Cheat Engine

nask00s

Hi I'm new and I tried to hack Need for Speed Hot Pursuit 2010. First I tried to find if there is something here. Finally I found nitro hack. Then I tried to find something on my own, so I found the address and the value of EMPs. I was so happy but when I started again the game I understood that the address change. Now I want your help. I pressed to the EMP address 'Find out what writes to this address' so I found that [ecx+eax*4+00000598] which is standard like the value of eax which is 00000002. ECX changes the two characters of its value (ecx=0Axx3500). What can I do then?

Geri · Moderator Reputation: 111 Joined: 05 Feb 2010 Posts: 5636

Check out the addresses that are reading the values. You may find a code which is reading Your "weapons" only. Then You can use code injection to make a script for unlimited weapons for Yourself only (and not for the enemies). I didn't bother with this cheat at all. I just wanted nitro and more speed. After all, this game is Need for Speed. Smile

nask00s · Posted: Wed Dec 15, 2010 7:17 am Post subject:

I want to hack my turbo but it was difficult to find the value fast because you have only 2 or 1 turbo.

Geri · Moderator Reputation: 111 Joined: 05 Feb 2010 Posts: 5636

The address of the nitro is static. Probably the address of the turbo is static too, so You do not need to restart the search when You restart the level etc. It will be probably easier to find it this way.

nask00s · Posted: Wed Dec 15, 2010 8:24 am Post subject:

Oh also I have another question from where I can enable the 'find out what reads...'?

Geri · Moderator Reputation: 111 Joined: 05 Feb 2010 Posts: 5636

Right-click on the address in Your table and choose it from the menu. It is called "accesses" instead of reads.

For finding out what addresses are read by a code, right-click on the code and choose that option.

nask00s · Posted: Wed Dec 15, 2010 10:36 am Post subject:

I have only 'find out what accesses...' and 'find out what writes...'. I asked how to enable it.

Geri · Moderator Reputation: 111 Joined: 05 Feb 2010 Posts: 5636

Find out what accesses will list all codes that are reading or writing to the address and basically You will see all codes that are using that value for any purpose. So there is no "find out what reads from this address" option.

nask00s · Posted: Wed Dec 15, 2010 10:57 am Post subject:

But in many videos there is this selection (find out what reads...) with right click to the address but not in mine.Why?

Geri · Moderator Reputation: 111 Joined: 05 Feb 2010 Posts: 5636

Those videos are old. The "find out what reads" option has been replaced with "find out what accesses" long ago.

If You are confused which codes are reading or writing Your value, here are some very basic quick hints.

If it is a simple 4 byte value, then a code which is reading it will probably looks like this:

instruction register,[Your value]
example:

mov eax,[esi+40]
If You see a cmp instruction, it means the value is compared with some other value so it can kinda go to the "read" section (at least we can say that cmp is not changing the value just using it to compare it with some other value)

If it is writing to it, it will look like this:
instruction [Your value],register

example:
mov [esi+40],eax
sub [esi+40],eax
add [esi+40],eax

etc.

If it is a float value, FLD instruction is reading it and FSTP is writing to it.

Of course there are more instructions, but You will encounter these in most cases.

nask00s · Posted: Wed Dec 15, 2010 11:39 am Post subject:

I me really confused and I dont know what to do. I have dex,[ecx+eax*4+00000598] after that I searched for ecx, I found many results I took the first nad I did the same I searched for 'what writes', I find [edi+4] and then nfs freezes and stops working. I don t know why I m doing it and why nfs stops.

Geri · Moderator Reputation: 111 Joined: 05 Feb 2010 Posts: 5636

dec,[ecx+eax*4+00000598]

This code is probably used to decrease a "weapons" amount when You use it.
ecx is the base address, eax is a counter and 598 is the offset where the first weapon's valut is stored.

Try to use "replace with code that does nothing" and probably You will have infinite weapons. The enemy will also have, but better than nothing.

nask00s · Posted: Wed Dec 15, 2010 11:59 am Post subject:

Sorry! The last question. the address isn t static when I close and I re-open the game everything changes. How to save and 'stay' at this address or something like that?

Geri · Moderator Reputation: 111 Joined: 05 Feb 2010 Posts: 5636

You can't make it stay there. But You can try to find pointers.
Btw, the many things are static in this game. The nitro, the data of Your car, etc.
I didn't really check anything else besides these, so I don't know the weapons.

nask00s · Posted: Wed Dec 15, 2010 12:30 pm Post subject:

Everything that I cheacked isnt static and do you have a good tutorial for pointers or can you explain me better, because I did the cheat engine tuts and I didn't understood many things. Thank you so much.