| View previous topic :: View next topic |
| Author |
Message |
aquaboy007 Expert Cheater
Reputation: 0
Joined: 14 May 2006 Posts: 199
|
Posted: Sat Nov 29, 2008 2:26 pm Post subject: Scanning Pointers in old games - Problem |
|
|
I'm using CnC Red Alert 1 as example, although its the same in cnc 1. All pointer scans to any dynamic address take too less time to complete, and return 0 results. Even with psychotic and the dont skip options ticked, no results show up. Is it a CE bug?
_________________
| x0r wrote: | So now there are versions which come with a certain level of BSODs?
DAEngine PREMIUM - Now with 20% less BSODs! |
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 471
Joined: 09 May 2003 Posts: 25839 Location: The netherlands
|
Posted: Sat Nov 29, 2008 2:34 pm Post subject: |
|
|
giving a big enough structsize and level depth ?
Also, is it the win95+ version or the windows 3.11 or dos version you're running ?
If it's the 16-bit one, pointers will be 2 bytes long and you won't find anything
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
aquaboy007 Expert Cheater
Reputation: 0
Joined: 14 May 2006 Posts: 199
|
Posted: Sat Nov 29, 2008 2:38 pm Post subject: |
|
|
It's the win95+ version, so its 32 bit. I have a structsize of 1024 and the level depth is proper, I can manually identify a level 1 pointer but cant get it through the scanner. What is the struct size anyway?
_________________
| x0r wrote: | So now there are versions which come with a certain level of BSODs?
DAEngine PREMIUM - Now with 20% less BSODs! |
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 471
Joined: 09 May 2003 Posts: 25839 Location: The netherlands
|
Posted: Sat Nov 29, 2008 2:45 pm Post subject: |
|
|
make sure nott o set level depth to 1 or 2. That won't find anything. Set it to 3 or 4 at least. I usually use 5.
structsize is how big a block it will look for a pointer. 2048 is usually big enough, but if you don't find anything, use bigger like 4096
Also, try the reverse pointer scan
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
aquaboy007 Expert Cheater
Reputation: 0
Joined: 14 May 2006 Posts: 199
|
Posted: Sat Nov 29, 2008 3:00 pm Post subject: |
|
|
1. What does the reverse scan do? I usually get results with normal, so I never bothered to learn what reverse does differently.
2. In another game, I know the base pointer but I want to find the path from it to a known dynamic address. How do I do it?
3. Is there any way to find if two dynamic addresses have the same base pointer, without comparing the pointer results manually?
_________________
| x0r wrote: | So now there are versions which come with a certain level of BSODs?
DAEngine PREMIUM - Now with 20% less BSODs! |
|
|
| Back to top |
|
 |
Slugsnack Grandmaster Cheater Supreme
Reputation: 71
Joined: 24 Jan 2007 Posts: 1857
|
Posted: Sat Nov 29, 2008 7:23 pm Post subject: |
|
|
| if you know the base pointer then find what it points to (dereference it). take the dynamic offset and find the difference. that difference is the offset.
|
|
| Back to top |
|
 |
aquaboy007 Expert Cheater
Reputation: 0
Joined: 14 May 2006 Posts: 199
|
Posted: Sat Nov 29, 2008 10:44 pm Post subject: |
|
|
^^ I'm talking about a path, not just a single level pointer.
Say my base is 501501, and my dynamic addy is 1234567, the pointer chain goes like this -
501501 -> 20 -> xxxxxxx
xxxxxx -> 40 -> yyyyyyy
yyyyyy -> 66 -> 1234567
Is there an easy way to find the chain?
_________________
| x0r wrote: | So now there are versions which come with a certain level of BSODs?
DAEngine PREMIUM - Now with 20% less BSODs! |
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 471
Joined: 09 May 2003 Posts: 25839 Location: The netherlands
|
Posted: Sun Nov 30, 2008 9:17 am Post subject: |
|
|
| aquaboy007 wrote: | 1. What does the reverse scan do? I usually get results with normal, so I never bothered to learn what reverse does differently.
2. In another game, I know the base pointer but I want to find the path from it to a known dynamic address. How do I do it?
3. Is there any way to find if two dynamic addresses have the same base pointer, without comparing the pointer results manually? |
1: Normal pointer scan scans starting from base addresses and then hopes a path comes along that leads to the target address
Reverse pointer scan starts off with the target address and examines all paths that can lead to it.
So it's more likely to find something usable sooner
2: Try filling them in manually and then try out all possible offsets yourself
3: No, mainly because the same address can have a different base pointer as well
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
|