| View previous topic :: View next topic |
| Author |
Message |
chtmod How do I cheat?
Reputation: 0
Joined: 12 May 2010 Posts: 3
|
Posted: Thu May 13, 2010 9:14 am Post subject: How to continue from here? |
|
|
I've got a game in which I want to freeze the hero's life.
I found the address (in fact I found 5 of them, no less no matter what I've tried). Then I found what wrote to the address:
mov [eax+04],edi
I created a code injection (BTW I finished the code injection part of the tutorial) and got this:
originalcode:
mov [eax+04],edi
jle ordinal10771+14b
Now I got some questions:
-first, could you comment on what exactly does each of the above 2 lines do? I can't understand 'em.
-then, where could I go from here? Mind that I've already tried to NOP the first instruction (mov [eax+04 etc.) and I've obtained godmode- but
me and all the enemies moved much slower (why?) - so *that* is no good.
|
|
| Back to top |
|
 |
Slejur Newbie cheater
Reputation: 0
Joined: 08 May 2010 Posts: 11
|
Posted: Thu May 13, 2010 12:15 pm Post subject: |
|
|
I am no expert, but this is what I think.
mov [eax+04],edi = the "container" with the address [eax+04] will be given the value edi contains.
jle ordinal10771+14b = this is a conditional jump. It will jump if it is less then or equal to a value. In this case ordinal10771+14b.
I am not really sure why your game is slowing, probably your "conditional jump" part don't like NOP. So try something like;
mov [eax+04],#100 or whatever value you find good. Maybe your "conditional jump"-thingy will act more normal.
|
|
| Back to top |
|
 |
chtmod How do I cheat?
Reputation: 0
Joined: 12 May 2010 Posts: 3
|
Posted: Thu May 13, 2010 2:23 pm Post subject: |
|
|
| Quote: | | mov [eax+04],edi = the "container" with the address [eax+04] will be given the value edi contains. |
How can I find out what value edi has?
| Quote: | | jle ordinal10771+14b = this is a conditional jump. It will jump if it is less then or equal to a value. In this case ordinal10771+14b. |
I thought a "jle" instruction was followed by the label to which it must jump. And where is the "cmp"? I thought conditional jumps (jg, jge, jl etc.) were preceded by cmp's.
|
|
| Back to top |
|
 |
Slejur Newbie cheater
Reputation: 0
Joined: 08 May 2010 Posts: 11
|
Posted: Thu May 13, 2010 3:12 pm Post subject: |
|
|
do a "find out what writes to this address" and when cheat engine finds mov [eax+04],edi. Chose the button "More information", and you will get your edi
And about your jle ordinal10771+14b .. I think it will jump to that location in your game. Use "show disassembler" and try to find your cmp, some lines above.
mov [eax+04],edi
jle ordinal10771+14b
Something there has to set a "flag" which jle is checking.
|
|
| Back to top |
|
 |
apocalypticx Expert Cheater
Reputation: 4
Joined: 19 Jul 2009 Posts: 126 Location: UK
|
Posted: Fri May 14, 2010 3:35 pm Post subject: |
|
|
mov [eax+04],edi
Fyi this controls stamina mana life gold and maybe more i havent bothered to check but if you do some simple code injection you can achieve a one hit kill godmode infinte stamina infinite mana maybe more...
|
|
| Back to top |
|
 |
|