Cheat Engine

membrain · Newbie cheater Reputation: 0 Joined: 04 Nov 2005 Posts: 10

In doing a pointer search I ran into a couple issues that I dont understand, and cant seem to find a solution, or reason that I can comprehend.

Ive ran thru CE's tutorial, no problem'O... I applied what it's example showed to a "casual" game with no success. Heres what happend:

I got the address to -ammo- in my cheat table,
I did the "find what writes to this addy" and got some code
I Dbl clicked it, found the code marked in RED, mov [ecx+00000218], esi
I took the value from "The value of the pointer need..." which is: 00c03290, which is what "ecx is equal to" (esi is the value of the ammo currently)
I did the search in hex for 00c03290, and NOTHING!
I then let CE find the pointer on the original addy i found the ammo to be at for me with the pointer search, and it found the pointer.
The value for the pointer it found was: "This pointer points to address" reads: 00c03260 and in the offset: 248, where'as in the "Extra Info" window, Highlited in red it said 218.

I have a picture, but am not allowed to post it Evil or Very Mad

w/e. rules r rules...
I'm not sure what it is exactly that I dont know, as far as whats happening, why this difference in 30 is there... subtracted from the pointer value, and added to the offset value? I'm clueless.

-DEViL- · Posted: Wed Jan 07, 2009 4:45 am Post subject:

also,C03260->this address can be static.

membrain · Newbie cheater Reputation: 0 Joined: 04 Nov 2005 Posts: 10

The addy seems to be a single level pointer (1 lv deep) for that is all I need to go in when i find it manually with the 30-offset in mind. Also, in CE's pointer scan, I have it set to scan only 1 lv deep...

Here is some code info aswell as the original value i scanned for.

Labyrnth · Moderator Reputation: 10 Joined: 28 Nov 2006 Posts: 6301

Ok I deleted my post because I screwed up when I read your post.
C03290 & C03260 are values of an address.

But you have kinda went all over the place by saying the instruction was
mov [ecx+00000218],esi and now your at mov [eax+0000021c],ecx

But looking at the assembly your showing I would mess around with doing a code injection on 40ADDC sub esi,edx which is probably the decreaser of your ammo.

What was your address you found in scans?
What was your address found from the hex scan of C03290 & C03260?

membrain · Newbie cheater Reputation: 0 Joined: 04 Nov 2005 Posts: 10

C03290 when scanned in hex comes back with Zero results.
C03260 comes back with the address (in green) 00495D18

and when i enter that address in as a "manual address w/ pointer" i have to change the offset shown in the "extra info" and add 30 to it. Only then, will the pointer point to the original address i found in my first series of scans for the ammo... I'm honestly clueless as to why this is happening. And I unfortunatly cant seem to find anything explaining why it would be this way? I dont yet have enough knowledge to really ask the right questions, I only can tell that something weird is going on that I've not yet learned about, and I'd like to Laughing

You were right about the code injection however... I changed it to "add" instead of a nop or anything else (for fun) and it is now adding the value i shoot to the ammo. This seems to work for ALL guns, not just the one I was originaly using to scan for the address with, which is nice... I still need to learn how to make trainers with injections, haven't done that yet eather. This is only my 3rd day back in the game hacking business since my almost 4yr leave. And I was a noob then too Rolling Eyes

Labyrnth · Moderator Reputation: 10 Joined: 28 Nov 2006 Posts: 6301

495D18+248 = address you scanned for and found ammo.

C03260 is 30 less then the value of the address ofthe assembly you are breaking on. Which is the ammo.

But the value of the address you break has no result,
This looks like a level 2 pointer.
If you take and manual add 495d18+30 in the #2 pointer and then 218 in the next offset box up. You will see the structure of it.

But what you did is something like I have done, 1 address with a offset to make the pointer.
495D18+248

membrain · Newbie cheater Reputation: 0 Joined: 04 Nov 2005 Posts: 10

hmm...

I dont quite yet understand exactly what you mean, but I know it makes sense (to someone who knows these things) BUT! I will take your information and keep it in mind and I'm sure it will snap as I progress in my knowledge of memory / game hacking... Thanks a bunch.

this stuff is quite fun and interesting to me, and It would seem also addicting. Ive spent about 3 days str8 just messing around with CE, playing around with different games trying to learn more about the whole process..