View previous topic :: View next topic |
Author |
Message |
Lemom How do I cheat? Reputation: 0
Joined: 19 Jul 2017 Posts: 5
|
Posted: Wed Jul 19, 2017 11:00 am Post subject: Value that is the result of an equation |
|
|
Hello, first of all thank you for reading my post.
I'm asking for help becaues i tried to solve it myself, used search function on forum and read the tutorial and still i can't solve it.
Here is the problem:
I'm playing a game where i have 3000 maximum mana points. Everytime i level up i get more, but reading the address where it is stored (or i think it is) it says values like "1380" or "56732532867".
Then i started to try, and think. I solved that part because after doing some maths i found that 1380 is 100% at all lvls and the value that is shown on the address is 1380/max_mana*current_mana=value on address.
The problem is that is hard to read that value from memory and make a program to check it.
On my game screen the mana i see is (2835/3000) and on memory address what i see is something like "1150" and "1380".
I wanted to know if there is a way to read the value before all the math is applied, or something i can do to make my program work.
Sorry if i didn't explain well. English is not my main language, hope you can help me with this.
|
|
Back to top |
|
|
atom0s Moderator Reputation: 198
Joined: 25 Jan 2006 Posts: 8518 Location: 127.0.0.1
|
Posted: Fri Jul 21, 2017 9:06 pm Post subject: |
|
|
Use the 'Find what writes to this address' feature. It will help find what is writing to the address which you can then trace back and find where the value is being calculated and written at. Once you find that, you can create a code cave to store the value before the math happens and use a registered symbol to add it to your table with ease.
_________________
- Retired. |
|
Back to top |
|
|
Lemom How do I cheat? Reputation: 0
Joined: 19 Jul 2017 Posts: 5
|
Posted: Sat Jul 22, 2017 5:02 am Post subject: |
|
|
Thanks for the reply.
Did what you said and found this When i use an spell and my mana goes down:
Code: | 005A1260 - FF 15 48144000 - call dword ptr ["program.exe"+1448]
005A1266 - FF 15 B4134000 - call dword ptr ["program.exe"+13B4]
005A126C - 66 A3 E2447300 - mov ["program.exe"+3344E2],ax <<
005A1272 - C7 45 FC 50010000 - mov [ebp-04],00000150
005A1279 - 83 3D E0477300 00 - cmp dword ptr ["program.exe"+3347E0],00
EAX=40A80C28
EBX=00000001
ECX=00907E90
EDX=10C2AD60
ESI=00000000
EDI=00000001
ESP=0018CD10
EBP=0018EFE4
EIP=005A1272 |
The problem is that idk what to do know.
|
|
Back to top |
|
|
|