Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Maybe stupid Question ?

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine
View previous topic :: View next topic  
Author Message
FozexD
How do I cheat?
Reputation: 0

Joined: 05 Mar 2017
Posts: 5
Location: israel
PostPosted: Thu Oct 25, 2018 1:13 pm    Post subject: Maybe stupid Question ? Reply with quote
So i have this script right here its not mine but i am trying to change the money value that it gives is it this ? : 48 8D 4C 24 50 if so what is this like Hex or some kind of ASCII sorry if this is dumb i am really new

Code:

{ Game   : ForzaHorizon4.exe
  Version:
  Date   : 2018-10-14
  Author : STN

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(creditss,ForzaHorizon4.exe,48 8D 4C 24 50 38 07 75 31 48 8D 57 16 E8 28) // should be unique
alloc(newmem,$1000,creditss)

label(code)
label(return)

newmem:

code:
  lea rcx,[rsp+50]
  mov [rdi], #17396679699
  jmp return

creditss:
  jmp newmem
return:
registersymbol(creditss)

[DISABLE]

creditss:
  db 48 8D 4C 24 50

unregistersymbol(creditss)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "ForzaHorizon4.exe"+9C291A

"ForzaHorizon4.exe"+9C28F3: E8 E8 04 E0 01              -  call ForzaHorizon4.exe+27C2DE0
"ForzaHorizon4.exe"+9C28F8: 48 8B D8                    -  mov rbx,rax
"ForzaHorizon4.exe"+9C28FB: 48 89 44 24 68              -  mov [rsp+68],rax
"ForzaHorizon4.exe"+9C2900: 48 83 38 00                 -  cmp qword ptr [rax],00
"ForzaHorizon4.exe"+9C2904: 74 0A                       -  je ForzaHorizon4.exe+9C2910
"ForzaHorizon4.exe"+9C2906: 48 8B C8                    -  mov rcx,rax
"ForzaHorizon4.exe"+9C2909: FF 15 71 1D A4 06           -  call qword ptr [ForzaHorizon4.exe+7404680]
"ForzaHorizon4.exe"+9C290F: 90                          -  nop
"ForzaHorizon4.exe"+9C2910: 0F B6 47 15                 -  movzx eax,byte ptr [rdi+15]
"ForzaHorizon4.exe"+9C2914: 41 B8 04 00 00 00           -  mov r8d,00000004
// ---------- INJECTING HERE ----------
"ForzaHorizon4.exe"+9C291A: 48 8D 4C 24 50              -  lea rcx,[rsp+50]
// ---------- DONE INJECTING  ----------
"ForzaHorizon4.exe"+9C291F: 38 07                       -  cmp [rdi],al
"ForzaHorizon4.exe"+9C2921: 75 31                       -  jne ForzaHorizon4.exe+9C2954
"ForzaHorizon4.exe"+9C2923: 48 8D 57 16                 -  lea rdx,[rdi+16]
"ForzaHorizon4.exe"+9C2927: E8 28 EC 22 07              -  call ForzaHorizon4.exe+7BF1554
"ForzaHorizon4.exe"+9C292C: 4C 8D 44 24 50              -  lea r8,[rsp+50]
"ForzaHorizon4.exe"+9C2931: 33 C0                       -  xor eax,eax
"ForzaHorizon4.exe"+9C2933: 8D 50 B4                    -  lea edx,[rax-4C]
"ForzaHorizon4.exe"+9C2936: 41 32 10                    -  xor dl,[r8]
"ForzaHorizon4.exe"+9C2939: 48 63 C8                    -  movsxd  rcx,eax
"ForzaHorizon4.exe"+9C293C: 88 54 0C 58                 -  mov [rsp+rcx+58],dl
}
Back to top
View user's profile Send private message AIM Address Yahoo Messenger MSN Messenger
OldCheatEngineUser
Whateven rank
Reputation: 20

Joined: 01 Feb 2016
Posts: 1586
PostPosted: Thu Oct 25, 2018 1:44 pm    Post subject: Reply with quote
FozexD wrote:
is it this ? : 48 8D 4C 24 50 if so what is this like Hex or some kind of ASCII

its hex, these are the bytes that represents:
Code:
lea rcx,[rsp+50]

seems like the value of rdi register is the money, and it appears to be encrypted.
_________________
About Me;
I Use CE Since Version 1.X, And Still Learning How To Use It Well!
Jul 26, 2020
STN wrote:
i am a sweetheart.
Back to top
View user's profile Send private message Visit poster's website
FozexD
How do I cheat?
Reputation: 0

Joined: 05 Mar 2017
Posts: 5
Location: israel
PostPosted: Thu Oct 25, 2018 1:49 pm    Post subject: Reply with quote
OldCheatEngineUser wrote:
FozexD wrote:
is it this ? : 48 8D 4C 24 50 if so what is this like Hex or some kind of ASCII

its hex, these are the bytes that represents:
Code:
lea rcx,[rsp+50]

seems like the value of rdi register is the money, and it appears to be encrypted.


So its encrypted code so i cant edit money value ?
Back to top
View user's profile Send private message AIM Address Yahoo Messenger MSN Messenger
OldCheatEngineUser
Whateven rank
Reputation: 20

Joined: 01 Feb 2016
Posts: 1586
PostPosted: Thu Oct 25, 2018 1:56 pm    Post subject: Reply with quote
you can edit by trial-and-error, or some reverse engineering. (for your information the encryption is done by game developers, not cheat table author / provider)
_________________
About Me;
I Use CE Since Version 1.X, And Still Learning How To Use It Well!
Jul 26, 2020
STN wrote:
i am a sweetheart.
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites