| View previous topic :: View next topic |
| Author |
Message |
argarg Cheater
Reputation: 0
Joined: 19 Jul 2005 Posts: 45
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 471
Joined: 09 May 2003 Posts: 25860 Location: The netherlands
|
Posted: Sat Nov 25, 2006 11:16 am Post subject: |
|
|
if the address changes it is a pointer.
do a 4 byte scan for 02c9b400 (hexcheckbox) and add that to the list and then find out what accesses that address and repeat
or replace that code that does nothing, or some codeinjection that does some more advanced structure checking (you have to write that yourself and figure out how the structure looks that ecx points to)
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
argarg Cheater
Reputation: 0
Joined: 19 Jul 2005 Posts: 45
|
Posted: Sun Nov 26, 2006 8:38 pm Post subject: |
|
|
ok i'm going for the code injection. When i do "what writes this address" I get:
the value of the pointer needed to find this address is probably: 0190b400
then, I search this value in hex and get 2 address but one of them is ALWAYS the same eventhough it's a new game. so if I add this address as a pointer and it's ofset which is +40e , i get a certain value (2616197376). Then , if i change the value of fog of war from 0 to 1 or from 1 to 0 , the big value (2616197376) changes to 2616197377. So I think I got something there. So the code injection script i'd have to make would have to decrement the big value by 1. Can anyone give me an example of it so I could base myself on it? I read the tut about assembly but I'm still having a hard time understanding it all ..
| Code: |
[ENABLE]
registersymbol(MapHack)
alloc(MapHack, 1024)
MapHack:
mov edi, [01DC4140+40e]
dec edi
[DISABLE]
unregistersymbol(MapHack)
dealloc(MapHack)
|
I know this is totally wrong but at least I tried ...
|
|
| Back to top |
|
 |
Overlord How do I cheat?
Reputation: 0
Joined: 29 Nov 2006 Posts: 3
|
Posted: Wed Nov 29, 2006 8:33 am Post subject: |
|
|
Hmm have you tried setting the value type from 4 to 1 byte? That might remove the big numbers and give you what you're looking for. Your 2616197377 value in hex looks like 9BF00101 and 2616197376 would be 9BF00100. So I'm guessing the last byte (00, 01) is what you want.
See ya.
|
|
| Back to top |
|
 |
argarg Cheater
Reputation: 0
Joined: 19 Jul 2005 Posts: 45
|
Posted: Wed Nov 29, 2006 10:40 am Post subject: |
|
|
thanks! changng to byte works great! i'm having one last problem, the pointer to the fog of war is always:
01DE4140 +40E
01DB4140 +40E
01DC4140 +40E
01DD4140 +40E
01DE4140 +40E
01DF4140 +40E
And for Blackmap:
01DE4140 +40F
01DB4140 +40F
01DC4140 +40F
01DD4140 +40F
01DE4140 +40F
01DF4140 +40F
It changes, but it's always at least one of these. My MH is working if I change them all in my trainer but I'd just like to know if there's a way to get only one address for Fog of war and one for blackmap?
|
|
| Back to top |
|
 |
|