Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Can't find pointer(Added more info in the latest post)

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Gamehacking
View previous topic :: View next topic  
Author Message
jolo309
How do I cheat?
Reputation: 0

Joined: 31 Oct 2014
Posts: 2

PostPosted: Fri Oct 31, 2014 8:27 pm    Post subject: Can't find pointer(Added more info in the latest post) Reply with quote

Hi, i'm trying to find the pointer for the money in farming simulator 15, i chose this game because, well for learning.

So i found the money address, and it is a double, and i found another address which also relates to the money and it is 4 bytes, but it doesn't have the value as shown in game, the double one has the value same as the ingame one.

And if i change the 4 byte address then it also changes the money in game but by alot, and if i change the double address then example if i have 12,000 in game, then it is the same as the value the double have, and if i edit the value of the double to like 50000, then it shows 50,000 in game which is good.



Okay so i have tried pointer scanning, and the manual way.

First i tried the manual way:

1). Right click the double address
2). Clicked on "Find out what accesses this address" (I have tried the "Find out what writes to this address" too and it gave same result).

3). Lose money
4). Then 2 poped up in the opcodes accessed thing

Money address is: 10C531E8 but it is not the base one,
but here's the 2 things that popped up

first one was:

Code:

RAX=100A7D40
RBX=10030550
RCX=10C531E8
RDX=10C84390
RSI=100A7E90
RDI=100A7EB0
RBP=10395368
RSP=00DFEF90
RIP=7FF687175E1F

Probable base pointer =10C531E4

7FF687175E16 - cmp [rcx+08],eax
7FF687175E19 - jne FarmingSimulator2015Game.SDL_GetSystemRAM+6C974
7FF687175E1B - cmp dword ptr [rcx+04],-01
7FF687175E1F - je FarmingSimulator2015Game.SDL_GetSystemRAM+6C957
7FF687175E21 - test byte ptr [rbp+04],04


Then the second one

Code:

RAX=00000003
RBX=10030550
RCX=10C531E8
RDX=10C84390
RSI=100A7E90
RDI=100A7EB0
RBP=40B75F938E38E38E
RSP=00DFEF90
RIP=7FF687175E36

Probable base pointer =10C531E8

7FF687175E2B - movzx eax,byte ptr [rsi-03]
7FF687175E2F - mov rbp,[rdx+rax*8]
7FF687175E33 - mov [rcx],rbp
7FF687175E36 - mov eax,[rsi]
7FF687175E38 - movzx ecx,ah


Already tried to scan for the 10C531E4 with checkbox hex and value type 4 bytes, the same with 10C531E8 which is the money address, and i get no results at all.

I have been trying to get this for 2 days, so i would really appreciate the help Smile

Oh i nearly forgot, i did the pointer scanning, but i get no results after i rescan, and i have tried a few levels, 5, 6, 7 and the structsize, 2048, 3048, 4048.

So yeah, i have big trouble finding the pointer

I really hope to get this solved soon, and if you need more info then please tell Smile


Last edited by jolo309 on Sat Nov 01, 2014 11:53 am; edited 1 time in total
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 470

Joined: 09 May 2003
Posts: 25796
Location: The netherlands

PostPosted: Fri Oct 31, 2014 8:48 pm    Post subject: Reply with quote

General disclaimer: Before trying to find the pointer make sure that editing the value has in fact permanent effect in the game.
Meaning that if you buy something with that, it doesn't revert back to the original minus what you just bought

anyhow, you only found 1 address: 10C531E4 and 10C531E8 are the same address (double 10C531E4)

As for finding the pointer, are these two instructions the only instructions that access it ?
If so, you will have to do some disassembling of the code prior to the code found to figure out how RCX get's it's value.
Perhaps it's from a calculation in front, or it's passed as a parameter in a function called. (check the stacktrace. Click S, and then lock the snapshot of the stack to do a stacktrace) perhaps you can find the calculation in the function that called the current one

_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
jolo309
How do I cheat?
Reputation: 0

Joined: 31 Oct 2014
Posts: 2

PostPosted: Fri Oct 31, 2014 9:08 pm    Post subject: Reply with quote

Yes, it does have permanent effect in game Smile

Well there's 4 more, but those are continously accessing, anyway i accidently closed the game, so i had to find the address again and do the find out what accesses that address thing again.

But anyway, here it is

Money address: 104849B0

EDIT:

Code:

RAX=00000003
RBX=10030550
RCX=104849B0
RDX=10B06200
RSI=100A7E90
RDI=100A7EB0
RBP=40B767C9C71C71C7
RSP=00AEECE0
RIP=7FF6B49B5E36

Probable base pointer =104849B0

7FF6B49B5E2B - movzx eax,byte ptr [rsi-03]
7FF6B49B5E2F - mov rbp,[rdx+rax*8]
7FF6B49B5E33 - mov [rcx],rbp
7FF6B49B5E36 - mov eax,[rsi]
7FF6B49B5E38 - movzx ecx,ah


Now that i look at it, can this

7FF6B49B5E2F - mov rbp,[rdx+rax*8] have something to do with it
because next line it puts the value from rbp into rcx
7FF6B49B5E33 - mov [rcx],rbp

Could it have something to do with it?

Oh, and there's another thing which also refers to money, and is another address but if i change just one number, it also changes the money to a huge amount, here's the address 104849B4.

Money address(Double): 104849B0
Money address(4 Bytes): 104849B4 (And the value of the address changes when i edit the value of the double)

Also as i said the 4 bytes money address doesn't have the value as the one in game

The double value is: 6000
But the 4 bytes value is: 1085763584

I can't post pictures or links yet, so i can't really get super specific
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Gamehacking All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites