Cheat Engine

[Mass]

I've been posting on another forum, coming here is a last resort for me.
To start off with, this is my first POST here but I have been coming around for a while, since the first CE Release.

However, this is not important - so I will leave it at that.
I only come here for answers as a last resort since nobody could answer me with my last forum.

Here is some information on what I have so far, as well as what I have learned about pointers.

Information
Game: SniperElite (PC)
Version: CheatEngine 5.3 Build

Instructions

These are the steps I have taken (thus far) as well as where I am stuck.

I simply want to find the Static address for ' Ammo ' on this shooting game.
The game is a Single Player type, and I have no intentions of playing it online.

Finding the Dynamic address for ' Ammo ' is not the problem.
I find the address fine, and the value changes in game.

How ever, if you die and restart the level, or restart the game.
The address changes and you have to find it again.
Which is why I am trying to understand fully how to use pointers.
I don't want to have to find the address for each level of this game.

1727D090 // This is the address for ammo (dynamic address)

I right click it and go to ' Find out what writes to this address '.
I go in game and fire off a couple rounds, and it displays this in the debugger.

004F1BA3 - 89 46 18 - mov [esi+18],eax
^ More information on this

" The value of the pointer needed to find this address is probably 1727D078 "

ESI=1727D078.

From here, I switch to []Hex scan, and enter value 1727D078 then search.
It returns these results.

Address | Value
0D4D10B8 - 1727D078
0D4D10C0 - 1727D078
0D4D10C4 - 1727D078
1727D054 - 1727D078
1727D0A8 - 1727D078

Alright, so I enter the address manually
[] Pointer <- I check pointer

Address of Pointer: 0D4D10B8; Offset Hex: 18.

^ This works, it displays the ammo, and it works until restarting the game.
So, I figured I needed to find the Static address, rather then just this pointer.

From here, I have tried debugging the pointers to ' Find out what writes to this address(pointer) '.
But the debugger will not return anything after I change the actual ammo.

Someone on another forum told me that I just will not be able to find the static address.
I refuse to accept this, and I am sure there is SOME way to find the address.

What I am asking is this - If I have done anything wrong or if I need to do something else to continue on my way to find the actual address, please give me some type of input.

I don't expect anyone to do the work for me, but I am making an honest effort here.
If anyone could help (anything counts, even if its not much) please post a reply.

Regards,
Mass.

[Dark Byte]

for pointers use "Find out what accesses this address" for the 2nd level and further, since it's most likely not being written, just read.


also, it might be easier to use code injection to find the pointer, or just do what you want.
e.g at 004F1BA3 a code injection that stores the value of esi to a known location, and then you can use a pointer address with that known location and offset 18
Might have to add some checks to make sure it is actually the ammo of the player you want to edit it for (e.g check the mem arround ammo and see if you can find something unique)


and as last resort you could try the pointer scanner, find the address of ammo, and pointer scan for that with a structsize of 4096 and 5 levels deep. And if that fails, 6 level, 7 level, bigger structsizes, but remember, the more levels and the bigger structsizes, the longer it'll take, exponentially.