Cheat Engine

tboss · How do I cheat? Reputation: 0 Joined: 21 May 2009 Posts: 8

I used Cheat engine to create my auto assembly cheat, witch works perfectly. (It's in quake 3, when I send kick without any parameter, it executes my code.) But now that it's finished, I have 2 problems.

Here is my code :

tboss · How do I cheat? Reputation: 0 Joined: 21 May 2009 Posts: 8

I finally found the pointer I needed. But how to do for the fullaccess ??

Dark Byte · Posted: Fri Jun 24, 2011 8:03 am Post subject:

virtualprotectex

also, do you mean patching the dll itself, or just using your own code to edit the memory ? Because if you patch you don't need to change the protection( or are you patching from inside the .exe that you have edited)

tboss · How do I cheat? Reputation: 0 Joined: 21 May 2009 Posts: 8

First, thank you for your answer, and thank you for Cheat Engine witch is a realy useful program.
I've already found the function virtualprotect. Am trying to patch the dll from the exe when I type something in console, and I can't edit the dll.
But when I call VirtualProtect it fails. Probably because I can't use ebx for "out" variable, or maybe do I need to open a hook and use virtualprotectex...

Actually, here is how I call VirtualProtect :

Dark Byte · Posted: Sun Jun 26, 2011 9:52 am Post subject:

004E3DF0 is most likely not writable

allocate memory for it or give it an address on the stack

e.g:

tboss · How do I cheat? Reputation: 0 Joined: 21 May 2009 Posts: 8

It still jumps with your code... Sad

Is the call correct ?? I mean the args ?

Dark Byte · Posted: Sun Jun 26, 2011 10:36 am Post subject:

is the dll loaded at the time of execution ?
If not, load the dll manually using loadlibrary and use the address you get from that

tboss · How do I cheat? Reputation: 0 Joined: 21 May 2009 Posts: 8

When I call kick, witch executes my code, the dll is loaded. But I cant debug when the dll is loaded, the breakpoints doesn't do anything... Maybe a patch in the dll... Sad

Maybe should I use VirtualProtectex ?
Or maybe could I create a dll witch does it and then use loadlibrary ? (but I don't know how to do dlls Sad

)

tboss · How do I cheat? Reputation: 0 Joined: 21 May 2009 Posts: 8

GrandPa · Posted: Sat Dec 10, 2011 8:20 pm Post subject:

I had a similar problem to the one placed by tboss, so I'm posting my thread here instead to open a new one. I'm asking for suggestion on it in order to avoid future troubles using this method again.

Like in the example from tboss, my script worked well using CE, but I would like to hard-coding it into the executable. The exec is heavily protected, but a possible workaround to the problem, I thought, was modifying a dll it used. I tried to modify the exec, changing part of its code at run-time, in order to calling the cheat from the dll file as follows: