Tutorial - Creating a Form - GUI

Before starting any GUI layout I find it best to just draw a basic layout on some graph paper or in a drawing program. Since we're going to use the CE Form creation GUI, we don't need to be exact so just a basic drawing will work. One thing to keep in mind is resizing, so good use of panels and anchoring is the best way when using a GUI layout tool like CE's.

But before starting a trainer we need to talk about what game we'll be make it for, for simplicity let's make one for the CE tutorial.

The form

To start a new form, select Table then Create form.

You should see a new form and some tool windows that will open.

So let's start with some of the form properties.

Caption

The control's text.

Value: My Cheats

DefaultMonitor

Not really sure what this does, but setting it to "dmMainForm" sounds good; and this doesn't seem to be required.

Value: dmMainForm

Height

The control's height (vertical size).

Value: 400

Name

The control's name

Value: CheatForm

Position

The form's start position type.

Value: poMainFormCenter

Width

The control's width (horizontal size).

Value: 600

Main panels

So let's add some panels to start with. After adding two panels let's edit the first one. To add a control just use the Form Designer and hover over the buttons to find out what controls they'll add.

BevelOuter

Outer border bevel type, controls how the outer border looks.

Value: bvLowered

Caption

Value:

Name

Value: ImagePanel

Width

Value: 200

Now let's edit the second one.

Caption

Value:

Name

Value: MainPanel

So now let's setup the anchors for the ImagePanel. This one I want to stay the same width when the form is resized so I will only anchor it to the form on the top, left, and bottom.

To open the anchors form, select the control and click the 'Anchors property and then click the ... button.

Let's setup the anchor form for the ImagePanel like this.

Now let's setup the anchor form for the MainPanel like this.

You should have a form that looks like this (the red text is added in MS paint).

Main image and about button

So now let's add an Image and an about button, I will go ahead and add a button. But the image has an OnClick event that I will use to make it act like a button so the about button can be left out just anchor the bottom of the image to the ImagePanel.

So let's add the button and the image to the image panel.

For the button let's set it up like this.

Caption

Value: About

Name

Value: AboutButton

And for the button let's setup the anchors like this.

On the image we only need to set the name to start with.

Name

Value: MainIamge

Let's set the anchors for the MainImage like this.

Let's set the Picture property, select it and click the ... button like before, and click the Load button to open an open file dialog. Then just select an image form your file system, note that you may want to size the image to best fit the MainImage. This will add the image data to the form data.

Adding Events

Now let's setup some OnClick events for the image and button. So on the Object Inspector form select the Events tab, then select the OnClick event and click the ... button. This will create a function and bind the event to it.

It should open the Lua script form with a new function like this, depending on the controls name (and event).

function AboutButtonClick(sender)

end

Now for the MainImage use the OnClick event's drop-down to select the function you created for the AboutButton. We'll add some code to this latter, after creating an about form.

Cheat Panels

Now inside the MainPanel let's add some cheat panels.

For the first one let's anchor it to the MaiPanel at the sides and top. Then set it up like this.

BevelOuter

Value: bvNone

Caption

Value:

Name

Value: Cheat1Panel

Then let's add a toggle box and anchor it to all sides of the cheat panel. And set it up like this.

Caption

Value: Step 2 Hook

Name

Value: Cheat1ToggleBox

Now let's auto create a function for the OnChange event for the Cheat1ToggleBox. Remember to do this you select the events tab then click the ... button for the OnChange event. It should create a function like this.

function Cheat1ToggleBoxChange(sender)

end

Remaining cheat panels

Now let's select the Cheat1Panel on the form, you may need to first select it in the Object Inspector form then click the control on the form. Then just press Ctrl+C to copy the control then click the MainPanel and press Ctrl+V to paste a copy. Then edit the properties for the panel and the toggle so the names are Cheat2Panel and Cheat2ToggleBox; and the caption for the toggle box to "Step 3 Hook".

Then select the Cheat2Panel in the Object Inspector and drag it to the MainPanel so it becomes nested under it as a child control.

Then edit the anchors for the Cheat2Panel, edit the top anchor like this.

Then set the OnChange event for the toggle box.

Now just do this tell you get to Cheat7... and Step 8 Hook, and just set the top anchor sibling to the previous cheat panel. So 2 to 1, 3 to 2, 4 to 3, and so on.

Editable value

Now let's setup a cheat panel like the others, but then disable the left anchor for the toggle box then click and drag the left side to make room for an edit box. Then add an edit box on the left of the Cheat8Panel, and let's set the edit box name and text properties.

Name

Value: Cheat8Edit

Text

Value: 5000

Width

Value: 75

Then anchor the edit box like the toggle box; to the top, right, and bottom. With to the cheat panel as the sibling.

Then set the left anchor for the toggle box like this.

And then create an OnChange event for the toggle box.

An "All Hooks" toggle box

Now let's setup a cheat panel like the others, then set the names as CheatAll... And set the text for the toggle box to "All Hooks", and create an OnChange event for it.

More with the Form

Form Constraints

Now we can size the form the figure out what kind of minimum and maximum sizes to set for the form. Let's set the Constraints MinHeight and MinWidth.

Form events

Now let's add some events for the form; OnClose, and FormShow.

function FormShow(sender)

end
function FormClose(sender)
  return caHide --Possible options: caHide, caFree, caMinimize, caNone
end

Saving the form

Then on the form designer tool window select File->Save in the menu and save the form as "CheatForm.FRM".

Now close the tool windows and the form, and save the cheat table. Then select Table->CheatForm->Restore and show, and it should show the form.

Adding code for the cheat form

Now for the fun part. Let's add some code to the events. You should have a script like this so far.

--
---- Form
function FormShow(sender)

end

function FormClose(sender)
  return caHide --Possible options: caHide, caFree, caMinimize, caNone
end


---- About button
function AboutButtonClick(sender)

end

---- All
function CheatAllToggleBoxChange(sender)

end

---- Step 2
function Cheat1ToggleBoxChange(sender)

end

---- Step 3
function Cheat2ToggleBoxChange(sender)

end

---- Step 4
function Cheat3ToggleBoxChange(sender)

end

---- Step 5
function Cheat4ToggleBoxChange(sender)

end

---- Step 6
function Cheat5ToggleBoxChange(sender)

end

---- Step 7
function Cheat6ToggleBoxChange(sender)

end

---- Step 8
function Cheat7ToggleBoxChange(sender)

end

---- Step 9
function Cheat8ToggleBoxChange(sender)

end

Let's start by adding some variables and a function to help with enabling the cheats.

PROCESS_NAME = 'Tutorial-i386.exe'

local AboutText = [[Author: TIMMY

This is a tutorial cheat form made for the Cheat Engine tutorial ("Tutorial-i386.exe").
]]

local disableInfo = {}
local autoAttachTimer = nil
local autoAttachTimerInterval = 100
local autoAttachTimerTicks = 0
local autoAttachTimerTickMax = 5000

local function enableCheat(sender, script)
	local assembled = false
	if sender.Checked then
		assembled, disableInfo[sender.Name] = autoAssemble(script)
		if not assembled then
			-- disableInfo[sender.Name] = nil
			sender.Checked = false
		end
	elseif disableInfo[sender.Name] ~= nil then
		assembled, disableInfo[sender.Name] = autoAssemble(script, disableInfo[sender.Name])
		if assembled then
			disableInfo[sender.Name] = nil
		end
	end
	return assembled
end

Now let's setup those form events.

--
---- Form
function FormShow(sender)
	local function autoAttachTimer_tick(timer)
		if autoAttachTimerTickMax > 0 and autoAttachTimerTicks >= autoAttachTimerTickMax then
			timer.destroy()
		end
		if getProcessIDFromProcessName(PROCESS_NAME) ~= nil then
			timer.destroy()
			openProcess(PROCESS_NAME)
		end
		autoAttachTimerTicks = autoAttachTimerTicks + 1
	end
	autoAttachTimer = createTimer(MainForm)
	autoAttachTimer.Interval = autoAttachTimerInterval
	autoAttachTimer.OnTimer = autoAttachTimer_tick
end

function FormClose(sender)
	----
	---- comment this out when editing the form
	closeCE()
	return caFree --Possible options: caHide, caFree, caMinimize, caNone
	----
	---- uncomment this when editing the form
	-- return caHide --Possible options: caHide, caFree, caMinimize, caNone
end

So for the about button let's just start with a simple string that will be printed.

---- About button
function AboutButtonClick(sender)
	print(AboutText)
end

Now for the cheats. So we'll just pass sender and a script to enableCheat.

---- All
function CheatAllToggleBoxChange(sender)
	if CheatForm ~= nil then
		CheatForm.Cheat1ToggleBox.Checked = sender.Checked
		CheatForm.Cheat2ToggleBox.Checked = sender.Checked
		CheatForm.Cheat3ToggleBox.Checked = sender.Checked
		CheatForm.Cheat4ToggleBox.Checked = sender.Checked
		CheatForm.Cheat5ToggleBox.Checked = sender.Checked
		CheatForm.Cheat6ToggleBox.Checked = sender.Checked
		CheatForm.Cheat7ToggleBox.Checked = sender.Checked
		CheatForm.Cheat8ToggleBox.Checked = sender.Checked
		CheatForm.Cheat1ToggleBox.Enabled = not sender.Checked
		CheatForm.Cheat2ToggleBox.Enabled = not sender.Checked
		CheatForm.Cheat3ToggleBox.Enabled = not sender.Checked
		CheatForm.Cheat4ToggleBox.Enabled = not sender.Checked
		CheatForm.Cheat5ToggleBox.Enabled = not sender.Checked
		CheatForm.Cheat6ToggleBox.Enabled = not sender.Checked
		CheatForm.Cheat7ToggleBox.Enabled = not sender.Checked
		CheatForm.Cheat8ToggleBox.Enabled = not sender.Checked
		CheatForm.Cheat8Edit.Enabled = not sender.Checked
	end
end

---- Step 2
function Cheat1ToggleBoxChange(sender)
	enableCheat(sender, [[{$STRICT}
define(address, Tutorial-i386.exe+23B00)
define(step2Bytes, 89 83 80 04 00 00)

[ENABLE]
aobScanModule(aobStep2Hook, Tutorial-i386.exe, 8Dxxxx8Bxxxxxxxxxx29xx89xxxxxxxxxx8DxxxxE8xxxxxxxx8Bxxxx8BxxxxxxxxxxE8xxxxxxxx83xxxxxxxxxxxx)
define(injStep2Hook, aobStep2Hook+B)
assert(injStep2Hook, step2Bytes)
registerSymbol(injStep2Hook)

alloc(memStep2Hook, 0x400, injStep2Hook)

label(ptrStep2Hook)
registerSymbol(ptrStep2Hook)

label(step2n_code)
label(step2o_code)
label(step2exit)
label(step2return)

memStep2Hook:
	ptrStep2Hook:
		dd 0
	align 10 CC
	step2n_code:
		mov [ptrStep2Hook],ebx
		mov eax,(int)1000
	step2o_code:
		mov [ebx+00000480],eax
	step2exit:
		jmp step2return

injStep2Hook:
	jmp step2n_code
	nop
	step2return:

[DISABLE]
injStep2Hook:
	db step2Bytes

unregisterSymbol(injStep2Hook)
unregisterSymbol(ptrStep2Hook)
dealloc(memStep2Hook)
]])
end

---- Step 3
function Cheat2ToggleBoxChange(sender)
	enableCheat(sender, [[{$STRICT}
define(address, Tutorial-i386.exe+23FE1)
define(step3OldBytes, 83 C0 01 89 C3 29)
	// add eax,01
	// mov ebx,eax
	// sub // sub [esi+00000484],ebx
define(step3NewBytes, BB 88 13 00 00 89)
	// mov ebx,00001388 // mov ebx,(int)5000
	// mov // mov [esi+00000484],ebx

[ENABLE]
aobScanModule(aobStep3Hook, Tutorial-i386.exe, 83xxxx89xx29xxxxxxxxxx8Bxxxxxxxxxx8Dxxxxxxxxxx8BxxxxxxxxxxE8xxxxxxxx83xxxxxxxxxxxx)
define(injStep3Hook, aobStep3Hook)
assert(injStep3Hook, step3OldBytes)
registerSymbol(injStep3Hook)

injStep3Hook:
	db step3NewBytes

[DISABLE]
injStep3Hook:
	db step3OldBytes

unregisterSymbol(injStep3Hook)
]])
end

---- Step 4
function Cheat3ToggleBoxChange(sender)
	enableCheat(sender, [[{$STRICT}
define(address, Tutorial-i386.exe+2481F)
define(step4Bytes, D9 9E 94 04 00 00)

[ENABLE]
aobScanModule(aobStep4Hook, Tutorial-i386.exe, DBxxxxDBxxxxxxxxD9xxxxD9xxxxD8xxxxxxxxxxD9xxxxxxxxxxFFxxxxxxxxxx8DxxxxxxB9xxxxxxxxBAxxxxxxxxB8xxxxxxxx)
define(injStep4Hook, aobStep4Hook+14)
assert(injStep4Hook, step4Bytes)
registerSymbol(injStep4Hook)

alloc(memStep4Hook, 0x400, injStep4Hook)

label(ptrStep4Hook)
registerSymbol(ptrStep4Hook)

label(step4n_code)
label(step4o_code)
label(step4exit)
label(step4return)

memStep4Hook:
	dq (double)5000
	align 10 CC
	ptrStep4Hook:
		dd 0
	align 10 CC
	step4n_code:
		mov [ptrStep4Hook],esi
		fstp st(0)
		mov [esi+494],(float)5000
		fld qword ptr [memStep4Hook]
		fstp qword ptr [esi+498]
	step4o_code:
		// fstp dword ptr [esi+00000494]
	step4exit:
		jmp step4return

injStep4Hook:
	jmp step4n_code
	nop
	step4return:

[DISABLE]
injStep4Hook:
	db step4Bytes

unregisterSymbol(injStep4Hook)
unregisterSymbol(ptrStep4Hook)
dealloc(memStep4Hook)
]])
end

---- Step 5
function Cheat4ToggleBoxChange(sender)
	enableCheat(sender, [[{$STRICT}
define(address, Tutorial-i386.exe+24AE8)
define(step5Bytes, 89 10)

[ENABLE]
aobScanModule(aobStep5Hook, Tutorial-i386.exe, 8Bxxxx8Bxxxxxxxxxx8Bxxxx89xx8Bxxxx8Bxxxxxxxxxx8Bxx3Bxxxx)
define(injStep5Hook, aobStep5Hook+C)
assert(injStep5Hook, step5Bytes)
registerSymbol(injStep5Hook)

injStep5Hook:
	db 90 90

[DISABLE]
injStep5Hook:
	db step5Bytes

unregisterSymbol(injStep5Hook)
]])
end

---- Step 6
function Cheat5ToggleBoxChange(sender)
	enableCheat(sender, [[{$STRICT}
define(address, Tutorial-i386.exe+24F01)
define(step6Bytes, 89 02)

[ENABLE]
aobScanModule(aobStep6Hook, Tutorial-i386.exe, 8Bxxxx3Bxxxx74xxEBxx8Bxxxxxxxxxx8Bxxxx89xxA1xxxxxxxx8Bxx3Bxxxx)
define(injStep6Hook, aobStep6Hook+13)
assert(injStep6Hook, step6Bytes)
registerSymbol(injStep6Hook)

injStep6Hook:
	db 90 90

[DISABLE]
injStep6Hook:
	db step6Bytes

unregisterSymbol(injStep6Hook)
]])
end

---- Step 7
function Cheat6ToggleBoxChange(sender)
	enableCheat(sender, [[{$STRICT}
define(address, Tutorial-i386.exe+2553D)
define(step7OldBytes, 83 AB 78 04 00 00 01)
	// sub dword ptr [ebx+00000478],01
define(step7NewBytes, 83 83 78 04 00 00 02)
	// add dword ptr [ebx+00000478],02

[ENABLE]
aobScanModule(aobStep7Hook, Tutorial-i386.exe, 8Bxxxxxxxxxx83xxxxxxxxxxxx8Bxxxxxxxxxx8DxxxxE8xxxxxxxx8Bxxxx8BxxxxxxxxxxE8xxxxxxxx8Bxxxxxxxxxx)
define(injStep7Hook, aobStep7Hook+6)
assert(injStep7Hook, step7OldBytes)
registerSymbol(injStep7Hook)

injStep7Hook:
	db step7NewBytes

[DISABLE]
injStep7Hook:
	db step7OldBytes

unregisterSymbol(injStep7Hook)
]])
end

---- Step 8
function Cheat7ToggleBoxChange(sender)
	enableCheat(sender, [[{$STRICT}
define(address2, Tutorial-i386.exe+26108)
define(step8WrtBytes, 89 42 18 8B 45 DC)

[ENABLE]
aobScanModule(aobStep8WrtHook, Tutorial-i386.exe, 8Bxxxx89xxxx8Bxxxx8Bxxxx8DxxxxE8xxxxxxxx8Bxxxx8Bxxxx8Bxxxxxxxxxx)
define(injStep8WrtHook, aobStep8WrtHook+3)
assert(injStep8WrtHook, step8WrtBytes)
registerSymbol(injStep8WrtHook)

alloc(memStep8WrtHook, 0x400, injStep8WrtHook)

label(ptrStep8WrtHook)
registerSymbol(ptrStep8WrtHook)

label(step8wrtn_code)
label(step8wrto_code)
label(step8wrtexit)
label(step8wrtreturn)

memStep8WrtHook:
	ptrStep8WrtHook:
		dd 0
	align 10 CC
	step8wrtn_code:
		mov [ptrStep8WrtHook],edx
		mov eax,(int)5000
	step8wrto_code:
		mov [edx+18],eax
		mov eax,[ebp-24]
	step8wrtexit:
		jmp step8wrtreturn

injStep8WrtHook:
	jmp step8wrtn_code
	nop
	step8wrtreturn:

[DISABLE]
injStep8WrtHook:
	db step8WrtBytes

unregisterSymbol(injStep8WrtHook)
unregisterSymbol(ptrStep8WrtHook)
dealloc(memStep8WrtHook)
]])
end

---- All
function Cheat8ToggleBoxChange(sender)
	local script = [[{$STRICT}
define(address, Tutorial-i386.exe+26534)
define(step9Bytes, 8B 45 FC 89 43 04)

[ENABLE]
aobScanModule(aobStep9Hook, Tutorial-i386.exe, 8Bxxxx89xxxx8Bxxxx89xxxxxxxxD9xxxxxxxxxxxxxx7Axx75xx8Bxxxx)
define(injStep9Hook, aobStep9Hook+6)
assert(injStep9Hook, step9Bytes)
registerSymbol(injStep9Hook)

alloc(memStep9Hook, 0x400, injStep9Hook)

label(ptrStep9Hook)
registerSymbol(ptrStep9Hook)

label(step9n_code)
label(step9o_code)
label(step9exit)
label(step9return)

memStep9Hook:
	ptrStep9Hook:
		dd 0
		dd 0
	align 10 CC
	step9n_code:
		pushfd
		cmp [ebx+10],1
		jne @f
			mov eax,(float)${Value}
			jmp step9o_code
		@@:
		mov eax,0
	step9o_code:
		// mov eax,[ebp-04]
		mov [ebx+04],eax
	step9exit:
		popfd
		jmp step9return

injStep9Hook:
	jmp step9n_code
	nop
	step9return:

[DISABLE]
injStep9Hook:
	db step9Bytes

unregisterSymbol(injStep9Hook)
unregisterSymbol(ptrStep9Hook)
dealloc(memStep9Hook)
]]
	enableCheat(sender, script:gsub('${Value}', CheatForm.Cheat8Edit.Text))
	CheatForm.Cheat8Edit.Enabled = not sender.Checked
end

Showing the form

Then we just need to hide the CE main form and show the cheat form, but we'll want to use a timer to hide the forms.

CheatForm.Show()
timer = createTimer(MainForm)
timer.Interval = 50
timer.OnTimer = function(timer)
	timer.destroy()
	hideAllCEWindows()
end

The full script

PROCESS_NAME = 'Tutorial-i386.exe'

local AboutText = [[Author: TIMMY

This is a tutorial cheat form made for the Cheat Engine tutorial ("Tutorial-i386.exe").
]]

local disableInfo = {}

local autoAttachTimer = nil
local autoAttachTimerInterval = 100
local autoAttachTimerTicks = 0
local autoAttachTimerTickMax = 5000


local function enableCheat(sender, script)
	local assembled = false
	if sender.Checked then
		assembled, disableInfo[sender.Name] = autoAssemble(script)
		if not assembled then
			-- disableInfo[sender.Name] = nil
			sender.Checked = false
		end
	elseif disableInfo[sender.Name] ~= nil then
		assembled, disableInfo[sender.Name] = autoAssemble(script, disableInfo[sender.Name])
		if assembled then
			disableInfo[sender.Name] = nil
		end
	end
	return assembled
end


--
---- Form
function FormShow(sender)
	local function autoAttachTimer_tick(timer)
		if autoAttachTimerTickMax > 0 and autoAttachTimerTicks >= autoAttachTimerTickMax then
			timer.destroy()
		end
		if getProcessIDFromProcessName(PROCESS_NAME) ~= nil then
			timer.destroy()
			openProcess(PROCESS_NAME)
		end
		autoAttachTimerTicks = autoAttachTimerTicks + 1
	end
	autoAttachTimer = createTimer(MainForm)
	autoAttachTimer.Interval = autoAttachTimerInterval
	autoAttachTimer.OnTimer = autoAttachTimer_tick
end

function FormClose(sender)
	----
	---- comment this out when editing the form
	closeCE()
	return caFree --Possible options: caHide, caFree, caMinimize, caNone
	----
	---- uncomment this when editing the form
	-- return caHide --Possible options: caHide, caFree, caMinimize, caNone
end


---- About button
function AboutButtonClick(sender)
	print(AboutText)
end

---- All
function CheatAllToggleBoxChange(sender)
	if CheatForm ~= nil then
		CheatForm.Cheat1ToggleBox.Checked = sender.Checked
		CheatForm.Cheat2ToggleBox.Checked = sender.Checked
		CheatForm.Cheat3ToggleBox.Checked = sender.Checked
		CheatForm.Cheat4ToggleBox.Checked = sender.Checked
		CheatForm.Cheat5ToggleBox.Checked = sender.Checked
		CheatForm.Cheat6ToggleBox.Checked = sender.Checked
		CheatForm.Cheat7ToggleBox.Checked = sender.Checked
		CheatForm.Cheat8ToggleBox.Checked = sender.Checked
		CheatForm.Cheat1ToggleBox.Enabled = not sender.Checked
		CheatForm.Cheat2ToggleBox.Enabled = not sender.Checked
		CheatForm.Cheat3ToggleBox.Enabled = not sender.Checked
		CheatForm.Cheat4ToggleBox.Enabled = not sender.Checked
		CheatForm.Cheat5ToggleBox.Enabled = not sender.Checked
		CheatForm.Cheat6ToggleBox.Enabled = not sender.Checked
		CheatForm.Cheat7ToggleBox.Enabled = not sender.Checked
		CheatForm.Cheat8ToggleBox.Enabled = not sender.Checked
		CheatForm.Cheat8Edit.Enabled = not sender.Checked
	end
end

---- Step 2
function Cheat1ToggleBoxChange(sender)
	enableCheat(sender, [[{$STRICT}
define(address, Tutorial-i386.exe+23B00)
define(step2Bytes, 89 83 80 04 00 00)

[ENABLE]
aobScanModule(aobStep2Hook, Tutorial-i386.exe, 8Dxxxx8Bxxxxxxxxxx29xx89xxxxxxxxxx8DxxxxE8xxxxxxxx8Bxxxx8BxxxxxxxxxxE8xxxxxxxx83xxxxxxxxxxxx)
define(injStep2Hook, aobStep2Hook+B)
assert(injStep2Hook, step2Bytes)
registerSymbol(injStep2Hook)

alloc(memStep2Hook, 0x400, injStep2Hook)

label(ptrStep2Hook)
registerSymbol(ptrStep2Hook)

label(step2n_code)
label(step2o_code)
label(step2exit)
label(step2return)

memStep2Hook:
	ptrStep2Hook:
		dd 0
	align 10 CC
	step2n_code:
		mov [ptrStep2Hook],ebx
		mov eax,(int)1000
	step2o_code:
		mov [ebx+00000480],eax
	step2exit:
		jmp step2return

injStep2Hook:
	jmp step2n_code
	nop
	step2return:

[DISABLE]
injStep2Hook:
	db step2Bytes

unregisterSymbol(injStep2Hook)
unregisterSymbol(ptrStep2Hook)
dealloc(memStep2Hook)
]])
end

---- Step 3
function Cheat2ToggleBoxChange(sender)
	enableCheat(sender, [[{$STRICT}
define(address, Tutorial-i386.exe+23FE1)
define(step3OldBytes, 83 C0 01 89 C3 29)
	// add eax,01
	// mov ebx,eax
	// sub // sub [esi+00000484],ebx
define(step3NewBytes, BB 88 13 00 00 89)
	// mov ebx,00001388 // mov ebx,(int)5000
	// mov // mov [esi+00000484],ebx

[ENABLE]
aobScanModule(aobStep3Hook, Tutorial-i386.exe, 83xxxx89xx29xxxxxxxxxx8Bxxxxxxxxxx8Dxxxxxxxxxx8BxxxxxxxxxxE8xxxxxxxx83xxxxxxxxxxxx)
define(injStep3Hook, aobStep3Hook)
assert(injStep3Hook, step3OldBytes)
registerSymbol(injStep3Hook)

injStep3Hook:
	db step3NewBytes

[DISABLE]
injStep3Hook:
	db step3OldBytes

unregisterSymbol(injStep3Hook)
]])
end

---- Step 4
function Cheat3ToggleBoxChange(sender)
	enableCheat(sender, [[{$STRICT}
define(address, Tutorial-i386.exe+2481F)
define(step4Bytes, D9 9E 94 04 00 00)

[ENABLE]
aobScanModule(aobStep4Hook, Tutorial-i386.exe, DBxxxxDBxxxxxxxxD9xxxxD9xxxxD8xxxxxxxxxxD9xxxxxxxxxxFFxxxxxxxxxx8DxxxxxxB9xxxxxxxxBAxxxxxxxxB8xxxxxxxx)
define(injStep4Hook, aobStep4Hook+14)
assert(injStep4Hook, step4Bytes)
registerSymbol(injStep4Hook)

alloc(memStep4Hook, 0x400, injStep4Hook)

label(ptrStep4Hook)
registerSymbol(ptrStep4Hook)

label(step4n_code)
label(step4o_code)
label(step4exit)
label(step4return)

memStep4Hook:
	dq (double)5000
	align 10 CC
	ptrStep4Hook:
		dd 0
	align 10 CC
	step4n_code:
		mov [ptrStep4Hook],esi
		fstp st(0)
		mov [esi+494],(float)5000
		fld qword ptr [memStep4Hook]
		fstp qword ptr [esi+498]
	step4o_code:
		// fstp dword ptr [esi+00000494]
	step4exit:
		jmp step4return

injStep4Hook:
	jmp step4n_code
	nop
	step4return:

[DISABLE]
injStep4Hook:
	db step4Bytes

unregisterSymbol(injStep4Hook)
unregisterSymbol(ptrStep4Hook)
dealloc(memStep4Hook)
]])
end

---- Step 5
function Cheat4ToggleBoxChange(sender)
	enableCheat(sender, [[{$STRICT}
define(address, Tutorial-i386.exe+24AE8)
define(step5Bytes, 89 10)

[ENABLE]
aobScanModule(aobStep5Hook, Tutorial-i386.exe, 8Bxxxx8Bxxxxxxxxxx8Bxxxx89xx8Bxxxx8Bxxxxxxxxxx8Bxx3Bxxxx)
define(injStep5Hook, aobStep5Hook+C)
assert(injStep5Hook, step5Bytes)
registerSymbol(injStep5Hook)

injStep5Hook:
	db 90 90

[DISABLE]
injStep5Hook:
	db step5Bytes

unregisterSymbol(injStep5Hook)
]])
end

---- Step 6
function Cheat5ToggleBoxChange(sender)
	enableCheat(sender, [[{$STRICT}
define(address, Tutorial-i386.exe+24F01)
define(step6Bytes, 89 02)

[ENABLE]
aobScanModule(aobStep6Hook, Tutorial-i386.exe, 8Bxxxx3Bxxxx74xxEBxx8Bxxxxxxxxxx8Bxxxx89xxA1xxxxxxxx8Bxx3Bxxxx)
define(injStep6Hook, aobStep6Hook+13)
assert(injStep6Hook, step6Bytes)
registerSymbol(injStep6Hook)

injStep6Hook:
	db 90 90

[DISABLE]
injStep6Hook:
	db step6Bytes

unregisterSymbol(injStep6Hook)
]])
end

---- Step 7
function Cheat6ToggleBoxChange(sender)
	enableCheat(sender, [[{$STRICT}
define(address, Tutorial-i386.exe+2553D)
define(step7OldBytes, 83 AB 78 04 00 00 01)
	// sub dword ptr [ebx+00000478],01
define(step7NewBytes, 83 83 78 04 00 00 02)
	// add dword ptr [ebx+00000478],02

[ENABLE]
aobScanModule(aobStep7Hook, Tutorial-i386.exe, 8Bxxxxxxxxxx83xxxxxxxxxxxx8Bxxxxxxxxxx8DxxxxE8xxxxxxxx8Bxxxx8BxxxxxxxxxxE8xxxxxxxx8Bxxxxxxxxxx)
define(injStep7Hook, aobStep7Hook+6)
assert(injStep7Hook, step7OldBytes)
registerSymbol(injStep7Hook)

injStep7Hook:
	db step7NewBytes

[DISABLE]
injStep7Hook:
	db step7OldBytes

unregisterSymbol(injStep7Hook)
]])
end

---- Step 8
function Cheat7ToggleBoxChange(sender)
	enableCheat(sender, [[{$STRICT}
define(address2, Tutorial-i386.exe+26108)
define(step8WrtBytes, 89 42 18 8B 45 DC)

[ENABLE]
aobScanModule(aobStep8WrtHook, Tutorial-i386.exe, 8Bxxxx89xxxx8Bxxxx8Bxxxx8DxxxxE8xxxxxxxx8Bxxxx8Bxxxx8Bxxxxxxxxxx)
define(injStep8WrtHook, aobStep8WrtHook+3)
assert(injStep8WrtHook, step8WrtBytes)
registerSymbol(injStep8WrtHook)

alloc(memStep8WrtHook, 0x400, injStep8WrtHook)

label(ptrStep8WrtHook)
registerSymbol(ptrStep8WrtHook)

label(step8wrtn_code)
label(step8wrto_code)
label(step8wrtexit)
label(step8wrtreturn)

memStep8WrtHook:
	ptrStep8WrtHook:
		dd 0
	align 10 CC
	step8wrtn_code:
		mov [ptrStep8WrtHook],edx
		mov eax,(int)5000
	step8wrto_code:
		mov [edx+18],eax
		mov eax,[ebp-24]
	step8wrtexit:
		jmp step8wrtreturn

injStep8WrtHook:
	jmp step8wrtn_code
	nop
	step8wrtreturn:

[DISABLE]
injStep8WrtHook:
	db step8WrtBytes

unregisterSymbol(injStep8WrtHook)
unregisterSymbol(ptrStep8WrtHook)
dealloc(memStep8WrtHook)
]])
end

---- All
function Cheat8ToggleBoxChange(sender)
	local script = [[{$STRICT}
define(address, Tutorial-i386.exe+26534)
define(step9Bytes, 8B 45 FC 89 43 04)

[ENABLE]
aobScanModule(aobStep9Hook, Tutorial-i386.exe, 8Bxxxx89xxxx8Bxxxx89xxxxxxxxD9xxxxxxxxxxxxxx7Axx75xx8Bxxxx)
define(injStep9Hook, aobStep9Hook+6)
assert(injStep9Hook, step9Bytes)
registerSymbol(injStep9Hook)

alloc(memStep9Hook, 0x400, injStep9Hook)

label(ptrStep9Hook)
registerSymbol(ptrStep9Hook)

label(step9n_code)
label(step9o_code)
label(step9exit)
label(step9return)

memStep9Hook:
	ptrStep9Hook:
		dd 0
		dd 0
	align 10 CC
	step9n_code:
		pushfd
		cmp [ebx+10],1
		jne @f
			mov eax,(float)${Value}
			jmp step9o_code
		@@:
		mov eax,0
	step9o_code:
		// mov eax,[ebp-04]
		mov [ebx+04],eax
	step9exit:
		popfd
		jmp step9return

injStep9Hook:
	jmp step9n_code
	nop
	step9return:

[DISABLE]
injStep9Hook:
	db step9Bytes

unregisterSymbol(injStep9Hook)
unregisterSymbol(ptrStep9Hook)
dealloc(memStep9Hook)
]]
	enableCheat(sender, script:gsub('${Value}', CheatForm.Cheat8Edit.Text))
	CheatForm.Cheat8Edit.Enabled = not sender.Checked
end

CheatForm.Show()
timer = createTimer(MainForm)
timer.Interval = 50
timer.OnTimer = function(timer)
	timer.destroy()
	hideAllCEWindows()
end

And that's a basic cheat form for the Cheat Engine tutorial (x32).

See Also

• Value Types
• Pointers
• The Stack
• AOBs

• How to attach to a process
• How to add script to table
• How to add addresses to the address list

• Cheat Engine Tutorial Guide (x32)
• Cheat Engine Tutorial Guide (x64)

• Finding values - Integers
• Finding values - Floats
• How to break and trace code in a process

• Tutorial - Cheat Form