Posted: Fri Jan 24, 2020 3:53 am Post subject: Complicated calculation...
Hey Guys,
I am trying still to solve one game (my post is on general gamehacking) Now I am looking manually what writes to the addres and I have found a good way to go thru the steps...
I have 2 questions here...
1. how to calculate this: ebx+esi*4+08 ?
2. when being at level 6 of searching I am getting back 2 addresses and one is coming back to the same results but second has unknown to me things like:
"cmp dword ptr [eax+000001A8],00"
and
"mov edx,[ecx+000001A8"
Do you think I should go with cmp stuff to look forward?
EDIT:
3. Is it possible that the game has kind of protection? During my steps suddenly my initial value and all my addresses went to "0"... Is it possible that the game moved it again to something else?
1: Multiply esi by 4, add that to ebx, and add 8 to that as well. I don't know what you're asking. You can do this and it'll work:
Code:
lea eax,[ebx+esi*4+8] // eax is now ebx+esi*4+8
// or:
mov [ebx+esi*4+8],7 // writes 7 to that address
If you're looking for what offset to use in the pointer path, use esi*4+8. e.g. if esi = 4, the offset would be 0x18.
2: Those are instructions. They say the same thing with regards to the probable offset at that level: it's +1A8 away from the base. Try completing the CE tutorial- there's a step or two that covers this.
3: I wouldn't call that "protection" - more like "something annoying you'll have to deal with." I'd guess it is moving somewhere else. Try pausing the game while finding a pointer, and don't do something significant in the game like transition between levels. _________________
I don't know where I'm going, but I'll figure it out when I get there.
And the last address which is "reacting" for the coins deduction in the game is the green one. But it has a lot of differen types which are accessing it too... so beside the reaction on deduction it has a lot of different ones...
Previous steps were always reacting in one new type bu the last one is reacting with at least 15 eax, ecx and esi...
Does someone have an idea what to do with this? When checking those I am getting into the loop as previous address is the same...
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum