Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Pointer keeps pointing back

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Gamehacking
View previous topic :: View next topic  
Author Message
chukkyjr
How do I cheat?
Reputation: 0

Joined: 12 Mar 2012
Posts: 4

PostPosted: Mon Mar 12, 2012 6:18 am    Post subject: Pointer keeps pointing back Reply with quote

i scanned an address (let's say)

0C4D09AC
it has the following :
mov eax, [ecx+eax*4]

ECX = 0C4D09A8

so i scanned that ECX value and it's address is:

13300814
it has following :
mov ecx, [ecx+0C]

my problem that value actually accesses value of ecx (0C4D9A8), so there is no way i use it as a pointer, since when i add :

1Level Pointer :
4 offset (i assume this from eax*4)

2Level Pointer :
13300814 offset C (i assume this from 0C)

the pointer doesn't work, it points some value i don't recognize, ofc i tried this one too and it works :

1Level Pointer :
13300814 offset 4 (eax*4)

and ofc that pointer doesn't work on game restart. can anyone help me?

if needed, the game is Warcraft 3 : Frozen THrone and i tried hacking it in LAN playing alone.
Back to top
View user's profile Send private message
Fresco
Grandmaster Cheater
Reputation: 4

Joined: 07 Nov 2010
Posts: 600

PostPosted: Mon Mar 12, 2012 7:38 am    Post subject: Reply with quote

try pointerscan
right click the address in the table -> pointerscan for this address
don't change anything -> ok
restart the game
open pointer scanner -> open saved *.pt0
rescan addresses ... and so on

_________________
... Fresco
Back to top
View user's profile Send private message
chukkyjr
How do I cheat?
Reputation: 0

Joined: 12 Mar 2012
Posts: 4

PostPosted: Mon Mar 12, 2012 8:21 am    Post subject: Reply with quote

which address should i do the pointer scan on?

13300814 or 0C4D09A8 ?
Back to top
View user's profile Send private message
Fresco
Grandmaster Cheater
Reputation: 4

Joined: 07 Nov 2010
Posts: 600

PostPosted: Mon Mar 12, 2012 8:31 am    Post subject: Reply with quote

the address that holds the value of health ... if you're trying to find the pointer that always point to the address of heath ...
_________________
... Fresco
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 474

Joined: 09 May 2003
Posts: 25953
Location: The netherlands

PostPosted: Mon Mar 12, 2012 9:14 am    Post subject: Reply with quote

remember that the registers shown are AFTER the instruction is executed

You did a "find what accesses" on address 13300814
and you found that the instruction
Code:

mov ecx, [ecx+0C]

accesses that address

In this case, disregard the ECX value as it has been overwritten with the value stored at the address [ecx+0c]

Now use your brain:
mov ecx, [ecx+0C] accesses 13300814
that means that ECX+0C = 13300814
ECX = 13300814-0C = 13300808

And of course, if it fails, try the pointerscanner and give it as offsets 04 - 0c to speed up the scanning (04 at top, 0c at bottom)

_________________
Tools give you results. Knowledge gives you control.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
chukkyjr
How do I cheat?
Reputation: 0

Joined: 12 Mar 2012
Posts: 4

PostPosted: Mon Mar 12, 2012 11:31 am    Post subject: Reply with quote

^i did feel something like this too, but i just don't know how to correctly convert C from hex to decimal Sad
and yes you can say i'm dumb again, i've tried using hex converter from calculator and still doesn't really get it at all... is it just check Hex, then type C, then check decimal?

and also i think i have to use pointer scanner after all, the other try i found address other than 13300814 that also has ECX+0C , that means that isn't the static pointer right?
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 474

Joined: 09 May 2003
Posts: 25953
Location: The netherlands

PostPosted: Mon Mar 12, 2012 11:40 am    Post subject: Reply with quote

using the calculator: Set to hex. Type in address-0c click '=' and you'll have the result. No need to convert to decimal. (no need to use decimal ever)

it's only static when the address is green (and you're not using win vista 64 since ce doesn't show colors there)

_________________
Tools give you results. Knowledge gives you control.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
Fresco
Grandmaster Cheater
Reputation: 4

Joined: 07 Nov 2010
Posts: 600

PostPosted: Tue Mar 13, 2012 9:24 am    Post subject: Reply with quote

in win xp x86 x32
calculator
view -> scientific
just tick hex -> type in hex number -> tick dec

_________________
... Fresco
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Gamehacking All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites