help hacking Stronghold Crusader 2 - The Jackal and The Khan

[pharaon]

thanks for you reply
and what about the back trace strategy why its not working out

[koderkrazy]

thanks for you reply
and what about the back trace strategy why its not working out

It's a long explanation. I'll tell you later.
What you want is getting to actual value from display value. There could be many things in between(things are not same for every game)
Instead of display value we've found actual value directly using 4byte scan. Easiest way is to modify at location where it's getting written.

[pharaon]

ok so i have to do the same steps for gold value as well or from wood i can find gold easily? and if i can what would be the right way to do

how can i know the value within [ebp+0C]
you told me before add it to watch list
i open watch list from memory view and add it manually but that shows me no values is there other working way

how can i know other stack values of ebp

[chachacho]

The File for unlimited Wood and Gold is for everyone and not only for you. Is there a way to change that ?

[pharaon]

[ebp+08] add gold for me and the computer as well how can i separate my offsite of the computer offsite so the gold would be add only to me

[koderkrazy]

[ebp+08] add gold for me and the computer as well how can i separate my offsite of the computer offsite so the gold would be add only to me

this video explains it perfectly:

[chachacho]

Can you do it for me, I'm a total noob at cheat engine

[pharaon]

ok i back trace it to this code

Code: Select all

fstp dword ptr [ebp-14]

and when i modifies it to

Code: Select all

fstp dword ptr [ebp-14]
  mov [ebp-14],(float)9999

it writes the new value for me and the computer as well
and the opcode write to only one address

so i back trace out of this function
found this

Code: Select all

StrongholdBase.StrongholdBase::Estate::GetKeep+8F0 - xor ebx,ebx
StrongholdBase.StrongholdBase::Estate::GetKeep+915 - mov [ebp-14],ebx <<<<<< ebx value is 00000
StrongholdBase.StrongholdBase::Estate::GetKeep+94B - mov eax,[ebp-14]<<<<<<<<ebp value is address 00BFF94C when i add it manulayy -14 it give me value 0

should i back trace further than xor ebx,ebx?

Code: Select all

StrongholdBase.StrongholdBase::Estate::GetKeep+8F0 - 33 DB                 - xor ebx,ebx

opcode and byte if you like to check yourself for anything else