Cheat Engine

[adaptusaaf]

I'm trying to make an aimbot for a game (not with direct x or direct draw or whatever)

I need an automated and real-time way to have cheat engine read the value from one address in the game, and based on my own parameters, write a different value to another address in the game.

For example,
if the value at address "A" is 0, write the value "0" to address "B"
if the value at address "A" is 1, write the value "342" to address "B"
if the value at address "A" is 2, write the value "5" to address "B"
if the value at address "A" is 3, write the value "9000" to address "B"
if the value at address "A" is 4, write the value "0" to address "B"

I need it to do it very quickly though because the aiming is very fast paced.

How do I do this? I would prefer to not use another program but maybe I will have to?

[Dark Byte]

Use code injection at a part of the game that is executed a lot (e.g once a frame)

I recommend writing the code in a dll for high level calculations and let the hooking be done by ce

[adaptusaaf]

can you give me example of a code that would do this? I'm a noob and don't have slightest idea how to write the code or write dll or hook using CE

I do understand the concept of what you said to do but that's it..

[xeratal]

I have done something like that in the past for a different kind of hack. It's also kind of ugly but it works for me. I too would love to know how to write dll's which can alter process memory though...

This is an example for you based on my (ugly) code. All you need to do is make a script (CE -> Memory View -> Tools -> Auto Assemble) (I can't remember if there's 1 more step...) and dump this code in, filling in your own values.

Suppose that:
00400000 is the address of the code which is executed a lot (you will have to find this yourself)
00A00000 is the address of A
00B00000 is the address of B

[adaptusaaf]

thank you for that code it seems perfect for what im trying to do (although, instead of 4 'if thens' i have 45, so it could be pretty slow)

I tested it however, by finging an area of the game which is run once per frame, so very realtime, but unfortunately it makes it instant crash. I changed all the values to my own game and triple checked everything, for some reason it just doesn't like the frequently accessed code being rewritten to the newmem, I guess that tiny pause it takes to change the address location crashes the game because its run so frequently.

[xeratal]

I tried to do something similar but in a "protected area" (pardon my lack of technical terms, I myself am a noob but I'm doing self-learning at what I think is a very fast pace...) of the code and it crashed (actually it got detected and closed itself).

I think what you will want to do to check whether your theory is right is to do it step by step:

e.g. your game code @ 00400000 is like this
00400000 call x
00400005 mov [00400000], 0

Step 1: allocate some memory
Step 2: in allocated memory, put call x, jmp 00400005
Step 3: modify 00400000 to jmp to allocated memory

In this example, your "hack" will do nothing. But it tests whether the jmp can even be made, and if it can then you know you can go from there. If it can't then you have to try something else.

Slightly offtopic: Like for me, I've been trying something exactly like this on a gameguard protected game. Just by doing something like this, the "hack" will get detected (gameguard probably checks for the return address). (I know of other methods to do it but I'm trying to learn more)

[adaptusaaf]

This particular game has no protection like that at all
I got past the crashing, the problem was that the jmp to the newmem messed up the address right after it, somehow.

to fix it, I made it like this:

[xeratal]

Edit: Nice

P.S. your original crash was my fault; I should have warned you to fill whatever extra bytes you had with NOP's.