Driver: San Francisco v.1.01.0919

Upload your cheat tables here (No requests)
Post Reply
User avatar
STN
Founder
Founder
Posts: 4435
Joined: Thu Mar 02, 2017 7:48 pm
Reputation: 3437

Driver: San Francisco v.1.01.0919

Post by STN »

Added only BOOST/RAM for now. Will add HP as well. Am guessing WILLPOWER is easy, but will probably ruin gameplay experience Smile

Simply freeze get in-game (in a map!) and enable script. Wait for Boost to get full bar and you'll have it unlimited from now on.

Enjoy..

Found a different way, without using pointers. Game uses LuaScript, so it's a bit complicated to "drive" through the code. Found my Boost/Ram value as such:

1. Search Unknown on 4 bytes.
2. Use Boost/Ram, search decreased value.
3. Let it get back full, search increased value.
4. You will be left with ~200-300 values, so it's trial/error. Note that game doesn't crash upon freezing the values. I found that way the on-screen display value. It showed presumed value, 43 for me at the point of scanning. When freezing it, game would update bar, but portion of it remained frozen at 43 corresponding location on the bar.
5. I then searched 100 (that was full value) on float and found my address.

Debugging the value (break on access) sends me to this location:

005EF002 |> \8B17 |MOV EDX,DWORD PTR DS:[EDI] <-- accessed
005EF004 |. 8B4424 24 |MOV EAX,DWORD PTR SS:[ARG.4]

Considering DWORD representation of (float)100 is 0x42C80000, I then set a conditional break at that location (5EF004), condition being EDX == 42C80000. Olly breaks a few times, among the breaks being my address (e.g.: 107D386C).

Now to differentiate between my address, and the rest. Looked a bit at the structures, but couldn't find an identifier. So I also checked the stack for markers.

So I got these breaks (in my case):

1. 107D386C (mine)
2. 10647438
3. 101B3650

All above break with set condition, that boost/ram value should be (float)100.

One funny thing I noticed in the stack is that at [ESP], when it's my address, I see a 0. For the other two, I see different values:

1. 107D386C (mine) --> [ESP] == 00
2. 10647438 --> [ESP] == 0E
3. 101B3650 --> [ESP] == 05

Unless there are other breaks with both conditions met, I doubt this won't work. Of course, first condition must be met, boost/ram should be (float)100.

Now gotta figure a way to work this out when value is < 100.

Here i'm found pointer for the boostram Very Happy i think i like this game Smile when i finish game may be i have a chance to update trainer Very Happy

Code:

[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
alloc(vars,4) //2kb should be enough
label(LPBoostRAM)
registersymbol(LPBoostRAM)
aobscan(BoostRamAddr,A1 ? ? ? ? 6A 00 53 56 50)

vars: //this is allocated memory, you have read,write,execute access
//place your code here
LPBoostRAM:
dd BoostRamAddr

[DISABLE]
//code from here till the end of the code will be used to disable the cheat
unregistersymbol(LPBoostRAM)
dealloc(vars)

Made by SunBeam, ablonevn

How to use this cheat table?
  1. Install Cheat Engine
  2. Double-click the .CT file in order to open it.
  3. Click the PC icon in Cheat Engine in order to select the game process.
  4. Keep the list.
  5. Activate the trainer options by checking boxes or setting values from 0 to 1

Bizonchik
Cheater
Cheater
Posts: 33
Joined: Wed Apr 26, 2017 7:00 pm
Reputation: 4

Driver: San Francisco v.1.01.0919

Post by Bizonchik »

So... mind sharing your table? ?

User avatar
soniiiety
Expert Cheater
Expert Cheater
Posts: 78
Joined: Mon Mar 12, 2018 5:42 am
Reputation: 1

Re: Driver: San Francisco v.1.01.0919

Post by soniiiety »

where is table?????

Post Reply

Who is online

Users browsing this forum: 1elfzz, admantx, Great@, halo197pt, Khryz, Kita, Recidivous, SemrushBot, tabyw1259, Takamiya, veggeta, VirgilSouth