Cheat Engine

ParoXsitiC · Newbie cheater Reputation: 0 Joined: 22 Aug 2006 Posts: 10

The only thing I am going from is T-search's help on code injection.
I am attempting to write values to an adobe shockwave game. I want the score to be 5000 decimal.

I used Tsearch to find the value I want to change is located at the DMA address:

80AC588

I turn on the debugger and autohack the address and find the follow opcode:

4AD0BFC mov [eax+0x4],ecx

I then open Cheat Engine and search for a code cave, I use the first one found:

400019

I then go back to Tsearch and open easywriter. I write the following code:

ParoXsitiC · Newbie cheater Reputation: 0 Joined: 22 Aug 2006 Posts: 10

I found the auto assembler in cheat engine. I still don't understand the language 100%. Especially labels and what not. I also dont know when Ill need to nop

ParoXsitiC · Newbie cheater Reputation: 0 Joined: 22 Aug 2006 Posts: 10

I found out what I was doing wrong orignally, I was using a ret command with a code cave, and also my code cave was incorrect. None the less I still can't figure it out. I am pretty sure it has somehting to do with NOPPING and knowing what to use.

Here is disassembled output:

Dark Byte · Posted: Wed Aug 23, 2006 2:01 am Post subject:

some more auto assembler info:
http://forum.cheatengine.org/viewforum.php?f=15

about your script:
you say that 680e0bfc would be the spot to place the jump.
but your script places the jump at 680e0c1f

and in the cave jump to 680e0bff.
I'd say: Infinite loop

ParoXsitiC · Newbie cheater Reputation: 0 Joined: 22 Aug 2006 Posts: 10

Sorry about that, the 2nd code I posted wasnt my real script, I re-created it while looking at the disassembler output. Made an error, My real script didnt have that error.

Here would be the real script:

idster · Posted: Wed Aug 23, 2006 11:15 am Post subject:

before u do any hack/code-injection, load the game then speed hack it

it may sound a bit cheesy but giving the speedhack these settings will work
speed=0.00001
sleeptime=100000

the game will look frozen(it's not)

it will be alot easier to hack(and easier to find out what went wrong)

ParoXsitiC · Newbie cheater Reputation: 0 Joined: 22 Aug 2006 Posts: 10

Freezing the game did nothing at all. True it didnt crash when I injected the code, but as soon as a turn speedhack off IE closed.

Here is the autoassembly code:

ParoXsitiC · Newbie cheater Reputation: 0 Joined: 22 Aug 2006 Posts: 10

I realized that newmem was running 2 address the mov and push, So I decided to set the normal game routine manually:

Dark Byte · Posted: Thu Aug 24, 2006 3:23 am Post subject:

perhaps that code is also used by other stuff and editing ecx will cause it to crash when used by other code that uses it.

you're saying it's IE, so it's more than likely a interpreter instruction instead of a instruction of the game you're trying to hack.