| View previous topic :: View next topic |
| Author |
Message |
notu Newbie cheater
Reputation: 0
Joined: 26 Mar 2006 Posts: 20
|
Posted: Sun Mar 26, 2006 4:32 pm Post subject: Help with value searching |
|
|
I can't seem to be able to find the values in some commercial games and also in every flash game. Double values used to be the value type for flash games but now it's useless to search the value in it. I would like to be told the new way to find values for flash games. Also, the commercial games that cannot be searched because there was no known value type for it. I would appreciate someone to tell me how to find the values in these two types of games. Thanks.
Example of a commercial game would be: Age of Empires 2: Age of Kings(Latest Patch)
You will notice that no flash game can be searched now. |
|
| Back to top |
|
 |
algrn912005 Expert Cheater
Reputation: 0
Joined: 12 Nov 2005 Posts: 124
|
Posted: Mon Mar 27, 2006 4:44 pm Post subject: |
|
|
| but the problem with downgrading is that you sometimes can't play some of the newer flash games. I have tried that once so I switched back to flash 8 |
|
| Back to top |
|
 |
notu Newbie cheater
Reputation: 0
Joined: 26 Mar 2006 Posts: 20
|
Posted: Thu Mar 30, 2006 8:34 pm Post subject: |
|
|
So appearantly we can't hack flash games now, or at least with Flash 8 installed?
BTW I forgot to mention that I used every way I can before I even posted here. Appreciate the help though.
Since i didn't get the help i was looking for, let me carry on.
My next problem are commercial games. Now adays you just can't click search and find it instantly. I find some single player games impossible to find a simple correct value such as HitPoints. Try searching this value on any of the new games since 2004. You will not be able to find the value with any of the value types available on Cheat Engine. I'm sure you won't like the idea that Cheat Engine can't help you on it anymore.
Or if there's a way to hack these games. Let me know, I've been searching for a way for a few months now. |
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25807 Location: The netherlands
|
Posted: Fri Mar 31, 2006 12:51 am Post subject: |
|
|
use changed/unchanged value scans
Then when you've found it use find out what writes to this address, and then ude that data you get to figure out how they store the value.
e.g age of empires 3 uses xor keys to encrypt the value _________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
notu Newbie cheater
Reputation: 0
Joined: 26 Mar 2006 Posts: 20
|
Posted: Mon Apr 03, 2006 8:12 pm Post subject: |
|
|
So value encryptions have entered the scene now...I see now. Thanks for the response.
So how do you know what the value is, if you can't search for the value with exact search? Mind letting me in on this?
Here's one of my attempts.
I think i found the right value for gold in a strategy game.
Here's the function i think...It was suppose to add gold.
| Code: |
js 6f088d84
push ebp
or [edx+00], ch
push ecx
mov ecx, eax
mov [eax+78],edx <--- Increase Gold (I think)
call 6f675f00
pop edi
pop esi
pop ebx
pop ebp
ret 0004
|
Here's the call 6f675f00 code.
| Code: |
push ebp
mov ebp, esp
sub esp, 2c
mov eax, [ebp+08]
cmp eax, [ecx+78]
je 6f675f6
or edx, ff
mov [ebp-1c],eax
xor eax, eax
mov [ebp-04],edx
mov [ebp-08],edx
mov edx, [ebp+0c]
cmp edx, eax
mov [ebp-2c], 5e70726f
mov [ebp-28], 60666c67
mov [ebp-24], 60666c63
mov [ebp-20], ecx
mov [ebp-18], eax
mov [ebp-14], eax
mov [ebp-12], eax
mov [ebp-10], eax
mov [ebp-0c], eax
je 6f675f58
mov eax, [edx]
lea ecx, [ebp-2c]
push ecx
mov ecx, edx
call dword ptr [eax+20]
mov esp, ebp
pop ebp
ret 0008
|
Tell me what do you think. If that's an encryption or it's just nothing useful. I have a feeling that call 6f675f00 might be the encryption function. Tell me what do you think of it. BTW this is from Warcraft 3: Reign of Chaos. Don't worry, there's an anti-hack for battle.net. |
|
| Back to top |
|
 |
cparty Expert Cheater
Reputation: 0
Joined: 01 Dec 2005 Posts: 219
|
Posted: Tue Apr 04, 2006 12:40 pm Post subject: |
|
|
Warcraft3 has the gold stored multiplied by 10, so if you have 1249 gold you search for 12490 (ValueType 4 Bytes).
If you cannot find the values in newer games try changed/unchanged search as DB suggested. |
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25807 Location: The netherlands
|
Posted: Tue Apr 04, 2006 1:09 pm Post subject: |
|
|
wasn't it the other way arround in WC3 that you had your gold is devided by 10 in memory (so 50 gold would be 5)? _________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
cparty Expert Cheater
Reputation: 0
Joined: 01 Dec 2005 Posts: 219
|
Posted: Tue Apr 04, 2006 1:18 pm Post subject: |
|
|
| Dark Byte wrote: | | wasn't it the other way arround in WC3 that you had your gold is devided by 10 in memory (so 50 gold would be 5)? |
Well, now you make me unsure but I'm sure it was something with 10 ... though if the game adds gold in 1 piece steps not 10 pieces, it's probably the multiply by 10 case. |
|
| Back to top |
|
 |
notu Newbie cheater
Reputation: 0
Joined: 26 Mar 2006 Posts: 20
|
Posted: Wed Apr 05, 2006 4:48 pm Post subject: |
|
|
I checked and it was multiplied by 10. Yes but the question here is how do u decode that long function?
XOR and OR are one of the commands I don't understand at all.
If i can get help for this, maybe I can decode without furthur help.. |
|
| Back to top |
|
 |
personmans Expert Cheater
Reputation: 0
Joined: 02 Apr 2006 Posts: 193
|
Posted: Wed Apr 05, 2006 8:57 pm Post subject: |
|
|
well for OR, its just what it looks like.
or edx, ff
edx = edx OR FF
you use the or by taking the register/variable value and converting to binary....
say edx is FF -> 11111111 and FF is... well also FF.... 11111111
stack em:
11111111
11111111
what do you get? 00000000 why? because 1 + 1 = 2... and there's no 2 so you get 0. Heh, so i suck at explaining things, whatever. Now for XOR, its the same idea except 1 + 1 = 2 and that makes it 1 again... XOR means exclusive OR...
thats pretty much all i know about those two... and if anyone has more to add please do so.. i hate or/xor's |
|
| Back to top |
|
 |
cparty Expert Cheater
Reputation: 0
Joined: 01 Dec 2005 Posts: 219
|
Posted: Thu Apr 06, 2006 9:51 am Post subject: |
|
|
You already got the meaning by personmans explanation, though he could have chosen a better example and in the land of bits there is no 2.
AND, OR, XOR are bitwise operators. To convert a number to its Bits you can use windows calculator in scientific mode, view binary. Or just sum/subtract the values the bits stand for:
| Code: | 128 (2^7)
|64 (2^6)
||32 (2^5)
|||16 (2^4)
||||8 (2^3)
|||||4 (2^2)
||||||2 (2^1)
|||||||1 (2^0)
23 = 16+4+2+1 00010111 |
AND:
AND compares two numbers bitwise and sets the result-bit if both input-bits are 1.
| Code: | 23 (17h) 00010111
118 (76h) v
AND -------------
22 (16h) 00010110 |
OR:
OR compares two numbers bitwise and sets the result-bit if one of the two input-bits is 1.
| Code: | 23 (17h) 00010111
118 (76h) v
OR -------------
119 (77h) w |
XOR:
XOR compares two numbers bitwise and sets the result-bit if one of the two input-bits is 1 but not if both are 1.
| Code: |
23 (17h) 00010111
118 (76h) v
XOR -------------
97 (61h) a |
|
|
| Back to top |
|
 |
notu Newbie cheater
Reputation: 0
Joined: 26 Mar 2006 Posts: 20
|
Posted: Thu Apr 06, 2006 5:11 pm Post subject: |
|
|
| They are very complicated but I understand now that the values used in the commands are not hex but bin. That clears up a lot of things for me. Thanks for the big help. |
|
| Back to top |
|
 |
UberNoob Master Cheater
Reputation: 0
Joined: 29 Dec 2005 Posts: 365 Location: You should know...
|
Posted: Thu Apr 06, 2006 9:06 pm Post subject: |
|
|
Do what I do... for this example...
I'll take your code...
| Code: |
js 6f088d84
push ebp
or [edx+00], ch
push ecx
mov ecx, eax
mov [eax+78],edx <--- Increase Gold (I think)
call 6f675f00
pop edi
pop esi
pop ebx
pop ebp
ret 0004 |
b/p on that line, try to increase gold, see what register is changed ?
Noob ways r0x0r! (sorry if I didn't understand and this has nothing to do with it) _________________
.. ___
~(o.O)~
.. (.....)
... 1 1
"SHA ZAAM" (and other variations of it) ARE MY WORDS! WTF, DON'T USE IT! z0mg
| Dark Byte wrote: | | Xentar, WTF DID YOU DO TO YOUR DISASSEMBLER ? |
|
|
| Back to top |
|
 |
personmans Expert Cheater
Reputation: 0
Joined: 02 Apr 2006 Posts: 193
|
Posted: Thu Apr 06, 2006 9:59 pm Post subject: |
|
|
| cparty wrote: | | You already got the meaning by personmans explanation, though he could have chosen a better example and in the land of bits there is no 2. |
Haha hey! I said there was no 2
| Quote: | | what do you get? 00000000 why? because 1 + 1 = 2... and there's no 2 so you get 0. |
Like I also said though, I suck at explaining. This is mostly because I taught myself through trial and error, so i tend to screw up with things like this.
P.S. UberNoob, I think he wanted to learn about the ASM functions rather than just do it that way. It looks like might be code-caving or just making a function to edit the gold value after its encrypted.... which is basically the same thing but less work. |
|
| Back to top |
|
 |
notu Newbie cheater
Reputation: 0
Joined: 26 Mar 2006 Posts: 20
|
Posted: Fri Apr 14, 2006 11:51 am Post subject: |
|
|
Well, editing registries only works everytime you play with CE. By learning how to decode such encryptions it is possible to just make a trainer and no longer have the hassle of searching things all over again.
I'm having a hard time decoding, although i'm only starting. |
|
| Back to top |
|
 |
|