| View previous topic :: View next topic |
| Author |
Message |
Hacksaw123 Newbie cheater
Reputation: 0
Joined: 19 Mar 2010 Posts: 11
|
Posted: Sun Mar 21, 2010 4:29 pm Post subject: Civilization 4: Beyond the Sword 3.19 |
|
|
I've been searching for values all day it seems. What I want to do is replicate the cheathappens trainer for this game which allows 1 turn creation of units, research, buildings, and unlimited movement. So far all I've been able to locate is the address that controls the amount of gold I have, and several addresses on the production of individual units and individual research topics. What I want to locate is a universal production address that would allow me to set the production and research addresses of items in every city in Civilization 4 from one source. I'm not evn sure how I would go about finding a universal movement address. I would appreciate any help anyone can give me.
p.s- every time I exit the game and reopen it and play it, the addresses are no longer the sam, is this normal and how would I fix it without having to reset all the pointers and addresses again? |
|
| Back to top |
|
 |
apocalypticx Expert Cheater
Reputation: 4
Joined: 19 Jul 2009 Posts: 128 Location: UK
|
Posted: Sun Mar 21, 2010 7:21 pm Post subject: |
|
|
Almost all games use DMA so each time you close and reload the game the addresses you found before will not be valid anymore.
You need to learn about code injection and defeating DMA.. |
|
| Back to top |
|
 |
Hacksaw123 Newbie cheater
Reputation: 0
Joined: 19 Mar 2010 Posts: 11
|
Posted: Sun Mar 21, 2010 10:17 pm Post subject: |
|
|
| Well, I found a nice video tutorial on the internet about defeating DMA, but I hit a snag. Instead of one green address, it gave me two green ones. Both addresses are CvGameCoreDLL.dll+453D78 and CvGameCoreDLL.dll+456000 The probable base pointer for both is 000EAA90, howver when I type it in, this address doesn't exist. Also when I was searching for what wrote to a particular address, instead of the eXX+# in the brackets it said: [cvdllentity::`vftable'+eaa90]. The current dynamic address that controls the amount of gold I have is 040FC51C and the value of the two GameCore addresses are both 0x04FC504(which was the value of the pointer-040FC51C), can there be two base addresses? It comes out the same very time I run through the process, same offsets as well. Where do I go from here? Thanks. |
|
| Back to top |
|
 |
apocalypticx Expert Cheater
Reputation: 4
Joined: 19 Jul 2009 Posts: 128 Location: UK
|
Posted: Mon Mar 22, 2010 7:18 am Post subject: |
|
|
Heres a script to increase your gold by 65535 every turn:
//=========================================
// Civilization 4 Beyond The Sword
// Game Version : 3.19
// Script Version: 1.0
// CE Version : 5.6
// Money 65535
// 22-Mar-2010
// By Apocalypticx
//=========================================
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
0201eed0:
call 00A9B90F
nop
nop
nop
nop
00A9B90F:
mov [ecx+18],eax
mov word ptr [ecx+18],FFFF
mov ecx,[23431C4]
ret
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
//orignal code below
0201eed0:
mov [ecx+18],eax
0201eed3:
mov ecx,[23431C4]
Copy paste this into an auto assembler script and assign it to the cheat table this cheat will only work as long as you have some sort of gold coming in so adjust your tax rate to get an income of say 1 gold... and instead of just 1 gold coming in each turn you will get 65535 per turn.
Like i said before look into code injection tutorials i only use pointers as a last resort on any game almost every cheat i have made is code injection based  |
|
| Back to top |
|
 |
Hacksaw123 Newbie cheater
Reputation: 0
Joined: 19 Mar 2010 Posts: 11
|
Posted: Mon Mar 22, 2010 6:28 pm Post subject: |
|
|
I followed a tutorial online and successfully did my first two code injections, my money is frozen at a high enough amount and I have 1 turn completion of all research, I'm moving on to buildings and units next, which may be harder to nail down, once I am finished getting what I need, I'll post my very first trainer here. The only thing I'm wondering about is unlimited movement for the units, movement amount is listed, say-7, and when you move it one space forward, it'll say 6/7 and count down to 0/7, maybe it works like research, I'm not sure yet. Thanks for the direction apocalypticx. I'll show those cheathappens scammers what for with this trainer . I do have a small problem, the ai has these effects too, how do I enable it just for the player? |
|
| Back to top |
|
 |
apocalypticx Expert Cheater
Reputation: 4
Joined: 19 Jul 2009 Posts: 128 Location: UK
|
Posted: Mon Mar 22, 2010 7:40 pm Post subject: |
|
|
There is tutorials on making player only options floating around i can link you up with some if want?
The script i pasted above works for the player only the computer doesnt get the benefit of 65k gold every turn, also for movement the easy way to find it is to have a railway built on your land and select a single unit search unknown value move it one square search increased value stay still has not changed move a square search has increased etc 1byte value if i remember. |
|
| Back to top |
|
 |
Hacksaw123 Newbie cheater
Reputation: 0
Joined: 19 Mar 2010 Posts: 11
|
Posted: Mon Mar 22, 2010 9:42 pm Post subject: |
|
|
Thanks I would like those links, I'm trying to learn this myself and not asking for it to be done for me, even though that would be easier, you know the saying- if you give a man a fish, he'll eat for a day, if you teach a man to fish, he'll eat for a lifetime. Maybe you can help me, I will run through what i did and give you the code of the static address I found from following my gold trail I went from dynamic gold address - 0436A25C to what writes to it - and got 2 addresses. Tutorials have said that it is usually the top one,
03deeed0 - 89 41 18 - mov [ecx+18],eax
03deeeca - 8b b1 8c 01 00 00 - mov esi,[ecx+0000018c]
so I showed the disassembler for the first one and it pointed to -03DEEED0 - 89 41 18 - mov [ecx+18],eax
and here is the code for that(I added the cheat table framework) How would I make this for the player only, or is it the second opcode?:
[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(newmem,2048) //2kb should be enough
label(returnhere)
label(originalcode)
label(exit)
03DEEED0:
jmp newmem
nop
nop
nop
nop
returnhere:
newmem: //this is allocated memory, you have read,write,execute access
//place your code here
originalcode:
mov [ecx+18],eax
mov ecx,[cvdllentity::`vftable'+e9edc]
exit:
jmp returnhere
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
03DEEED0:
mov [ecx+18],eax
mov ecx,[cvdllentity::`vftable'+e9edc]
//Alt: db 89 41 18 8B 0D C4 31 11 04 |
|
| Back to top |
|
 |
apocalypticx Expert Cheater
Reputation: 4
Joined: 19 Jul 2009 Posts: 128 Location: UK
|
Posted: Tue Mar 23, 2010 4:54 am Post subject: |
|
|
To find the gold opcode use "Find out what writes to this address"
it breaks here:
0201EED0 - 89 41 18 - mov [ecx+18],eax
Create a jump to your codecave from there and move some large number into [ecx+18], this will increase your gold by the amount you choose per turn.
This will work for you and not the computer players.. |
|
| Back to top |
|
 |
Hacksaw123 Newbie cheater
Reputation: 0
Joined: 19 Mar 2010 Posts: 11
|
Posted: Tue Mar 23, 2010 1:27 pm Post subject: |
|
|
| Thanks I think I got it, now what about 1 turn completion of things? And could you give me the links to those tutorials? |
|
| Back to top |
|
 |
apocalypticx Expert Cheater
Reputation: 4
Joined: 19 Jul 2009 Posts: 128 Location: UK
|
Posted: Tue Mar 23, 2010 2:43 pm Post subject: |
|
|
For production order a building and skip a turn now search for the amount of hammers invested into that building skip a turn search next for the new amount of hammers invested into the building.. To see hammers invested just hold your mouseover the city bar
I cannot post links yet as my post count is not high enough..
If you have windows live messenger i can add you |
|
| Back to top |
|
 |
Hacksaw123 Newbie cheater
Reputation: 0
Joined: 19 Mar 2010 Posts: 11
|
Posted: Tue Mar 23, 2010 2:49 pm Post subject: |
|
|
| I do, check my profile |
|
| Back to top |
|
 |
Hacksaw123 Newbie cheater
Reputation: 0
Joined: 19 Mar 2010 Posts: 11
|
Posted: Fri Mar 26, 2010 9:19 pm Post subject: |
|
|
| Hi I saw and downloaded Recifense's cheat table for v3.01 of BTS, but the dll+ offsets are different in v 319. I'm working to make two trainers for v319, 1 for the game in general, a second for the mod Rise Of Mankind. Could someone help me find where the code references the player and the computer as different, because in my code, everyone gets the 1 turn completion of research, units, and buildings benefits. Any direction anyone could give me on this would be greatly appreciated. Thanks a million. |
|
| Back to top |
|
 |
hongkongcy19 How do I cheat?
Reputation: 0
Joined: 22 May 2010 Posts: 2
|
Posted: Sat May 22, 2010 10:31 pm Post subject: |
|
|
Hacksaw123
Would you send me the trainer you made for BTS v3.19?? Thank you very much. |
|
| Back to top |
|
 |
redos How do I cheat?
Reputation: 0
Joined: 04 Jun 2012 Posts: 2
|
Posted: Mon Jun 04, 2012 7:24 am Post subject: |
|
|
| Hacksaw123 wrote: | | Hi I saw and downloaded Recifense's cheat table for v3.01 of BTS, but the dll+ offsets are different in v 319. I'm working to make two trainers for v319, 1 for the game in general, a second for the mod Rise Of Mankind. Could someone help me find where the code references the player and the computer as different, because in my code, everyone gets the 1 turn completion of research, units, and buildings benefits. Any direction anyone could give me on this would be greatly appreciated. Thanks a million. |
the same question like yours
who can teach me?thanks a lot! |
|
| Back to top |
|
 |
sugarspice Newbie cheater
Reputation: 0
Joined: 26 Jul 2012 Posts: 10
|
Posted: Sun Sep 16, 2012 6:48 am Post subject: |
|
|
What about the mods built into the game?
Especially the Final Frontier one. |
|
| Back to top |
|
 |
|