a question about cheat engine and other similar tools.

[pikachu5501]

I have weird stuff happening:confused: . I want to make a small trainer and all.. all that part is ok for me. It is just that in some game, it seem that i find the adresse of a value (life for example) but when i change it to the max (at 999 or anything else with cheat engine for example) it is like i did not do any change and the life keep decreasing as it was but when it change, i can still see the value decreasing but when i change it, it is like i din't do anything.... weeiird i say!.

I dont need a full tutorial or a detailed explanation about how to do this and that. I can manage to do that myself. The best way to learn is by searching ourself but sometime, i need a hint about where to go or where is my mistake.

Thank again all for any usefull support.

[DABhand]

Its what I call a ghost value, i.e a value that is only for the screen.

Look a bit deeper to this value as it has to get from another location to update the screen.

[pikachu5501]

Something like to show the life bar. I though so it was something like that and it was a float also. It is a game itself to cheat sometime.

Thank you :)

[DABhand]

I wonder what game it is your talking about.

[pikachu5501]

Spider-man 3 but i din't buy it myself. It is someone's else. I am not really into playing game and all. I rather make trainer for friends, family and all. I did some successfully but when i get my hand on some newer game, sometime it is not easy to get hold of some value.

Unleashed just released a trainer for it but i wonder how they manage to find the value. I tried everything increased, decreased, changed, no changed, in float, 2, 4, 8 bytes double in any combination possible... anyway. I wish they have a forum or something, i would ask them how they did find the value of the lifebar :p . Sometime, even if trainers exist for a game, i like doing one for the fun of it and to learn something on the way. If there is none done yet, i share them with the "scene" like uploading them on ul.gamecopyworld.comom.

[Labyrnth]

Hello DABhand, So this is where you hang out :D
Good to see some familiar names still around.


pikachu5501: for that life bar, since you are using cheat engine.

Try doing unknown scan for the first scan and then doing decreased scans till you get the health address.
or
You can do the first scan for a value between 1 and 1000.
Then do decreased scans till you find it or has changed.

[pikachu5501]

oh! i tried that too.. i told you.. everything in every way.. this is crazy sometime. i tried range 0 to 100.. to 1000... even tried to do an "increase" instead of decrease... anyway i slept at 3 am from 9 pm. Wow! i am not realy proud of myself. Last time i had a night without sleep because of a computer is when i played syndicate and that was a long time ago :p

anyway. good night all. it is time for me to go sleep "earlier" this time.

[DABhand]

Here is what i was talking about.


Say for example (these will not be the values in the game just using as an example)

004024EB MOV [EAX+0C],EBX

Was the ghost value (updated screen value), then where did the value in EBX come from.

This is what you have to find out, and dig into the code more, especially above the code.

Perhaps you will see

MOV EBX, [EDX+8C] or something, which then would be safe to assume that the [EDX+8C] is the location of the real value for the life bar, with a bit of code injection you could force a value into it.


Also be aware that the real life bar value might be encrypted and the game uses XOR to get the real value, which then you will take a while to find out.

ALSO

Some life bars in games increase a value when losing life. So 0 would be a full bar, while 100 could mean no health left.


Keep searching :)


Or you can dump the assembly around that value so I can see what is happening.

[DABhand]

Hello DABhand, So this is where you hang out :D
Good to see some familiar names still around.


pikachu5501: for that life bar, since you are using cheat engine.

Try doing unknown scan for the first scan and then doing decreased scans till you get the health address.
or
You can do the first scan for a value between 1 and 1000.
Then do decreased scans till you find it or has changed.


HI Lab :)

Ive been here a long while now :P

[pikachu5501]

DABhand


004024EB MOV [EAX+0C],EBX

Was the ghost value (updated screen value), then where did the value in EBX come from.

This is what you have to find out, and dig into the code more, especially above the code.

Perhaps you will see

MOV EBX, [EDX+8C] or something, which then would be safe to assume that the [EDX+8C] is the location of the real value for the life bar, with a bit of code injection you could force a value into it.


Sound easy for me.

The second time (the next day) i tried to find the value that was assossiated with the value, it was nowhere to be found. Funny. anyway.


Also be aware that the real life bar value might be encrypted and the game uses XOR to get the real value, which then you will take a while to find out.


someone should be able to find something with "changed" and "unchanged" anyway and look in the region what changed when something appended and then so some calculation, no?


Some life bars in games increase a value when losing life. So 0 would be a full bar, while 100 could mean no health left.


That i tried for sure. :p


Keep searching


oh, i will. i like that.

Thank for all you good advices. I hope one day i will be able to return the favor.