View previous topic :: View next topic |
Author |
Message |
DEVCORE Cheater Reputation: 0
Joined: 11 Aug 2018 Posts: 28
|
Posted: Wed Sep 05, 2018 8:28 pm Post subject: Finding Pointers - Different Game Problem |
|
|
Hi, I have only practice and learned finding pointers on one game which is Assault Cube. I have found the addresses so I thought I know how to find them on other game. But my problem comes in when I try a different game like CS to practice on.
What I’m trying to do is find the Local Player Base manually. Trying to get the pointer by the health value and ammo value.
1) I first scan the ammo value.
2) I shoot then scan new value.
3) I get 15 results.
4) I then freeze and see what freezes the ammo. I get like multiple address that freezes. So I just pick one.
5) I then click on “find what writes to”
6) I shoot again then only one address pops up.
7) I click more information, write down the address that may be pointed to. Which is some hex number but it has no offset.
8..) I then do new scan and search the hex number.
9) Multiple results come up so I add pointer manually.
10 ) I then put in the offset and the address.
11) It points right address.
12) I then right click and find “what writes to”
13) I shoot once, the same address may be pointed to pops up.
14) So maybe I did it wrong and need to “find what accesses” so I do this all over again. Repeat steps but this time “find what accesses”.
Questions:
- When you get multiple results for the value. How do you know which is the right one to freeze when multiple value address freezes the ammo?
- When I find pointers by “what writes to” it won’t show any new address. But when I use “what accesses” instead. I get a whole a lot of address showing when I find what accesses. After shooting once, I get some results with no offset, some result with +21, and another result +93c. How do I know which is the right (address may be pointing to) one to search?
- Basically to make short, when finding local base pointer.
*How do I know which is the right value to freeze when multiple value address freezes the ammo. Which is the right one so I can find what accesses this address?
*How do I know which is the right address and offsets that will lead me to the pointer when more than one that pops up after shooting?
|
|
Back to top |
|
|
OldCheatEngineUser Whateven rank Reputation: 20
Joined: 01 Feb 2016 Posts: 1586
|
Posted: Wed Sep 05, 2018 11:09 pm Post subject: |
|
|
- there is only one right address that can freeze/change your ammo
- you have to see what accesses the address instead of what writes to and then what accesses the pointer (not the pointed address)
notes:
- multiple instructions may access the same address
- multiple addresses might be found when scanning for pointers
- offset '0' is a valid offset
- you never know how deep is the pointer
_________________
About Me;
I Use CE Since Version 1.X, And Still Learning How To Use It Well!
Jul 26, 2020
STN wrote: | i am a sweetheart. |
|
|
Back to top |
|
|
DEVCORE Cheater Reputation: 0
Joined: 11 Aug 2018 Posts: 28
|
Posted: Thu Sep 06, 2018 11:10 pm Post subject: |
|
|
OldCheatEngineUser wrote: | - there is only one right address that can freeze/change your ammo
- you have to see what accesses the address instead of what writes to and then what accesses the pointer (not the pointed address)
notes:
- multiple instructions may access the same address
- multiple addresses might be found when scanning for pointers
- offset '0' is a valid offset
- you never know how deep is the pointer |
I been at this for nearly a day now. I have tried alot of things and still cannot find it. Having problems too. Also I will not use pointer scanner because I want to learn how to do it manually. I will post my steps:
1) Search 100 Health in CE
2) Hurt yourself and find new Health value
3) About 20 results come up
4) Narrow it down to 3 addresses that seem to affect the health when freezing
5) Freeze the 3 addresses each to see which one is most effective when freeze
6) Pick a address, now right click, find what accesses this address
7) Am I suppose to hurt myself again? And click on the instruction that pops up once I get hurt?
8.) If so, the instruction that pops up has no offset. Which leading me to the wrong result.
---------------------------------
9) But using other people forum threads the right offset is FC which was already there. But how do I know if this offset is the right one if I did not look at other people forum thread? How would I determine FC would be the right offset?
10) Carrying on, lets say I use FC offset and get the probably pointer is: XXXXXXX
11) I search that in Hex scan and I get 5 green static addresses
12) I add them into address list and I click to see what module name it is the right one should be "client.dll"
13) But all of them are "wow64cpu.dll"
14) Something is not right here, is something wrong with my CE?
Extra Questions:
15) When freezing to see which is the right address value, what is the best way to find the exact value address? Since I had 3 results that all had something to do with the health when freezing.
16) When finding what accesses the address, how do I know which is the right address to find the offset? The health offset is "FC" but I want to know how do I know it is FC if there was no tutorial or forum threads. How would I find this out by myself?
|
|
Back to top |
|
|
OldCheatEngineUser Whateven rank Reputation: 20
Joined: 01 Feb 2016 Posts: 1586
|
Posted: Fri Sep 07, 2018 3:13 am Post subject: |
|
|
pLearner wrote: | 7) Am I suppose to hurt myself again? And click on the instruction that pops up once I get hurt? |
yes, but ensure its read instruction. (it can be a compare as well)
pLearner wrote: | 8.) If so, the instruction that pops up has no offset. Which leading me to the wrong result. |
i said earlier offset '0' is a valid offset, when instruction have no offset it means the offset is '0'. (and you must add offset '0' when searching for pointers)
pLearner wrote: | 9) But using other people forum threads the right offset is FC which was already there. But how do I know if this offset is the right one if I did not look at other people forum thread? How would I determine FC would be the right offset? |
maybe different game version, maybe another valid pointer.
pLearner wrote: | 13) But all of them are "wow64cpu.dll"
14) Something is not right here, is something wrong with my CE? |
nothing wrong with CE, its you .. did something wrong in your steps. (and try to ignore wow64cpu.dll)
pLearner wrote: | Extra Questions: |
i will make a short video tutorial for you, but you have to download it from mediafire.
- just wait a bit. (approx 15-20 mins)
_________________
About Me;
I Use CE Since Version 1.X, And Still Learning How To Use It Well!
Jul 26, 2020
STN wrote: | i am a sweetheart. |
|
|
Back to top |
|
|
OldCheatEngineUser Whateven rank Reputation: 20
Joined: 01 Feb 2016 Posts: 1586
|
Posted: Fri Sep 07, 2018 11:15 am Post subject: |
|
|
http://www.mediafire.com/folder/5sgc9u0jpn2np/CE_TUT
here is a quick tut, i tried to write-down what im doing and not using much hotkeys.
so you can understand.
notes:
- when you use "what accesses this pointer" and nothing pops up, it means you picked the wrong address and/or with wrong offsets.
- the first step after finding the dynamic address, you can start with
what writes / what accesses and pick any instructions pops up.
but you have to use what accesses afterwards.
_________________
About Me;
I Use CE Since Version 1.X, And Still Learning How To Use It Well!
Jul 26, 2020
STN wrote: | i am a sweetheart. |
|
|
Back to top |
|
|
DEVCORE Cheater Reputation: 0
Joined: 11 Aug 2018 Posts: 28
|
Posted: Sat Sep 08, 2018 2:53 am Post subject: |
|
|
OldCheatEngineUser wrote: | http://www.mediafire.com/folder/5sgc9u0jpn2np/CE_TUT
here is a quick tut, i tried to write-down what im doing and not using much hotkeys.
so you can understand.
notes:
- when you use "what accesses this pointer" and nothing pops up, it means you picked the wrong address and/or with wrong offsets.
- the first step after finding the dynamic address, you can start with
what writes / what accesses and pick any instructions pops up.
but you have to use what accesses afterwards. |
Told you it was CE. I knew it problem solved with CE: Had to run as Administrator to show the right static pointer address.
|
|
Back to top |
|
|
OldCheatEngineUser Whateven rank Reputation: 20
Joined: 01 Feb 2016 Posts: 1586
|
Posted: Sat Sep 08, 2018 4:45 am Post subject: |
|
|
not sure why it doesnt run as admin by default (for you), but im glad you found your issue.
- video deleted
_________________
About Me;
I Use CE Since Version 1.X, And Still Learning How To Use It Well!
Jul 26, 2020
STN wrote: | i am a sweetheart. |
|
|
Back to top |
|
|
|