Cheat Engine with Requiem
Cheat Engine with Requiem Online
Finding basic game values
I don’t know why someone has problems with CE, e.g. finding coordinates etc., their offsets and base address, but people has often ask how to find something by CE.
Let’s find with CE some float values in Requiem. At the beginning it will be “Movements speed”.
We can start finding process without any preparation, just enter necessary value in CE and go on.
Ok, our char has speed = 5 (float value)
Step 1:
Start the CE and attach it to Requiem process. Choose value type as “float”, scan type as “exact value”, and enter value 5, click “first scan”.
[hidden]Step 2:
Now we must sift out unnecessary values. Change movements speed by wearing boots (+1% to speed)
At this moment we don’t know the exact value of speed (it’s float and rounded…), but we know that this value was increased. Choose in CE scan type “increased value” and click “next scan”
Now we can move around and sift out results by choosing “unchanged value” or again remove the boots and use “value decreased”.
After several sift out iteration we will get maybe 10 or less values, it’s not a big deal (even if we got 100 values it’s not a problem).
Step 3:
Ok, next step. I removed boots, got speed 5 and got one suitable value with address $015368B0
Add this value to the list; Right click -> Find out what writes to this address
We see the list of opcodes that changed the selected address ($015368B0)
Don’t close this window, ‘coz we want to see all opcodes… Return to the game and change the speed value again. After that new opcode will be added to the list: mov [ecx + 10], eax
mov [ecx + 10], eax - this instruction means, that the some value (in our case – speed value) in eax register move (really a copy) into the memory address [ecx + 10] (in our case to the founded address $015368B0)
Choose this instruction and press “More information”, we got some disassembled instruction and registers value.
Step 4:
Important register is ecx = $015368A0 – next value for searching. Press “new scan”, check “hex” and start scanning.
If several results were found, add them all to the list.
Right click -> Find out what accesses this address
Note: I renamed the first result to the “+10”, second and the 4th to the “no result” (I already checked them :)
Ok, now we must repeat step 3 and 4 until we get the result – base address and offsets chain.
For Requiem speed value:
And the last one:
We enter $14A90718 and we get:
At the end we got the BaseAdress [BA] = $0071AAB0 (or Requiem.exe + $0031AAB0) and offsets chain
[BA] + $3A0 + $58 + $88 + $11C + $10 (float value)
[/hidden]
Note:
- In tutorial symbol “$” was used. This symbol denotes that the value is in hex.
- Soon I'll add some remarks about "real" base address
Re: [Guide] Cheat Engine with Requiem
Thanks for this tutorial! But I've tried this and everytime I try to attach the debugger the game crashes. Is there any way you could explain to me how did you attach your debbuger when choosing the option "Find what writes to this address"? I would highly apprectiate, thank you!
Re: [Guide] Cheat Engine with Requiem
HazelHazard
Did you used CE 5.5 or 5.6? The latest CE beta version works unstable. And do not forget, that the Russian client and Korean guarded by hackshield and without bypassing it you can't attach or even use CE
Re: [Guide] Cheat Engine with Requiem
I'm using CE 5.6 and running it on the US server. So what do you recommend me doing? I've tried to run the debugger first and then attaching it to the game before chosing the account to play, it does not crashed the game but it gives me an error saying that it was enable to attach the debugger.
Re: [Guide] Cheat Engine with Requiem
HazelHazard
- OS type?
- Do you run CE with admin rights?
- Does CE work with other app?
- if doesn't -> version of dbghelp.dll? (inside OS system folder)
Re: [Guide] Cheat Engine with Requiem
Widows XP professional
Yes I dun with admin rights
It works with other apps like flash games etc..
dbghelp.dll version 5.1.2600.5512
Re: [Guide] Cheat Engine with Requiem
Hm, strange.
- Try to use CE 5.5 (for Requiem I use exactly this version)
- or try to use the latest version of dbghelp.dll (6.12.2.633) (you can download it from [Only registered and activated users can see links. Click Here To Register...])
Re: [Guide] Cheat Engine with Requiem
Many thanks :D I will sure try this! I will post if it worked or not later.
-- 2010-06-24, 00:45 --
-- 2010-06-24, 22:18 --
I've tried it all but it still doesn't work, I always get the same error about not being able to attach the debugger
Re: [Guide] Cheat Engine with Requiem
Just a question...
is it possible to do the same process but instead of changing the requiem speed value, change long or short range damage or CON, INT, DEX etc. ??
Re: [Guide] Cheat Engine with Requiem
i try and attach debugger always crash , i use win xp s2, ce 5.5 ,something wrong?