| View previous topic :: View next topic |
| Author |
Message |
kamiknx
Cheater
![]() Reputation: 0
Joined: 12 Mar 2008
Posts: 35
|
 Posted: Sat Mar 15, 2008 11:49 am Post subject: Finding a what writes a value that changes address |
 |
|
| Code: | Step 6: Pointers: (PW=098712)
In the previous step I explained how to use the Code finder to handle changing locations. But that method alone
makes it difficult to find the address to set the values you want.
Thats why there are pointers:
At the bottom you'll find 2 buttons. One will change the value, and the other changes the value AND the location of
the value.
For this step you dont really need to know assembler, but it helps a lot if you do.
First find the address of the value. When you've found it use the function to find out what writes to that address.
Change the value again, and a item will show in the list. Double click that item. (or select and click on more info) and
a new window will open with detailed information on what happened when the instruction ran.
If the assembler instruction doesnt have anything between a '[' and ']' then use another item in the list.
If it does it will say what it think will be the value of the pointer you need.
Go back to the main cheat engine window (you can keep this extra info window open if you want, but if you close it,
remember what is between the [ and ] ) and do a 4 byte scan in hexadecimal for the value the extra info told you.
When done scanning it may return 1 or a few hundred addresses. Most of the time the address you need will be the
smallest one. Now click on manually add and select the pointer checkbox.
The window will change and allows you to type in the address of a pointer and a offset.
Fill in as address the address you just found.
If the assembler instruction has a calculation (e.g: [esi+12]) at the end then type the value in thats at the end. else
leave it 0. If it was a more complicated instruction look at the calculation.
example of a more complicated instruction:
[EAX*2+EDX+00000310] eax=4C and edx=00801234.
In this case EDX would be the value the pointer has, and EAX*2+00000310 the offset, so the offset you'd fill in
would be 2*4C+00000310=3A8. (this is all in hex, use cal.exe from windows in scientific mode to calculate)
Back to the tutorial, click OK and the address will be added, If all went right the address will show P->xxxxxxx, with
xxxxxxx being the address of the value you found. If thats not right, you've done something wrong.
Now, change the value using the pointer you added in 5000 and freeze it. Then click Change pointer, and if all went
right the next button will become visible.
extra:
And you could also use the pointer scanner to find the pointer to this address |
Just like the tutorial at level 6, but I don't have the simple change value button, I need to find what writes a value that changes all the time its address...
How can I do that?
Any tutorials somewhere?
_________________
神 Knx |
|
| Back to top |
|
 |
24653187
Expert Cheater
 Reputation: 0
Joined: 19 Aug 2007
Posts: 214
Location: 218.255.97.194/61.18.170.???
|
| Posted: Sat Mar 15, 2008 12:10 pm Post subject: Re: Finding a what writes a value that changes address |
|
|
| kamiknx wrote: | Just like the tutorial at level 6, but I don't have the simple change value button, I need to find what writes a value that changes all the time its address...
How can I do that?
Any tutorials somewhere? |
easy.
change value>a
change pointer>b
value shown>c
search for c, click a, search c again, add it into your addresslist, right click, choose "find out what writes to this address", press a, doubleclick the new item, search for what it recommends, click "add address manually", tick the box, type in the left bottom one with pointer address, and right with offset, click ok, click b, change to 5000 fast
simplified.
_________________
newbies post these threads:
1. all capital letters
2. lots of exclamation marks
and these posts:
1. no punctuation marks
2. not enough information
3. post on wrong forum
and these attitudes:
1. unformal words
2. say "thanks" in 90% post
3. angry when got pissed |
|
| Back to top |
|
|
kamiknx
Cheater
![]() Reputation: 0
Joined: 12 Mar 2008
Posts: 35
|
| Posted: Sat Mar 15, 2008 12:51 pm Post subject: |
|
|
| Quote: | | search for c, click a, search c again |
Not possible.
I do not have "change value", only "change value AND pointer"
_________________
神 Knx |
|
| Back to top |
|
|
24653187
Expert Cheater
Reputation: 0
Joined: 19 Aug 2007
Posts: 214
Location: 218.255.97.194/61.18.170.???
|
| Posted: Sat Mar 15, 2008 12:56 pm Post subject: |
|
|
| kamiknx wrote: | | Quote: | | search for c, click a, search c again |
Not possible.
I do not have "change value", only "change value AND pointer" |
then a as left button and b as right one
_________________
newbies post these threads:
1. all capital letters
2. lots of exclamation marks
and these posts:
1. no punctuation marks
2. not enough information
3. post on wrong forum
and these attitudes:
1. unformal words
2. say "thanks" in 90% post
3. angry when got pissed |
|
| Back to top |
|
|
kamiknx
Cheater
![]() Reputation: 0
Joined: 12 Mar 2008
Posts: 35
|
| Posted: Sat Mar 15, 2008 1:06 pm Post subject: |
|
|
I'm not trying to get through the shitty level 6.
I want to find what writes a certain value, but every time the value changes the pointer ALSO changes.
_________________
神 Knx |
|
| Back to top |
|
|
Labyrnth
Moderator
![]() Reputation: 10
Joined: 28 Nov 2006
Posts: 6300
|
| Posted: Sat Mar 15, 2008 1:07 pm Post subject: |
|
|
| Step 6
|
|
| Back to top |
|
|
kamiknx
Cheater
![]() Reputation: 0
Joined: 12 Mar 2008
Posts: 35
|
|
| Back to top |
|
|
24653187
Expert Cheater
Reputation: 0
Joined: 19 Aug 2007
Posts: 214
Location: 218.255.97.194/61.18.170.???
|
|
| Back to top |
|
|
kamiknx
Cheater
![]() Reputation: 0
Joined: 12 Mar 2008
Posts: 35
|
| Posted: Sat Mar 15, 2008 1:43 pm Post subject: |
|
|
I KNOW!
I made on paint, that is what I need, like I said, not the shitty level 6
_________________
神 Knx |
|
| Back to top |
|
|
24653187
Expert Cheater
Reputation: 0
Joined: 19 Aug 2007
Posts: 214
Location: 218.255.97.194/61.18.170.???
|
| Posted: Sun Mar 16, 2008 11:40 am Post subject: |
|
|
| kamiknx wrote: | I KNOW!
I made on paint, that is what I need, like I said, not the shitty level 6 |
you'd better get a warning with it
_________________
newbies post these threads:
1. all capital letters
2. lots of exclamation marks
and these posts:
1. no punctuation marks
2. not enough information
3. post on wrong forum
and these attitudes:
1. unformal words
2. say "thanks" in 90% post
3. angry when got pissed |
|
| Back to top |
|
|
kamiknx
Cheater
![]() Reputation: 0
Joined: 12 Mar 2008
Posts: 35
|
| Posted: Sun Mar 16, 2008 6:10 pm Post subject: |
|
|
| 24653187 wrote: | | kamiknx wrote: | I KNOW!
I made on paint, that is what I need, like I said, not the shitty level 6 |
you'd better get a warning with it |
You should know how to read, dumb ass.
If you had read my FIRST POST you should understand that I'm not talking about level 6, dumb ass.
| Quote: | Just like the tutorial at level 6, but I don't have the simple change value button, I need to find what writes a value that changes all the time its address...
How can I do that?
Any tutorials somewhere? |
See, dumb ass?
_________________
神 Knx |
|
| Back to top |
|
|
kjmarket
Grandmaster Cheater
 Reputation: 0
Joined: 11 Oct 2006
Posts: 600
|
| Posted: Sun Mar 16, 2008 11:33 pm Post subject: |
|
|
I can see being irritated over his arrogant superiority complex that he is showing, but you really ought to grow up and not resort to childish namecalling.
Now, as for your problem, you arent doing step 6, but want to find pointers? Search for initial value, change it with whatever button you have, then scan the new value. It may say change pointer, but its just changing the value pointed at by the pointer I would assume. After that, do the steps like the tutorial shows. When you have your address, find out what writes to it, search the address it gives in hex, and voila. Pretty straightforward.
_________________
I can hear the voices of opcodes. "Come and NOP me!" Come and NOP me!" |
|
| Back to top |
|
|
Labyrnth
Moderator
![]() Reputation: 10
Joined: 28 Nov 2006
Posts: 6300
|
| Posted: Mon Mar 17, 2008 5:57 am Post subject: |
|
|
It doesnt matter if he is doing level 6 or not, if he would watch the video i posted in a link. He would already know how to do it by now.
@ 24653187
He doesnt need a warning for that, you caused it all with the dumb ass replies.
|
|
| Back to top |
|
|
Estx
Expert Cheater
 Reputation: 0
Joined: 04 Mar 2008
Posts: 172
|
| Posted: Mon Mar 17, 2008 6:32 am Post subject: |
|
|
| Finding pointers to pointers are frustrating at first lol. Damn dynamic pointers, don't DLL's always have dynamic pointers as well? I'm not sure, haven't really tried 'training' many games through DLL modules.
|
|
| Back to top |
|
|
24653187
Expert Cheater
Reputation: 0
Joined: 19 Aug 2007
Posts: 214
Location: 218.255.97.194/61.18.170.???
|
| Posted: Mon Mar 17, 2008 6:41 am Post subject: |
|
|
| Estx wrote: | | Finding pointers to pointers are frustrating at first lol. Damn dynamic pointers, don't DLL's always have dynamic pointers as well? I'm not sure, haven't really tried 'training' many games through DLL modules. |
not all, but dynamic address is always what we're going to lose against it
_________________
newbies post these threads:
1. all capital letters
2. lots of exclamation marks
and these posts:
1. no punctuation marks
2. not enough information
3. post on wrong forum
and these attitudes:
1. unformal words
2. say "thanks" in 90% post
3. angry when got pissed |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
