Hint & Tip Galder

[Genryu7]

Well 15 mins ago, I tried to do the noob galder hack, you know how much I have now, get some more galder change the code etc etc, but it was client sided, and I read somewhere in this section how to do it differently but I didn't really understand it, could someone explain me this?
How to change your galder both client and server sided?

[Sago Mage]

ermm..
packet editing?
iernno
but packet editing is illegal..
like..
go to jail illegal

[nekkron]

ok, when you search for the current galder you have, all you are doing is searching for the 'text string', you can change this value if you find the address for it, but it will only show client side. to change it on server side, you must use 'find what writes to this address', and then find the pointer where that address leads to, and then change. if you aren't sure what those 2 steps mean, just say so and we can provide some resources for you to find out.

[Genryu7]

ok, when you search for the current galder you have, all you are doing is searching for the 'text string', you can change this value if you find the address for it, but it will only show client side. to change it on server side, you must use 'find what writes to this address', and then find the pointer where that address leads to, and then change. if you aren't sure what those 2 steps mean, just say so and we can provide some resources for you to find out.

Well, last time I also did the ''find what writes to this address'' but then I lost it, I'm not that good with the following it gave me this code ; code :0041b41e - 89 85 6c 4d 00 00 - mov [ebp+00004d6c],eax can you explain me what this means? And could you explain me the pointer please?

[hellebore08]

well i tried that too.. i know now how to change my galder client sided... but when i try to do the "find what writes to this address".. spuc3ngine tells me that it cant attach the debugger... that i should try processpicker.. and or that i must hav debugging rights... how to do this?? hop we can help together.. ^_^

when i first click on "find what writes to this address" it posts this :

-This will attach the debugger of spuce engine to the current process. Continue? Yes/No

when i choose Yes..

-(Attach Failure) spuce engine failed to attach the process. (Error=5)

-(Spuce Engine) I couldn't attach the debugger to this process! You could try to open the process using the processpicker and try that! If that also doesn't work check if you have debugging rights.

then the spuce engine unattached the trickster.bin

Can someone help me through this??

[nekkron]

code :0041b41e - 89 85 6c 4d 00 00 - mov [ebp+00004d6c],eax

k, so we'll start with how you found it. when you got the addresses, in this case it would be 3 (only 1 of them will actually be used to change galder), you found what writes to those addresses i see. with this one, you see the [ebp+00004d6c] its using a pointer +00004d6c when you got the box by finding what writes to it, get extra info on that, note the pointer address (this should be epb, you need to search for this address using 4-byte+hex you then return more addresses. add a address manually, and choose pointer in the offset box, you add in whats after that epb; 4d6c it returns again to the area where you then make your changes.

i should say, this is more than i should have told, so feel privaledged, but you also didn't beg for it, which is much nicer. it's probably much easier to understand by following a proper tutorial with pointers etc.

http://forum.cheatengine.org/viewtopic.php?t=56649

for this, you will need to dl the buffy engine, it comes packed with the tutorial inside, i suppose i could also upload the tutorial onto rapidshare if you need, thats if you can't get a buffy engine dl.

[hellebore08]

so what about my case?.. Should i change my CE settings??? ill be waiting sir.. thx in advance for the quick replies.. ^_^..

[edge13]

Your case just means that you need to get another engine.
Try use DA engine.
Btw, nekkron I know you posted the semi-godmode but when finding the crit godmode, do you change 2 registers or just 1 jmp?

E.g. Both mov [edx], edi and je 00293794?
I've been doing many methods to find them xD
I think i've got it.

[Genryu7]

k, so we'll start with how you found it. when you got the addresses, in this case it would be 3 (only 1 of them will actually be used to change galder), you found what writes to those addresses i see. with this one, you see the [ebp+00004d6c] its using a pointer +00004d6c when you got the box by finding what writes to it, get extra info on that, note the pointer address (this should be epb, you need to search for this address using 4-byte+hex you then return more addresses. add a address manually, and choose pointer in the offset box, you add in whats after that epb; 4d6c it returns again to the area where you then make your changes.

i should say, this is more than i should have told, so feel privaledged, but you also didn't beg for it, which is much nicer. it's probably much easier to understand by following a proper tutorial with pointers etc.

http://forum.cheatengine.org/viewtopic.php?t=56649

for this, you will need to dl the buffy engine, it comes packed with the tutorial inside, i suppose i could also upload the tutorial onto rapidshare if you need, thats if you can't get a buffy engine dl.

Thanks alot man, owe you bigtime.

[nekkron]

do you change 2 registers or just 1 jmp? with mine, yes you do need to change both, well change one, then zf [x] [x] the jump. it's a novice code, since it works properly when you have worked out the crit one as well as normal, it's works a little bit weird when you only have 1 going. but good work, if you did think you actually found it, have a go at other methods, since doing it this way will use all 4 breakpoints meaning you can't do anything else while using them, and there is another 2 methods i know of that will work with only using 1 togglebreak, leaving the other 3 free. i primarily put it up only half to give anyone part of what to look for, while working out how it was done, would be able to find the second half.

Should i change my CE settings? your settings may not have much to do with it, i could be wrong, i am not certain what the problem is, it just seems like it won't attach. if you are still having troubles then like edge13 said; just grab another uce and try it out.

[Genryu7]

Hmm...Now I totally lost it.

Ok At this moment I am watching this Tut ;

http://img.photobucket.com/albums/v685/Labyrnth/CEStep6.swf

And the replies in this thread.

But I end up doing this?

http://img502.imageshack.us/my.php?image=lostsz7.jpg

http://img502.imageshack.us/my.php?image=lost2kq6.jpg

I tried the 00002350 EAX, for the reason of the TUT but it didn't work and now I'm completely lost, cause it uses other codes etc( the tutorial I think). Also some random crap.
Maybe I'll just stick to leeching. -_-;

[nekkron]

ahhh, might not have double checked, what it seems that you have missed it, putting that hex for the pointer. which was 4d6c you should put that into your offset when you make the pointer, you don't need to start again, just double click it to edit it then add it in, you will know if you have it correct because the value of the pointer will be the same as the value of you current galder, you have done it correct so far, just missed that little part out.

anyway, 2.30am here, spent too long playing fps, lost track of time, i'll get back to it tomorrow.

[hellebore08]

what du mean by 'DA' in DA engine?? coz i dont know how to search that DA engine.. maybe u cud just tell me where to download it.. hehe thx.. uhm, just expand it i think.. ill try to find it for myself.. but if u hav the site where to download this.. please tell me.. nwei, thx for the reply.. i appreciate it.. ^_^

[Genryu7]

Last question after this if it doesn't work, I'll quit.
I know its obvious for you guys, but I'm a bit slow. -_-;

http://img135.imageshack.us/my.php?image=lost3eo4.jpg

What the hell am I missing?!

[edge13]

Silly rofl.
You're supposed to search that value in hex.
That's the base pointer.
That address that you find is put in the box where it says base pointer.

Hope it helps >_>

[Genryu7]

Silly rofl.
You're supposed to search that value in hex.
That's the base pointer.That address that you find is put in the box where it says base pointer.
Hope it helps >_>

Huh, search what in value hex??

Whats the base pointer?

Huh? o.O;

Thanks for helping guys, but I'll just stick to leeching. xD

[nekkron]

what edge13 meant to say, was that you missed a step, you done it right, you missed the part where you search using that pointer in hex. where it says what it thinks the pointer is (extra info of writes to) you are meant to search that pointer in 4-byte [tick:HEX] and then add those results as pointers, don't actually add the previous one. but good, so far everything was correct.

[Genryu7]

Ok, so when I searched the pointer in 4-byte with hex clicked on,
I get all these results and I gotta add em all? (all 55)?
For example the first one says;
013337F8 with the value 0x0133380C.
Sorry, to bother you guys, like I said I'm a full blooded leecher, trying to change into doing things myself so I can also support other members in this forum, like you guys do.

[enterqw]

Ok, so when I searched the pointer in 4-byte with hex clicked on,
I get all these results and I gotta add em all? (all 55)?
For example the first one says;
013337F8 with the value 0x0133380C.
Sorry, to bother you guys, like I said I'm a full blooded leecher, trying to change into doing things myself so I can also support other members in this forum, like you guys do.

Double-click the address 013337F8 and tick pointer. Then you need to put in the address and the 4d6c. Hope this helps.

[Windwer]

k, so we'll start with how you found it. when you got the addresses, in this case it would be 3 (only 1 of them will actually be used to change galder), you found what writes to those addresses i see. with this one, you see the [ebp+00004d6c] its using a pointer +00004d6c when you got the box by finding what writes to it, get extra info on that, note the pointer address (this should be epb, you need to search for this address using 4-byte+hex you then return more addresses. add a address manually, and choose pointer in the offset box, you add in whats after that epb; 4d6c it returns again to the area where you then make your changes.



srry. i dont get the part when you say it returns again to the area where you then make your changes. can u explain this? i got everything except that part. tahnks so much.

[nekkron]

it returns again to the area where you then make your changes.

ok, when you don't insert that offset into the pointer usually you will end up with either a 9xxxxxx or 8xxxxxx value at that address, when you do insert the offset, the value should change to be the same as what it is you are changing ie. your current galder/stat etc. so i just meant that once you press ok and close that 'add address' window you then make the changes.

I get all these results and I gotta add em all? (all 55)?
For example the first one says;
013337F8 with the value 0x0133380C.

well like the tut says, typically the address you want after you search for it would be the lowest value, or at least one of the lowest (meaning the first ones in the list) so you don't need to add them all, just try from top downwards.

[Genryu7]

Double-click the address 013337F8 and tick pointer. Then you need to put in the address and the 4d6c. Hope this helps.

Whats the adress?

[enterqw]

Whats the adress?

I see you are using Kiki Engine. You need to double click the address that you picked(in this case it is 013337F8). Then a window pops up. You need to tick pointer and enter the 013337F8 and the 4d6c.

[Windwer]

ok, when you don't insert that offset into the pointer usually you will end up with either a 9xxxxxx or 8xxxxxx value at that address, when you do insert the offset, the value should change to be the same as what it is you are changing ie. your current galder/stat etc. so i just meant that once you press ok and close that 'add address' window you then make the changes.

i did what you said but when i changed the value, i couldn't buy anything with the galder. it either says failed to deposit(bank), you can't buy items(player's shops) or failed to purchase(store).....

[Genryu7]

Omg, I love you all.
If I can return the favour Ask me anytime!!!
Btw, is there a reason why I can't buy stuff from private shops?

[nekkron]

Genryu7+Windwer;

there could be more than one reason why your money freezes after doing all this. thats the whole points of trial and error, you need to look at more than one angle to the situation, or in this case, try different addresses and look for multiple methods to the one things until you find what's right.

[j0eL]

But in the end, it's all client-sided...?

[nekkron]

But in the end, it's all client-sided...?

no, you can change it server side, it's hard to do though and does take alot of time to fully understand what you are changing and where that change will affect something else.

[sconway76]

nekkron you are a wealth of info and by god it all looks to be quite a pain to do.

I am a father of two that play this and am getting wiped money wise each time they need something (LOL). Is it worth all the trouble? And has anyone truly done it successfully?

[=Jojo=]

nekkron you are a wealth of info and by god it all looks to be quite a pain to do.

I am a father of two that play this and am getting wiped money wise each time they need something (LOL). Is it worth all the trouble? And has anyone truly done it successfully?

making us feel bad or guilty wont work helping u get the code

but as an answer 2 u

u still don't think its a good way? type your money and wallah u have cash?

[sconway76]

Not trying to make anyone feel bad or guilty. :angry:

Stop looking at every post in a negative light man or woman, I was trying to make you all laugh that an old fart is playing around trying to do all this. LOL

And no I think it is a great way...just trying to reconfigure my brain to make it work is giving me a headache...lmao.

Now please try and see this post as funny, yet informative. :)

[=Jojo=]

Not trying to make anyone feel bad or guilty. :angry:

Stop looking at every post in a negative light man or woman, I was trying to make you all laugh that an old fart is playing around trying to do all this. LOL

And no I think it is a great way...just trying to reconfigure my brain to make it work is giving me a headache...lmao.

Now please try and see this post as funny, yet informative. :)

do u think i was mad :ponder:

of curse not i m just saying :P