 |
Cheat Engine The Official Site of Cheat Engine
|
View previous topic :: View next topic |
Author |
Message |
jolo309 How do I cheat?
Reputation: 0
Joined: 31 Oct 2014 Posts: 2
|
Posted: Fri Oct 31, 2014 8:27 pm Post subject: Can't find pointer(Added more info in the latest post) |
|
|
Hi, i'm trying to find the pointer for the money in farming simulator 15, i chose this game because, well for learning.
So i found the money address, and it is a double, and i found another address which also relates to the money and it is 4 bytes, but it doesn't have the value as shown in game, the double one has the value same as the ingame one.
And if i change the 4 byte address then it also changes the money in game but by alot, and if i change the double address then example if i have 12,000 in game, then it is the same as the value the double have, and if i edit the value of the double to like 50000, then it shows 50,000 in game which is good.
Okay so i have tried pointer scanning, and the manual way.
First i tried the manual way:
1). Right click the double address
2). Clicked on "Find out what accesses this address" (I have tried the "Find out what writes to this address" too and it gave same result).
3). Lose money
4). Then 2 poped up in the opcodes accessed thing
Money address is: 10C531E8 but it is not the base one,
but here's the 2 things that popped up
first one was:
Code: |
RAX=100A7D40
RBX=10030550
RCX=10C531E8
RDX=10C84390
RSI=100A7E90
RDI=100A7EB0
RBP=10395368
RSP=00DFEF90
RIP=7FF687175E1F
Probable base pointer =10C531E4
7FF687175E16 - cmp [rcx+08],eax
7FF687175E19 - jne FarmingSimulator2015Game.SDL_GetSystemRAM+6C974
7FF687175E1B - cmp dword ptr [rcx+04],-01
7FF687175E1F - je FarmingSimulator2015Game.SDL_GetSystemRAM+6C957
7FF687175E21 - test byte ptr [rbp+04],04
|
Then the second one
Code: |
RAX=00000003
RBX=10030550
RCX=10C531E8
RDX=10C84390
RSI=100A7E90
RDI=100A7EB0
RBP=40B75F938E38E38E
RSP=00DFEF90
RIP=7FF687175E36
Probable base pointer =10C531E8
7FF687175E2B - movzx eax,byte ptr [rsi-03]
7FF687175E2F - mov rbp,[rdx+rax*8]
7FF687175E33 - mov [rcx],rbp
7FF687175E36 - mov eax,[rsi]
7FF687175E38 - movzx ecx,ah
|
Already tried to scan for the 10C531E4 with checkbox hex and value type 4 bytes, the same with 10C531E8 which is the money address, and i get no results at all.
I have been trying to get this for 2 days, so i would really appreciate the help
Oh i nearly forgot, i did the pointer scanning, but i get no results after i rescan, and i have tried a few levels, 5, 6, 7 and the structsize, 2048, 3048, 4048.
So yeah, i have big trouble finding the pointer
I really hope to get this solved soon, and if you need more info then please tell
Last edited by jolo309 on Sat Nov 01, 2014 11:53 am; edited 1 time in total |
|
Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25796 Location: The netherlands
|
Posted: Fri Oct 31, 2014 8:48 pm Post subject: |
|
|
General disclaimer: Before trying to find the pointer make sure that editing the value has in fact permanent effect in the game.
Meaning that if you buy something with that, it doesn't revert back to the original minus what you just bought
anyhow, you only found 1 address: 10C531E4 and 10C531E8 are the same address (double 10C531E4)
As for finding the pointer, are these two instructions the only instructions that access it ?
If so, you will have to do some disassembling of the code prior to the code found to figure out how RCX get's it's value.
Perhaps it's from a calculation in front, or it's passed as a parameter in a function called. (check the stacktrace. Click S, and then lock the snapshot of the stack to do a stacktrace) perhaps you can find the calculation in the function that called the current one
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
 |
jolo309 How do I cheat?
Reputation: 0
Joined: 31 Oct 2014 Posts: 2
|
Posted: Fri Oct 31, 2014 9:08 pm Post subject: |
|
|
Yes, it does have permanent effect in game
Well there's 4 more, but those are continously accessing, anyway i accidently closed the game, so i had to find the address again and do the find out what accesses that address thing again.
But anyway, here it is
Money address: 104849B0
EDIT:
Code: |
RAX=00000003
RBX=10030550
RCX=104849B0
RDX=10B06200
RSI=100A7E90
RDI=100A7EB0
RBP=40B767C9C71C71C7
RSP=00AEECE0
RIP=7FF6B49B5E36
Probable base pointer =104849B0
7FF6B49B5E2B - movzx eax,byte ptr [rsi-03]
7FF6B49B5E2F - mov rbp,[rdx+rax*8]
7FF6B49B5E33 - mov [rcx],rbp
7FF6B49B5E36 - mov eax,[rsi]
7FF6B49B5E38 - movzx ecx,ah
|
Now that i look at it, can this
7FF6B49B5E2F - mov rbp,[rdx+rax*8] have something to do with it
because next line it puts the value from rbp into rcx
7FF6B49B5E33 - mov [rcx],rbp
Could it have something to do with it?
Oh, and there's another thing which also refers to money, and is another address but if i change just one number, it also changes the money to a huge amount, here's the address 104849B4.
Money address(Double): 104849B0
Money address(4 Bytes): 104849B4 (And the value of the address changes when i edit the value of the double)
Also as i said the 4 bytes money address doesn't have the value as the one in game
The double value is: 6000
But the 4 bytes value is: 1085763584
I can't post pictures or links yet, so i can't really get super specific
|
|
Back to top |
|
 |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
|