Cheat Engine

marko001 · How do I cheat? Reputation: 0 Joined: 24 Jan 2013 Posts: 4

Hi to all guys,
i'm playing around with a game trying develop a Bot based on memory reading instead of pixelcolors and mouse move.
In the past I used AutoIt to achieve that, and now, still using AutoIt, I'd like to use memory reading and injection.
I have no troubles (let's say minor torubles) in finding pointers and statics.
My problem is finding WHEN a button is clicked and INJECT it through Autoit.

To clarify it: I want to autofill username/pw fields and start login procedure (i.e. clicking the LOGIN button)

I'll appreciate any hint on that.
Thanks a lot,
M.

Fresco · Posted: Wed Apr 22, 2015 9:18 am Post subject:

Backtrack an action of the button.

If you were the programmer, you would have some kind of function ( or method, or action listener, call it however you want ) that gets executed when the button is pressed.
Inside that function you would make the program do something.
Most often ( like, kinda, always ) you would have it change some variables.

So to find the button's procedure, you need to find a variable or something tied to it.

Once you've found that, just simply find out what writes to said variable.

From the code that writes to the variable scroll the assembly listing up until you either see "int 3" or "push ebp; mov ebp, esp", that signals your button procedure start. if you want to find out who called the procedure, scroll down until you see a "ret" instruction. right lick on the ret instruction, break and trace, 3 instructions is enough.

Just know that you don't necessarily want to specify that the game you're hacking is online, because, talking about online cheating is against the forum's rules.

PS: The above works for offline games too :)

marko001 · How do I cheat? Reputation: 0 Joined: 24 Jan 2013 Posts: 4

Hi Fresco ,
I tried what you told me but found it really hard to understand.
So I decided to create a simple program that just "do it" so I can exercise with it.

Here is the code (AutoIt):

Fresco · Posted: Wed Apr 29, 2015 12:38 pm Post subject:

No need to run it, I can see from a distance what it's trying to do.

Yes, that's exactly what I've said.
You must search with Cheat Engine the variable $startvalue
Once you've found the variable ( i.e. the address ), find out what writes to this address. This will show you the code that writes to $startvalue which is $startvalue +=1 and $startvalue -=1 from there scroll down until ret, then break-trace 3 instructions. This will bring you to: _cambiatesto(1) or _cambiatesto(2)

Pushing the button means either calling _cambiatesto(1) or _cambiatesto(2)

In pseudo-assembly would be something like: