 |
Cheat Engine The Official Site of Cheat Engine
|
View previous topic :: View next topic |
Author |
Message |
Samboskull How do I cheat?
Reputation: 0
Joined: 21 Apr 2009 Posts: 2
|
Posted: Sun Aug 09, 2015 4:21 pm Post subject: FF7 Steam Edition XP Multiplier issues |
|
|
Hi all, I'm currently in the process of trying to make an XP/AP multiplier for this game, however I'm having issues finding out what writes to the characters XP address at the end of battle;
Once the debugger is attached, the game will crash when the battle ends.
Is there an alternative way to find the pointers or run the debugger in a way that won't make the game crash?
EDIT: Cracked it, turns out I can use a different kind of debugger in Cheat Engine. Now to figure out the multiplier code!
EDIT 2: Okay I'm struggling with this, FF7 has a really ass backwards way of adding the XP.
The character XP values are static, and the after-battle XP is too, so it's easy to find these values. I found the assembler line that was writing to the Char XP at the end of the battle, it was
Code: | mov [some address], edx |
So, I injected the code
into new mem. So far so good, went into battle, kicked some arse, much to my surprise, the Char XP doubled. Whaaaaat. I now realise that it's taking the Char XP, adding the battle XP, then moving that new total with edx, so I was in affect doubling the Char XP after the battle XP was added.
Any ideas on how I would trace further up the stack?
|
|
Back to top |
|
 |
Rydian Grandmaster Cheater Supreme
Reputation: 31
Joined: 17 Sep 2012 Posts: 1358
|
Posted: Sun Aug 09, 2015 6:11 pm Post subject: |
|
|
... scroll up in the memory viewer?
Or if you want to read from the point that specific function starts, then right-click the code that does that in the memory viewer and choose to break and trace. Tell it like 500 instructions or so, and then gain some EXP so it traces and stuff. Expand the trees and you'll be able to see how it jumps back and forth, sort of.
So if you double-click the thing right after the end of the function, it'll bring focus to where that code is in the memory browser. Scroll up one line to find what called the function you were checking out at the time it was logged.
_________________
|
|
Back to top |
|
 |
Samboskull How do I cheat?
Reputation: 0
Joined: 21 Apr 2009 Posts: 2
|
Posted: Sun Aug 09, 2015 6:21 pm Post subject: |
|
|
I was just about to go to bed before I read this, didn't realise there was a tracer.
Looks like it's gonna be a late one!
|
|
Back to top |
|
 |
deama1234 Master Cheater
Reputation: 3
Joined: 20 Dec 2014 Posts: 328
|
Posted: Sun Aug 09, 2015 8:08 pm Post subject: |
|
|
An alternative way would be to just subtract "[some address]" from "edx"; like so:
Code: | push eax
mov eax,edx
sub eax,[some address]
add edx,eax
pop eax
...
|
Pretty much it just finds the difference between the "new" and "old" exp and adds it onto the "new" exp (pretty much 2x exp). If you want to add in a multiplier you can just add in some FPU in there, like:
Code: |
push eax
mov eax,edx
sub eax,[some address]
mov [difference],eax
fild [difference]
fmul [multiplier] //use fimul if [multiplier] is not a float
fistp [difference]
add edx,[difference]
pop eax
...
|
If the exp is in 4 bytes than the above should work; but if the exp is a float then you'll have to change a couple of things here and there.
|
|
Back to top |
|
 |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
|