Cheat Engine

[TheShado]

Hey all. I went through all the tutorials without much issue, and figured I would start out slow. I am trying to use Cheat Engine on Minesweeper for Vista, and I can get pointers to many of the locations in memory such as click x/y location, bombs left, etc. I can close minesweeper and cheat engine, load them both up, load the save file, and all memory locations still work. My problem is that when I reboot my computer and reload minesweeper and CE, the memory locations are no longer valid. As far as I understand it, those green locations in memory are supposed to be static, so why are they changing?

Thanks for any help!

[Pingo]

Green does mean static but with vista you'r probably getting code shifting.
For minesweeper that sounds retarded. Anyway thats very easy to bypass.

Once you find your static base. Open up the memory viewer.
At the bottom you'l see two things.
Module=MineSweeper.exe
AllocationBase=XXXXXXXX
The XX will be some number.
Eaxample;
allocationbase = 410000
Static base of pointer = 004336AF

Subtract the allocation base from the address.
004336AF - 410000 = 236AF

Now you new address looks like this
MineSweeper.exe+236AF
That = 004336AF and if it moves then CE will calculate the new address for you.
Your static base for the pointer will be MineSweeper.exe+236AF and the offset if one.

If this doesnt work then try a different pointer.

[TheShado]

That did it. Thanks for the help. For anybody that may run into this type of problem, you literally type in the <applicationname.exe>+<value> in the address box. It took me a few minutes to figure out that the Module (Minesweeper.exe) is actually associated with a value and not AllocationBase.

My pointer now looks like this:

MineSweeper.exe+73CBC and the offset is set to 34.

I can reboot, reload the game and CE, and everything is still there and ready to go.