 pm Post subject: |
|
|
| No you would have to jump to a cave. Then do your code and jump back.
|
|
| Back to top |
|
|
Pingo
Grandmaster Cheater
![]() Reputation: 8
Joined: 12 Jul 2007
Posts: 571
|
| Posted: Wed Jun 18, 2008 5:41 pm Post subject: |
|
|
Thanks Labyrnth
It seems real simple now that i think about it. Im gonna give it a go tomorrow.
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
