Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Help with value searching

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine
View previous topic :: View next topic  
Author Message
notu
Newbie cheater
Reputation: 0

Joined: 26 Mar 2006
Posts: 20

PostPosted: Sun Mar 26, 2006 4:32 pm    Post subject: Help with value searching Reply with quote

I can't seem to be able to find the values in some commercial games and also in every flash game. Double values used to be the value type for flash games but now it's useless to search the value in it. I would like to be told the new way to find values for flash games. Also, the commercial games that cannot be searched because there was no known value type for it. I would appreciate someone to tell me how to find the values in these two types of games. Thanks.

Example of a commercial game would be: Age of Empires 2: Age of Kings(Latest Patch)

You will notice that no flash game can be searched now.
Back to top
View user's profile Send private message
algrn912005
Expert Cheater
Reputation: 0

Joined: 12 Nov 2005
Posts: 124

PostPosted: Mon Mar 27, 2006 4:44 pm    Post subject: Reply with quote

but the problem with downgrading is that you sometimes can't play some of the newer flash games. I have tried that once so I switched back to flash 8
Back to top
View user's profile Send private message
notu
Newbie cheater
Reputation: 0

Joined: 26 Mar 2006
Posts: 20

PostPosted: Thu Mar 30, 2006 8:34 pm    Post subject: Reply with quote

So appearantly we can't hack flash games now, or at least with Flash 8 installed?

BTW I forgot to mention that I used every way I can before I even posted here. Appreciate the help though.

Since i didn't get the help i was looking for, let me carry on.

My next problem are commercial games. Now adays you just can't click search and find it instantly. I find some single player games impossible to find a simple correct value such as HitPoints. Try searching this value on any of the new games since 2004. You will not be able to find the value with any of the value types available on Cheat Engine. I'm sure you won't like the idea that Cheat Engine can't help you on it anymore.

Or if there's a way to hack these games. Let me know, I've been searching for a way for a few months now.
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 470

Joined: 09 May 2003
Posts: 25807
Location: The netherlands

PostPosted: Fri Mar 31, 2006 12:51 am    Post subject: Reply with quote

use changed/unchanged value scans
Then when you've found it use find out what writes to this address, and then ude that data you get to figure out how they store the value.
e.g age of empires 3 uses xor keys to encrypt the value

_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
notu
Newbie cheater
Reputation: 0

Joined: 26 Mar 2006
Posts: 20

PostPosted: Mon Apr 03, 2006 8:12 pm    Post subject: Reply with quote

So value encryptions have entered the scene now...I see now. Thanks for the response.

So how do you know what the value is, if you can't search for the value with exact search? Mind letting me in on this?

Here's one of my attempts.
I think i found the right value for gold in a strategy game.

Here's the function i think...It was suppose to add gold.
Code:

js 6f088d84
push ebp
or [edx+00], ch
push ecx
mov ecx, eax
mov [eax+78],edx  <--- Increase Gold (I think)
call 6f675f00
pop edi
pop esi
pop ebx
pop ebp
ret 0004


Here's the call 6f675f00 code.
Code:

push ebp
mov ebp, esp
sub esp, 2c
mov eax, [ebp+08]
cmp eax, [ecx+78]
je 6f675f6
or edx, ff
mov [ebp-1c],eax
xor eax, eax
mov [ebp-04],edx
mov [ebp-08],edx
mov edx, [ebp+0c]
cmp edx, eax
mov [ebp-2c], 5e70726f
mov [ebp-28], 60666c67
mov [ebp-24], 60666c63
mov [ebp-20], ecx
mov [ebp-18], eax
mov [ebp-14], eax
mov [ebp-12], eax
mov [ebp-10], eax
mov [ebp-0c], eax
je 6f675f58
mov eax, [edx]
lea ecx, [ebp-2c]
push ecx
mov ecx, edx
call dword ptr [eax+20]
mov esp, ebp
pop ebp
ret 0008


Tell me what do you think. If that's an encryption or it's just nothing useful. I have a feeling that call 6f675f00 might be the encryption function. Tell me what do you think of it. BTW this is from Warcraft 3: Reign of Chaos. Don't worry, there's an anti-hack for battle.net.
Back to top
View user's profile Send private message
cparty
Expert Cheater
Reputation: 0

Joined: 01 Dec 2005
Posts: 219

PostPosted: Tue Apr 04, 2006 12:40 pm    Post subject: Reply with quote

Warcraft3 has the gold stored multiplied by 10, so if you have 1249 gold you search for 12490 (ValueType 4 Bytes).

If you cannot find the values in newer games try changed/unchanged search as DB suggested.
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 470

Joined: 09 May 2003
Posts: 25807
Location: The netherlands

PostPosted: Tue Apr 04, 2006 1:09 pm    Post subject: Reply with quote

wasn't it the other way arround in WC3 that you had your gold is devided by 10 in memory (so 50 gold would be 5)?
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
cparty
Expert Cheater
Reputation: 0

Joined: 01 Dec 2005
Posts: 219

PostPosted: Tue Apr 04, 2006 1:18 pm    Post subject: Reply with quote

Dark Byte wrote:
wasn't it the other way arround in WC3 that you had your gold is devided by 10 in memory (so 50 gold would be 5)?

Well, now you make me unsure Confused but I'm sure it was something with 10 Very Happy ... though if the game adds gold in 1 piece steps not 10 pieces, it's probably the multiply by 10 case.
Back to top
View user's profile Send private message
notu
Newbie cheater
Reputation: 0

Joined: 26 Mar 2006
Posts: 20

PostPosted: Wed Apr 05, 2006 4:48 pm    Post subject: Reply with quote

I checked and it was multiplied by 10. Yes but the question here is how do u decode that long function?

XOR and OR are one of the commands I don't understand at all.

If i can get help for this, maybe I can decode without furthur help..
Back to top
View user's profile Send private message
personmans
Expert Cheater
Reputation: 0

Joined: 02 Apr 2006
Posts: 193

PostPosted: Wed Apr 05, 2006 8:57 pm    Post subject: Reply with quote

well for OR, its just what it looks like.

or edx, ff

edx = edx OR FF
you use the or by taking the register/variable value and converting to binary....
say edx is FF -> 11111111 and FF is... well also FF.... 11111111

stack em:
11111111
11111111
what do you get? 00000000 why? because 1 + 1 = 2... and there's no 2 so you get 0. Heh, so i suck at explaining things, whatever. Now for XOR, its the same idea except 1 + 1 = 2 and that makes it 1 again... XOR means exclusive OR...

thats pretty much all i know about those two... and if anyone has more to add please do so.. i hate or/xor's
Back to top
View user's profile Send private message
cparty
Expert Cheater
Reputation: 0

Joined: 01 Dec 2005
Posts: 219

PostPosted: Thu Apr 06, 2006 9:51 am    Post subject: Reply with quote

You already got the meaning by personmans explanation, though he could have chosen a better example and in the land of bits there is no 2.

AND, OR, XOR are bitwise operators. To convert a number to its Bits you can use windows calculator in scientific mode, view binary. Or just sum/subtract the values the bits stand for:
Code:
                128      (2^7)
                |64      (2^6)
                ||32     (2^5)
                |||16    (2^4)
                ||||8    (2^3)
                |||||4   (2^2)
                ||||||2  (2^1)
                |||||||1 (2^0)
23 = 16+4+2+1   00010111


AND:
AND compares two numbers bitwise and sets the result-bit if both input-bits are 1.
Code:
23  (17h)       00010111
118 (76h)       v
AND         -------------
22  (16h)       00010110


OR:
OR compares two numbers bitwise and sets the result-bit if one of the two input-bits is 1.
Code:
23  (17h)       00010111
118 (76h)       v
OR          -------------
119 (77h)       w


XOR:
XOR compares two numbers bitwise and sets the result-bit if one of the two input-bits is 1 but not if both are 1.
Code:

23  (17h)       00010111
118 (76h)       v
XOR         -------------
97  (61h)       a
Back to top
View user's profile Send private message
notu
Newbie cheater
Reputation: 0

Joined: 26 Mar 2006
Posts: 20

PostPosted: Thu Apr 06, 2006 5:11 pm    Post subject: Reply with quote

They are very complicated but I understand now that the values used in the commands are not hex but bin. That clears up a lot of things for me. Thanks for the big help.
Back to top
View user's profile Send private message
UberNoob
Master Cheater
Reputation: 0

Joined: 29 Dec 2005
Posts: 365
Location: You should know...

PostPosted: Thu Apr 06, 2006 9:06 pm    Post subject: Reply with quote

Do what I do... for this example...

I'll take your code...

Code:

js 6f088d84
push ebp
or [edx+00], ch
push ecx
mov ecx, eax
mov [eax+78],edx  <--- Increase Gold (I think)
call 6f675f00
pop edi
pop esi
pop ebx
pop ebp
ret 0004


b/p on that line, try to increase gold, see what register is changed Very Happy ?

Noob ways r0x0r! (sorry if I didn't understand and this has nothing to do with it)

_________________
.. ___
~(o.O)~
.. (.....)
... 1 1

"SHA ZAAM" (and other variations of it) ARE MY WORDS! WTF, DON'T USE IT! z0mg

Dark Byte wrote:
Xentar, WTF DID YOU DO TO YOUR DISASSEMBLER ?
Back to top
View user's profile Send private message
personmans
Expert Cheater
Reputation: 0

Joined: 02 Apr 2006
Posts: 193

PostPosted: Thu Apr 06, 2006 9:59 pm    Post subject: Reply with quote

cparty wrote:
You already got the meaning by personmans explanation, though he could have chosen a better example and in the land of bits there is no 2.


Haha hey! I said there was no 2

Quote:
what do you get? 00000000 why? because 1 + 1 = 2... and there's no 2 so you get 0.


Like I also said though, I suck at explaining. This is mostly because I taught myself through trial and error, so i tend to screw up with things like this.

P.S. UberNoob, I think he wanted to learn about the ASM functions rather than just do it that way. It looks like might be code-caving or just making a function to edit the gold value after its encrypted.... which is basically the same thing but less work.
Back to top
View user's profile Send private message
notu
Newbie cheater
Reputation: 0

Joined: 26 Mar 2006
Posts: 20

PostPosted: Fri Apr 14, 2006 11:51 am    Post subject: Reply with quote

Well, editing registries only works everytime you play with CE. By learning how to decode such encryptions it is possible to just make a trainer and no longer have the hassle of searching things all over again.
I'm having a hard time decoding, although i'm only starting.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites