So I got a little deeper into the tutorial and learned about AoBscans. I followed Rydian's superb tutorial (http://forum.cheatengine.org/viewtopic.php?t=572465) to learn how to make a script that finds the base address every time the game restarts (and then add the base+offset manually, which automatically updates).
Rydian mentions that in order for this to work you need the following condition fulfilled:
This is the case for Stronghold 2, but unfortunately for Stronghold Crusader 2 when you look up the value for gold, only 1 useable opcode exists, and it is a code that accesses both my own gold and the gold of my enemies (nothing else):If 'Find out what addresses the instruction accesses' only shows one address as being accessed (which is in this case our health address) then you're good. However if it shows multiple addresses as being accessed, then that's not a decent target for this technique
Code: Select all
Furthermore, when I added the following script:
Code: Select all
[ENABLE] aobscanmodule(INJECT,StrongholdBase.dll,89 04 8A 5B 74 1A) // should be unique alloc(newmem,$1000) label(code) label(return) globalalloc(_playerbase,4) globalalloc(_multiplier,4) newmem: code: mov [_playerbase],edx mov [_multiplier],ecx mov [edx+ecx*4],eax pop ebx je StrongholdBase.StrongholdBase::Estate::GetKeep+2712 jmp return INJECT: jmp newmem nop return: registersymbol(INJECT) [DISABLE] INJECT: db 89 04 8A 5B 74 1A unregistersymbol(INJECT) dealloc(newmem)
But the address I add constantly changes to reflect the last gold address that was accessed by the opcode. So I would like to ask, if no unique opcode can be found for gold (or at least not by me, I'm a complete assembly noob), how can I alter my script so that _playerbase and _offset only get stored if it's my gold that is being accessed by the opcode. Or is there an easier way to find an opcode that does only access my gold?
Thanks in advance!