| View previous topic :: View next topic   | 
	
	
	
		| Author | 
		Message | 
	
	
		pharaon Advanced Cheater
  Reputation: 1
  Joined: 29 Jun 2012 Posts: 81
 
  | 
		
			
				 Posted: Fri Apr 28, 2017 6:33 am    Post subject: help find StarCraft II address | 
				       | 
			 
			
				
  | 
			 
			
				i have SC2 V 3.0.5.39117
 
i'm trying to find single player protoss energy meter which let me put pylon on map
 
 
what value type should i look for
 | 
			 
		  | 
	
	
		| Back to top | 
		 | 
	
	
		  | 
	
	
		ZenX Grandmaster Cheater Supreme
  Reputation: 1
  Joined: 26 May 2007 Posts: 1021 Location: ">>Pointer<<" :  Address 00400560 Offset :1FE
  | 
		
			
				 Posted: Fri Apr 28, 2017 7:19 am    Post subject: Re: help find StarCraft II address | 
				       | 
			 
			
				
  | 
			 
			
				 	  | pharaon wrote: | 	 		  i have SC2 V 3.0.5.39117
 
i'm trying to find single player protoss energy meter which let me put pylon on map
 
 
what value type should i look for | 	  
 
 
If you're trying to change a client-sided energy meter, you would search for exactly that value.
 
 
If the meter is at 0 search 0. When it moves to 10, search for that. So on and so forth.
 
 
Hope that makes sense.
 _________________
 CEF Moderator since 2007 ^_^
 
ZenX-Engine  | 
			 
		  | 
	
	
		| Back to top | 
		 | 
	
	
		  | 
	
	
		pharaon Advanced Cheater
  Reputation: 1
  Joined: 29 Jun 2012 Posts: 81
 
  | 
		
			
				 Posted: Fri Apr 28, 2017 3:35 pm    Post subject: Re: help find StarCraft II address | 
				       | 
			 
			
				
  | 
			 
			
				 	  | ZenX wrote: | 	 		  
 
If you're trying to change a client-sided energy meter, you would search for exactly that value.
 
 
If the meter is at 0 search 0. When it moves to 10, search for that. So on and so forth.
 
 
Hope that makes sense. | 	  
 
 
yes it make sense but it didnt work with me i tried 4byte, double,float and couldn't find the address
 | 
			 
		  | 
	
	
		| Back to top | 
		 | 
	
	
		  | 
	
	
		Viloresi Expert Cheater
  Reputation: 0
  Joined: 02 Feb 2017 Posts: 149
 
  | 
		
			
				 Posted: Sat Apr 29, 2017 4:28 am    Post subject: Re: help find StarCraft II address | 
				       | 
			 
			
				
  | 
			 
			
				 	  | pharaon wrote: | 	 		   	  | ZenX wrote: | 	 		  
 
If you're trying to change a client-sided energy meter, you would search for exactly that value.
 
 
If the meter is at 0 search 0. When it moves to 10, search for that. So on and so forth.
 
 
Hope that makes sense. | 	  
 
 
yes it make sense but it didnt work with me i tried 4byte, double,float and couldn't find the address | 	  
 
I've never tried to look at starcraft 2, but it's a blizzard multiplayer game also... so it might be well protected! Things may not be so easy as searching the exact value :/
 | 
			 
		  | 
	
	
		| Back to top | 
		 | 
	
	
		  | 
	
	
		pharaon Advanced Cheater
  Reputation: 1
  Joined: 29 Jun 2012 Posts: 81
 
  | 
		
			
				 Posted: Sat May 06, 2017 9:22 am    Post subject:  | 
				       | 
			 
			
				
  | 
			 
			
				this what i find in memory for what access the address of power 
 
 
RAX=0009A490
 
RBX=0009A490
 
RCX=04896980
 
RDX=04896980
 
RSI=000C8000
 
RDI=0009A400
 
RBP=DB2B5BE8
 
RSP=04896920
 
RIP=7FF7DD4B20A4
 
 
Probable base pointer =DB2B5BE8
 
 
7FF7DD4B2098 - cmovle rcx,rdx
 
7FF7DD4B209C - mov ebx,[rcx]
 
7FF7DD4B209E - mov [rbp+000001A0],ebx
 
7FF7DD4B20A4 - cmp ebx,edi
 
7FF7DD4B20A6 - je SC2_x64.AssertAndCrash+530D8C
 
 
 
i tried this script
 
 
[ENABLE]
 
//code from here to '[DISABLE]' will be used to enable the cheat
 
alloc(newmem,2048,"SC2_x64.exe"+59209E) 
 
label(returnhere)
 
label(originalcode)
 
label(exit)
 
 
newmem: //this is allocated memory, you have read,write,execute access
 
//place your code here
 
 
mov ebx,C8000
 
originalcode:
 
mov [rbp+000001A0],ebx
 
 
exit:
 
jmp returnhere
 
 
"SC2_x64.exe"+59209E:
 
jmp newmem
 
nop
 
returnhere:
 
 
 
 
 
 
 
[DISABLE]
 
//code from here till the end of the code will be used to disable the cheat
 
dealloc(newmem)
 
"SC2_x64.exe"+59209E:
 
mov [rbp+000001A0],ebx
 
//Alt: db 89 9D A0 01 00 00
 
 
it work fine in the game but it crashes after the mission is over is there better way to do it
 | 
			 
		  | 
	
	
		| Back to top | 
		 | 
	
	
		  | 
	
	
		 |