| View previous topic :: View next topic |
| Author |
Message |
elsword Cheater
Reputation: 0
Joined: 05 Apr 2013 Posts: 26
|
Posted: Wed Aug 20, 2014 9:53 pm Post subject: what kind of 4 bytes value is this ? |
|
|
hello cheat engine buddies, i am sorry for making this thread, i dont know if my question is stupid or not but i tried google for a while and could not find any answer so i decided to make a thread here
there is a game, simple PC game i am playing, i tried to scan for the score, from byte-2bytes-4bytes-8bytes , none can find anything so i tried unknown value
after searching for a while i can get the address but what strange is its value
my ingame score is 82 but the 4bytes value on CE says 1079285657
i tried to change 1079285657 to 1080285657 my score became 158
1081841252 = 441
so i want to ask what is wrong with these values ? how can i convert them to decimal ?
|
|
| Back to top |
|
 |
zm0d Master Cheater
Reputation: 7
Joined: 06 Nov 2013 Posts: 423
|
Posted: Thu Aug 21, 2014 4:50 am Post subject: |
|
|
This looks like your ingame score is "decrypted" with a simple XOR statement Find out what writes to your ingame score and then dig around in the code with the disassembler =) You may find a XOR statement close the operation that sets your ingame score.
Good luck =)
edit:
or it's simply a double *facepalm kitty* :>
Last edited by zm0d on Thu Aug 21, 2014 9:42 am; edited 1 time in total |
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25807 Location: The netherlands
|
Posted: Thu Aug 21, 2014 5:22 am Post subject: |
|
|
it's a double
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
elsword Cheater
Reputation: 0
Joined: 05 Apr 2013 Posts: 26
|
Posted: Thu Aug 21, 2014 6:46 am Post subject: |
|
|
| zm0d wrote: | This looks like your ingame score is "decrypted" with a simple XOR statement Find out what writes to your ingame score and then dig around in the code with the disassembler =) You may find a XOR statement close the operation that sets your ingame score.
Good luck =) |
ok im gonna try it later
| Dark Byte wrote: | | it's a double |
changed to double and it says -4.18677817720094E-151 while ingame score is 264
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25807 Location: The netherlands
|
Posted: Thu Aug 21, 2014 7:13 am Post subject: |
|
|
Decrease the address by 4, as you found the last 4 bytes of the 8 byte double
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
elsword Cheater
Reputation: 0
Joined: 05 Apr 2013 Posts: 26
|
Posted: Thu Aug 21, 2014 7:18 am Post subject: |
|
|
| Dark Byte wrote: | | Decrease the address by 4, as you found the last 4 bytes of the 8 byte double |
wow you are right, the address shows the value of 264.xxxxxxxx
what kind of magic is this haha , i still have a lot to learn
if you dont mind, care to explain to me what is the reason ?
|
|
| Back to top |
|
 |
Xathan Advanced Cheater
Reputation: 1
Joined: 19 Jun 2014 Posts: 72
|
Posted: Thu Aug 21, 2014 7:24 am Post subject: |
|
|
Floating point numbers have an other bit presentation that usual integers.
Float has single precision and double has double precision because a computer cannot present floating point numbers exactly but rounded or truncated.
If you want to read more of this topic see wiki:
en(dot)wikipedia.org/wiki/Floating_point
|
|
| Back to top |
|
 |
STN I post too much
Reputation: 43
Joined: 09 Nov 2005 Posts: 2676
|
Posted: Thu Aug 21, 2014 1:04 pm Post subject: |
|
|
Not magic, data types are stored a certain way in memory.
You were accessing only 4 bytes of a double data type, a double is 8 bytes and you had the later 4 bytes added. Moving ahead to the first 4 bytes showed the correct value.
The 2/4/8/float etc bytes in CE means how much size of the address you want to see, selecting 2 bytes for a 4 bytes value will obviously show a big number or zero depending on which bytes you select out of the 4 bytes (first 2 or last 2), same with other data types.
Not sure if it makes sense to you, read up on data types in assembly and you will understand this clearly.
_________________
|
|
| Back to top |
|
 |
elsword Cheater
Reputation: 0
Joined: 05 Apr 2013 Posts: 26
|
Posted: Thu Aug 28, 2014 9:09 am Post subject: |
|
|
im currently study on making multilevel pointers, i have watched videos on youtube but my case is different this time, most i can find are fld,fsubr and fstp which isnt the same as in tutorial videos, and im stuck at the second offset, nothing found
if anyone interests in this can you can guide me thru teamviewer ?
my yahoo id is sol_trigger
|
|
| Back to top |
|
 |
zm0d Master Cheater
Reputation: 7
Joined: 06 Nov 2013 Posts: 423
|
Posted: Fri Aug 29, 2014 2:37 am Post subject: |
|
|
At best, use the CE Pointer Scanner... worth 10/10.
It saves you soooo much time.
Also, if you really want to go through pointerchains manually, you might look for MOV or LEA statements. Use the CE function "Find out what writes/accesses" to a certain value and then go on...
|
|
| Back to top |
|
 |
elsword Cheater
Reputation: 0
Joined: 05 Apr 2013 Posts: 26
|
Posted: Fri Aug 29, 2014 10:22 pm Post subject: |
|
|
| zm0d wrote: | At best, use the CE Pointer Scanner... worth 10/10.
It saves you soooo much time.
Also, if you really want to go through pointerchains manually, you might look for MOV or LEA statements. Use the CE function "Find out what writes/accesses" to a certain value and then go on... |
pointers scan gave no result at all, i searched for a max offset value 4096 / max Lv 5 for 600 seconds, after a few times rescan it show 0 result
the other method, im stucked at the second scan, none found
this should not be too hard, it's just a simple MP value...
| Description: |
|
| Filesize: |
87.48 KB |
| Viewed: |
21721 Time(s) |

|
| Description: |
|
| Filesize: |
151.88 KB |
| Viewed: |
21721 Time(s) |

|
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25807 Location: The netherlands
|
Posted: Sat Aug 30, 2014 6:38 pm Post subject: |
|
|
try finding out what accesses 1d9ccfe8, or 1d9cd204, or 1daf3528, or...
generally speaking, pick the lowest possible address
As for pointerscan: seeing for the last entry it already gave an offset of 718 it's likely the default structsize is too small. (instead of 2048, try 3072, or 4096) and if you feel like it, try a level 6 or 7
You can increase the speed by telling it the last offset is 718
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
elsword Cheater
Reputation: 0
Joined: 05 Apr 2013 Posts: 26
|
Posted: Sat Aug 30, 2014 9:57 pm Post subject: |
|
|
yeah i actually tried almost all address from 1xxxxxxxx > 7xxxxxxx but most of them was false count, 0xxxxxxxx and some addresses crashed the game
i did a 4096 Lv6 700 seconds yesterday still couldnt find it, i will try doing a Lv7 today ...
|
|
| Back to top |
|
 |
elsword Cheater
Reputation: 0
Joined: 05 Apr 2013 Posts: 26
|
Posted: Sun Sep 14, 2014 11:44 pm Post subject: |
|
|
im desperate for help... scanned with 4096 / at 1200+ seconds but still could not find the correct pointer... why is is so hard ? it's just a simple MP value from a simple PC game
can anyone help me remotely through teamviewer or i can do a broadcast
pointer or script or code injection... anything is fine
please pm me how i contact you if you are willing to help ...
|
|
| Back to top |
|
 |
|