Cheat Engine

[Horvath]

Good morning All,

I made a cheat with CE to modify my character in a game. It doesn't use a static offset so I searched and found the pointer and it works

Now I would like to make a trainer with delphi for this cheat code.
I know the instructions to read and write in memory to an offset :

[hcavolsdsadgadsg]

Read from the hopefully static address you worked your way down to, what you will surely find (surprise)... another address. Add the offset if there is one, and repeat until you're done.

[Horvath]

Thanks for the reply

I don't know if it's correct, I used "Find out what reads from this address" on my pointer, it founds me a unique result mov eax, [00a9397c]

So I searched 00a9397c and CE found me 53 results (green). Now what to do with the results? Sorry for the question but I don't know how to use the results to make my trainers

[SXGuy]

Dont worry about all that

add myexe.exe+0061501B to your CE CT table and note the address it displays, just use that address.

what you want to do, is find the base address for myexe.exe and then add the address next to it, which will result in the final address that the ct table displays.

So either find the base address for myexe.exe or just add the resulting address that the ct table tells you.

[Dark Byte]

(00a9397c is already a static address so no need to do a fidn what accesses on that)

it's also pretty safe to assume the base address of myexe.exe is 00400000 (can be different, but exe's that aren't specifically compiled with vista's change location bit will usually get the base address they desire)

00400000+61501b=00a1501b
hrm...., that's nowhere near 00a9397c

make a screenshot of the pointer written down in ce (doubleclcik the address and it'll show it like add address) and upload it here
So far what you've described isn't a pointer at all, or you have a really messed up pointer. (pointers with offsets bigger than 20000 tend not to be safe pointers)

[Horvath]

Thanks.

In my first post, the value of my pointer is wrong. I didn't read the right value on my paper, in fact it's 69397C

Here is the screenshot of my pointer :
(see Image 1)

00400000 + 69397C = 00a9397c = the value I found in the line mov eax, [00a9397c]

If I go to 00a9397c :
(see Image 2)

It seems like the offset I'm searching

So in delphi, I need to go to the offset 00a9397c, read the value and go to the offset I read previously?

[Dark Byte]

read the 4 byte value (dword) at $00a9397c and then add $38c to that value
the resulting value will be the address which you can then write to

[Horvath]

I only tried to read for the moment and that worked ^^
Thanks a lot for your help, all