Cheat Engine

mrhussain0334 · How do I cheat? Reputation: 0 Joined: 16 Feb 2021 Posts: 2

So I am trying to hack a game called Golden Sun and create an EXP Multiplier for fun.

Well that fun now has become an obsession to complete it.

So here is what I am trying to do, I am trying to inject code inside the game. The code is single line code.

Very easy nothing so difficult.

But the game crashes :*(

Here is the target code:

Dark Byte · Posted: Tue Feb 16, 2021 1:19 pm Post subject:

It's very likely this code also accesses other addresses.
you need to add checks so that it only affects the address you're interested in

e.g check if EBP is a certain value, and if so, multiply ebx by 2 (shl ebx,1 also works)

Also, change your injection point. Look at this line:

mrhussain0334 · How do I cheat? Reputation: 0 Joined: 16 Feb 2021 Posts: 2

First of all thanks for the reply.

I am a complete noob.

I did try your way, and the game still crashes lol but atleast the vba doesn't crash and I can reset from a save (after I have disabled the cheat)

sbryzl · Posted: Tue Feb 16, 2021 2:19 pm Post subject:

You did one thing db recommended but not both.

Important thing about emulators is to think about what they do and how the memory works. The original system might have different memory spaces for graphics, audio, working ram and other things.

Most emulators have a small number of instructions that read or write data to those memory spaces.

For that reason they usually have a 2 variable pointer. One variable, eax in your case, will be the base address on your computer for that memory space. The other, ebp, will be the offset within that memory space. Once you have the base address for the working ram memory space you can basically just look up cheat codes online and use those as offsets from the base address. Remember the offset is ebp in your case so you can test ebp to see if it matches the offset you are looking for.

The other thing to remember is this instruction could also access other memory spaces though it looks from the jumps in the code that it may not. If it does you would also need to do a check to make sure the address you are looking at is not only the correct offset (ebp) but also the correct memory space (eax).