Cheat Engine

[therealrtz]

Hello. Sorry for the interruption. I have been trying for a month to get the base pointer for gold, the closest I have gotten using pointer scanner is with 702 results. I originally thought I had found the correct pointer as anytime I restarted the game (including rebooting the pc), I always was @ the correct address to add gold

I prematurely congratulated myself, but on a whim, tried my results on a different pc. FAIL!! At that time I had close to 7000 pointers, so I chose the first one on the list. This didn't work so well. Moving to a different machine, I was able to pare the results further. We have 2 desktops and 2 laptops, so I was able to do this a total of 4 times. Now I am 702 results, but I am getting pretty discouraged as I find that the ones I choose inevitably fail on a different system.

On the forums I found a cheat table for the game with a good base pointer (works on all of my pcs) for gold, and it does show up in my list of 702. How in the heck do I get my results to the "good" pointer? I am not trying to reinvent the wheel, but I figured if I had the correct result to compare to, I could somehow work my way to it in my list. My list consists of level 2 pointers, level 4 pointers, and level 5 pointers. I am at a loss on how to go any further.

When people post a cheat table for a game, is it some sort of team effort??? Are you guys emailing results and then scanning on different machines???? Shouldn't I be able to find this without having to work on for over a month? Obviously I am missing something, as I never have had any good results. I have been trying to find pointers to values in various games for close to 10 years now, and always run into this brick wall. I get this bad feeling that I will never figure this out, and will have to always rely on other's work. Any advice at all???? Please?

[lp0]

When you are filtering the results down, what methods are you using? Are you always going right back into the game, following the same steps, spending the same gold? If so, mix it up - load up the game, minimize it, open it back up, then go to a different vendor and spend a different amount of gold. Sometimes little things like that can shake a bunch of them loose; also, if you are only loading an existing game, try loading a different game or starting a new one.

Another method that could be used (if you are into this sort of thing), is find the routines that are modifying the gold value (e.g. "Find out what writes to this address"), then find out what addresses that routine is accessing; it will inevitably point you back to the value you already have, but might give you a hint.

Also, AOBScan can help decouple your table/script from the sort of pointer randomness if you can find the right byte array; basically, Cheat Engine will scan for that AOB and return the first hit (in the ASM; the LUA versions return all results afaik), which you can then assign to a label and use without ever having to know what the real address is.

As far as I understand it, anyway - I could be wrong.

[therealrtz]

Thanks for the ideas, I will give them a shot this weekend and see if I can get any closer. I'm thinking I'll try the "what writes to this address", I always skipped that because of the amount of results I would get when first trying that. I guess I was watching the screen being drawn or updated as the numbers would just scroll on and on. It just occurred to me to disregard that info and look for a return of 1 occurrence after I either add or remove gold.
Duh

Thanks again!

[therealrtz]

Grrrrrr, no joy on the rescans using "what writes to this address" Still @ 702 results. I'm going to try finding a tutorial on aob scans, maybe this will help.

That being said, I guess as long as I find a pointer that stays consistent on whatever machine I happen to be playing my game on, that should be enough
to get me by. It just frustrates the heck out of me that I can't find the static address I am looking for.

[Dark Byte]

Send the ptr files to other people on the forum (they compress well) so they can do a rescan and send those results back

Also, 702 indicates that the level or structsize might have been too small. Usually you should end up with a million even after repeated rescans (there is never 1 usable pointer)

Tip: i usually pick the result with the lowest offset values and levelcount

[lp0]

In the event you don't rescan based on DB's advice, and you own the game through Steam, I'd be happy to help you out.

[therealrtz]

Thanks Dark Byte, I will try expanding my scan to 7 levels, it currently is at 5. (the reason I set 5 is the cheat table I downloaded shows it as a 5 level pointer, trying to compare something that works to my mistakes ) My max offset val is 2048, should I increase as well? Just takes forever, lol! When I was scanning previously, my first scans would always be in the 100's of millions. I'd pare them down by rescanning on different pc s. I think it took about 40 rescans over several days to get to the 700 count. Forgive my stupidity, but in my results I will see the same base address with numerous offsets, some 2 level, some 4, and some 5:

Base Address Offset 0 Offset 1 Offset 2 Offset 3 Offset 4 Points to:

Torchlight2.exe+0234666C 2C 588 0A1A3588 = 22907
Torchlight2.exe+0234666C 2C 7D0 8 588 0A1A3588 = 22907
Torchlight2.exe+0234666C 2C 114 1C 586 0A1A3588 = 22907
Torchlight2.exe+0234666C 2C 634 3E0 588 0A1A3588 = 22907
Torchlight2.exe+0234666C 2C 5C8 40 588 0A1A3588 = 22907
Torchlight2.exe+0234666C 2C 1BC 60 586 0A1A3588 = 22907
Torchlight2.axe+0234566C 2C 35C 14 588 0A1A3588 = 22907
Torchlight2.exe+0234666C 2C 5C8 8 0 3A0 0A1A3588 = 22907
Torchlight2.exe+0234666C 2C 700 10 18 568 0A1A3588 = 22907
Torchlight2.exe+0234666C 2C 714 0 704 588 0A1A3588 = 22907
Torchlight2.exe+0234666C 2C 35C C 60 588 0A1A3588 = 22907
Torchlight2.exe+0234666C 2C 700 C 18 568 0A1A3588 = 22907
Torchlight2.exe+0234666C 2C 5CC 278 40 588 0A1A3588 = 22907
Torchlight2.exe+02FCF090 8 40 588 0A1A3588 = 22907
Torchlight2.exe+02FCF090 AC 14 40 586 0A1A3588 = 22907
Torchlight2.exe+02FCF090 AC 1C 240 588 0A1A3588 = 22907
Torchlight2.exe+02FCF090 12C 14 40 586 0A1A3588 = 22907
Torchlight2.exe+02FCF090 12C 1C 240 588 0A1A3588 = 22907
Torchlight2.exe+02FCF090 1AC 14 40 588 0A1A3588 = 22907
Torchlight2.exe+02FCF090 1AC 1C 240 586 0A1A3588 = 22907
Torchlight2.exe+02FCF090 22C 14 40 588 0A1A3588 = 22907

(hope that isn't too hard to read, don't know how to attach as an image, sorry obviously I only selected enough text to show some addresses )

I did try using the first result with 2 offsets. That worked fine on the pc I was gaming on, when I transferred the cheat file to another pc, it didn't work (pointer was bad) I scrolled down to a result with 5 offsets and it seems to be working on all pcs. Was that just a lucky guess? It seems very unlikely I could guess the right pointer out of a list 0f 703. Why are there multiple offsets for the same base address? (if that can be explained to N00b, or maybe a suggestion on a good book or tutorial to read??)

As for the numerous different base addresses, is that just showing the different codes that access that pointer? (i.e. pick up gold, spend gold, drop gold, etc.)


Thanks lp0 for the offer! If I don't get this soon, I will take you up on the help


Thanks again everyone