Cheat Engine Starter operation

Cheat Engine (abbreviated CE, Chinese name - Cheat Engine), is used to find, modify memory data, the game is the reverse of the underlying instrument.

This article describes only basic operations.

1. Open the process

  Run the game program and CE attach to the process

                 

2. Look for the address data, and modify data

  Defining a search condition, until the data is found. You can pause the game when scan data

  For example: the initial value of the known blood

  a. When the game starts, pause, seek initial value.

  b. to start the game, let the blood reducing, suspending, reducing the value to retrieve.

  c. Repeat a and b of the operation, until the value appears on the left qualifying

  

 

   

3. Pointer Data

  If the above steps and no effect, indicating to find the address of a variable (of course, may be the wrong), the address data is a pointer to change, we must find who is to change the data, that is, the first pointer ( not sure exactly how many level pointers)

  a. inhibit pointer modify data

    

  

  b. a pointer to base pointer to find

  Objective: To find the beginning of the pointer, plus an offset, points to the data found

   

  

  

 

  c. Multi-level indicators

    And a pointer to find similar find more layers on the line until the green address (find the base pointer). Note pointer offset, when the last manually add addresses, click the Add Offset adding an offset.

    Example: three pointers

    [[[1-yl pointer + offset] + offset 2] + offset 3], Add Offset offset 1,2,3 filled.

4.inline hook

  In the original code (address Y) add your own code or modify the source code.

  principle:

    1. In the target application process memory space (code A), write your assembly code in A. (A last instruction to return to the next edit (jmp Y + 5))

    2. The Y instruction to jmp A, skip their application execution code memory

    3. jumps back to Y + 5

 

  Automatic Assembler code injection → → → template (autofill address) point OK, the right to give

           

5. Memory View

  Some of the data obtained difficult to scan, the memory can view (View button click memory), memory viewer window the following assembly code.

  Memory address difficult to obtain, but because the development of programs, data structures mostly forms, such as character attributes (blood, blue, ..., etc.) in a body structure.

  Analyzing may be approximately the same memory address range of other structures in the body by an easy to find a memory address. (See more up and down)

  当游戏运行时,根据情况的不同,内存数据会变化。找到变化的地址(数据会变色),在主窗口手动添加地址就能改了。

Guess you like

Origin www.cnblogs.com/jf-blog/p/11245016.html