CHEATENGINE

Instant Charge [ENABLE] //code from here to '[DISABLE]' will be used to enable the cheat alloc(newmem,2048) //2kb should be enough label(returnhere) label(originalcode) label(exit) label(chargelabel) registersymbol(chargelabel) aobscan(chargeaob,83 47 24 01 8b 47 24) chargeaob: chargelabel: jmp newmem nop nop returnhere: newmem: //this is allocated memory, you have read,write,execute access add dword ptr [edi+24],01 mov [edi+24],7530 //place your code here originalcode: //add dword ptr [edi+24],01 mov eax,[edi+24] exit: jmp returnhere

[DISABLE] //code from here till the end of the code will be used to disable the cheat dealloc(newmem) chargelabel: add dword ptr [edi+24],01 mov eax,[edi+24] //Alt: db 83 47 24 01 8B 47 24 unregistersymbol(chargelabel) Sunlight [ENABLE] //code from here to '[DISABLE]' will be used to enable the cheat alloc(newmem,2048) //2kb should be enough label(returnhere) label(originalcode) label(exit) label(sunlightlabel) registersymbol(sunlightlabel) aobscan(sunlightaob,8b 86 60 55 00 00 33 c9) sunlightaob: sunlightlabel: jmp newmem nop returnhere: newmem: //this is allocated memory, you have read,write,execute access mov eax,[esi+00005560] mov [esi+00005560],0001869F //place your code here

originalcode: //mov eax,[esi+00005560] exit: jmp returnhere

[DISABLE] //code from here till the end of the code will be used to disable the cheat dealloc(newmem) sunlightlabel: mov eax,[esi+00005560] //Alt: db 8B 86 60 55 00 00 unregistersymbol(sunlightlabel) Money [ENABLE] //code from here to '[DISABLE]' will be used to enable the cheat alloc(newmem,2048) //2kb should be enough label(returnhere) label(originalcode) label(exit) label(moneylabel) registersymbol(moneylabel) aobscan(moneyaob,8b 41 28 8d 4c 24 34) moneyaob: moneylabel: jmp newmem nop nop returnhere: newmem: //this is allocated memory, you have read,write,execute access mov eax,[ecx+28] mov [ecx+28],0001869F //place your code here originalcode: //mov eax,[ecx+28] lea ecx,[esp+34] exit: jmp returnhere

[DISABLE] //code from here till the end of the code will be used to disable the cheat dealloc(newmem) moneylabel: mov eax,[ecx+28] lea ecx,[esp+34] //Alt: db 8B 41 28 8D 4C 24 34 unregistersymbol(moneylabel) Instant kill unarmored zombies [ENABLE] //code from here to '[DISABLE]' will be used to enable the cheat alloc(newmem,2048) //2kb should be enough label(returnhere) label(originalcode)

label(exit) label(killzombielabel) registersymbol(killzombielabel) aobscan(killzombieaob,89 bd c8 00 00 00) killzombieaob: killzombielabel: jmp newmem nop returnhere: newmem: //this is allocated memory, you have read,write,execute access mov [ebp+000000c8],0 //place your code here originalcode: //mov [ebp+000000c8],edi exit: jmp returnhere

[DISABLE] //code from here till the end of the code will be used to disable the cheat dealloc(newmem) killzombielabel: mov [ebp+000000c8],edi //Alt: db 89 BD C8 00 00 00 unregistersymbol(killzombielabel) Instant Destroy zombie Armor [ENABLE] //code from here to '[DISABLE]' will be used to enable the cheat alloc(newmem,2048) //2kb should be enough label(returnhere) label(originalcode) label(exit) label(zombiearmorlabel) registersymbol(zombiearmorlabel) aobscan(zombiearmoraob,89 8d d0 00 00 00) zombiearmoraob: zombiearmorlabel: jmp newmem nop returnhere: newmem: //this is allocated memory, you have read,write,execute access mov [ebp+000000d0],0 //place your code here originalcode: //mov [ebp+000000d0],ecx exit: jmp returnhere

[DISABLE] //code from here till the end of the code will be used to disable the cheat dealloc(newmem) zombiearmorlabel: mov [ebp+000000d0],ecx //Alt: db 89 8D D0 00 00 00 unregistersymbol(zombiearmorlabel) Instant destroy zombie stuff [ENABLE] //code from here to '[DISABLE]' will be used to enable the cheat alloc(newmem,2048) //2kb should be enough label(returnhere) label(originalcode) label(exit) label(zombiestufflabel) registersymbol(zombiestufflabel) aobscan(zombiestuffaob,29 86 dc 00 00 00) zombiestuffaob: zombiestufflabel: jmp newmem nop returnhere: newmem: //this is allocated memory, you have read,write,execute access sub [esi+000000dc],eax mov [esi+000000dc],0 //place your code here originalcode: //sub [esi+000000dc],eax exit: jmp returnhere

[DISABLE] //code from here till the end of the code will be used to disable the cheat dealloc(newmem) zombiestufflabel: sub [esi+000000dc],eax //Alt: db 29 86 DC 00 00 00 unregistersymbol(zombiestufflabel) Invincible plants ] //code from here to '[DISABLE]' will be used to enable the cheat alloc(newmem,2048) //2kb should be enough label(returnhere) label(originalcode) label(exit) label(plantlifelabel) registersymbol(plantlifelabel) aobscan(plantlifeaob,83 46 40 fc 8b 4e 40) plantlifeaob: plantlifelabel: jmp newmem nop nop returnhere:

[ENABLE

newmem: //this is allocated memory, you have read,write,execute access add dword ptr [esi+40],0 //place your code here originalcode: //add dword ptr [esi+40],fc mov ecx,[esi+40] exit: jmp returnhere

[DISABLE] //code from here till the end of the code will be used to disable the cheat dealloc(newmem) 00530040: add dword ptr [esi+40],fc mov ecx,[esi+40] //Alt: db 83 46 40 FC 8B 4E 40 unregistersymbol(plantlifelabel) Sunlight for v1201073 ABLE] //code from here to '[DISABLE]' will be used to enable the cheat alloc(newmem,2048) //2kb should be enough label(returnhere) label(originalcode) label(exit) 00494445: jmp newmem nop returnhere: newmem: //this is allocated memory, you have read,write,execute access mov eax,[edi+00005578] mov [edi+00005578],0001869F //place your code here originalcode: //mov eax,[edi+00005578] exit: jmp returnhere

c [EN

[DISABLE] //code from here till the end of the code will be used to disable the cheat dealloc(newmem) 00494445: mov eax,[edi+00005578] //Alt: db 8B 87 78 55 00 00 Instant recharge for v1201073 [ENABLE] //code from here to '[DISABLE]' will be used to enable the cheat alloc(newmem,2048) //2kb should be enough label(returnhere) label(originalcode)

label(exit) 00491E4C: jmp newmem nop returnhere: newmem: //this is allocated memory, you have read,write,execute access inc [edi+24] mov [edi+24],7530 //place your code here originalcode: //inc [edi+24] mov eax,[edi+24] exit: jmp returnhere

[DISABLE] //code from here till the end of the code will be used to disable the cheat dealloc(newmem) 00491E4C: inc [edi+24] mov eax,[edi+24] //Alt: db FF 47 24 8B 47 24+ Instant kill unarmored zombies for v1201073 D [ENABLE] //code from here to '[DISABLE]' will be used to enable the cheat alloc(newmem,2048) //2kb should be enough label(returnhere) label(originalcode) label(exit) 00541CE4: jmp newmem nop returnhere: newmem: //this is allocated memory, you have read,write,execute access mov [edi+000000c8],0 //place your code here originalcode: //mov [edi+000000c8],ebp exit: jmp returnhere

[DISABLE] //code from here till the end of the code will be used to disable the cheat dealloc(newmem) 00541CE4: mov [edi+000000c8],ebp //Alt: db 89 AF C8 00 00 00 Money for v1201073 w [ENABLE]

//code from here to '[DISABLE]' will be used to enable the cheat alloc(newmem,2048) //2kb should be enough label(returnhere) label(originalcode) label(exit) 0041CEA4: jmp newmem nop nop returnhere: newmem: //this is allocated memory, you have read,write,execute access mov eax,[ecx+50] mov [ecx+50],0001869F //place your code here originalcode: //mov eax,[ecx+50] lea edi,[esp+2c] exit: jmp returnhere

[DISABLE] //code from here till the end of the code will be used to disable the cheat dealloc(newmem) 0041CEA4: mov eax,[ecx+50] lea edi,[esp+2c] //Alt: db 8B 41 50 8D 7C 24 2C Invincible plants for v1201073 z [ENABLE] //code from here to '[DISABLE]' will be used to enable the cheat alloc(newmem,2048) //2kb should be enough label(returnhere) label(originalcode) label(exit) 00540680: jmp newmem nop nop returnhere: newmem: //this is allocated memory, you have read,write,execute access add dword ptr [esi+40],0 //place your code here originalcode: //add dword ptr [esi+40],fc mov ecx,[esi+40] exit: jmp returnhere

[DISABLE] //code from here till the end of the code will be used to disable the cheat dealloc(newmem) 00540680: add dword ptr [esi+40],fc mov ecx,[esi+40] //Alt: db 83 46 40 FC 8B 4E 40

uH PlantsVsZombies.exeu `U 3#Display Sun :mov eax,[esi+00005560]A PlantsVsZo ney :mov eax,[ecx+28]uH PlantsVsZombies.exeu I t G$G$;G#Recharge :add dword ptr [edi+24 iS PlantsVsZombies.exei D$ %Change Health :mov [ebp+000000c8],edi S PlantsVsZom

 t j $Change Armor :mov [ebp+000000d0],ecxS PlantsVsZombies.exe +) 2Cha sub [esi+000000dc],eax@ S PlantsVsZombies.exe@ F@N@.Decrease plant life :add dwo ],fcEDI PlantsVsZombies.exeED xU 3,Display sun v1201073 :mov eax,[edi+00005578] sVsZombies.exeL I tG$G$;G#Recharge for v1201073 :inc [edi+24]T PlantsVsZombies.exe D$ lth for v1201073 :mov [edi+000000c8],ebpA PlantsVsZombies.exe L AP $,,Display 01073 :mov eax,[ecx+50] T PlantsVsZombies.exe F@N@;Decrease plant life for v1201 esi+40],fc This table has been created for Plants vs. Zombies and I hope it will work with most versions of the game. It has been tested with v1.2.0.1065 and v1.0.0.1051 Options are pretty obvious but here is a description: Instant Charge Sunlight Money Instant kill unarmored zombies Instant Destroy zombie Armor (like buckets on the head etc) Instant destroy zombie stuff (like doors, ladders, etc) Invincible plants (they will still die if they take so much damage that would ki ll them instantly) For v1.2.0.1073, I had to add some new options because most of the general optio ns did not work: Sunlight for v1201073 Instant recharge for v1201073 Instant kill unarmored zombies for v1201073 Money for v1201073 Invincible plants for v1201073 These general options are working with v1.2.0.1073 too. Instant Destroy zombie Armor (like buckets on the head etc) Instant destroy zombie stuff (like doors, ladders, etc)