| View previous topic :: View next topic |
| Author |
Message |
ProRathack
Newbie cheater
![]() Reputation: 0
Joined: 28 Dec 2006
Posts: 24
|
 Posted: Sat Dec 30, 2006 5:36 pm Post subject: Step 8: Multilevel pointers ( HELP PLEase!) |
 |
|
Hi all,,
First my english is not very good , so help me plz 
I just working on the tutorial of the Cheat Engine ...
I have to say that's really a good way to understand the program but it's sometime very very confusing (like treating you like you are pro).. and i'm a lil bit noob.. so please tell me exactly what should i do for this step ,,,
if you do it with picutres that will be great ..
please help me :
| Quote: |
Step 8: Multilevel pointers: (PW=525927)
This step will explain how to use multi-level pointers.
In step 6 you had a simple level-1 pointer, with the first address found already being the real base address.
This step however is a level-4 pointer. It has a pointer to a pointer to a pointer to a pointer to a pointer to the health.
You basicly do the same as in step 6. Find out what accesses the value, look at the instruction and what probably is
the base pointer value, and what is the offset, and already fill that in or write it down. But in this case the address
you'll find will also be a pointer. You just have to find out the pointer to that pointer exactly the same way as you did
with the value. Find out what accesses that address you found, look at the assembler instruction, note the probable
instruction and offset, and use that.
and continue till you can't get any further (usually when the base address is a static address, shown up as green)
Click Change Value to let the tutorial access the health.
If you think you've found the pointer path click Change Register. The pointers and value will then change and you'll
have 3 seconds to freeze the address to 5000
Extra: This problem can also be solved using a auto assembler script, or using the pointer scanner
Extra2: In some situations (like this) it is recommended to change ce's codefinder settings to Access violations when
encountering instructions like mov eax,[eax] since debugregisters show it AFTER it was changed, making it hard to
find out the the value of the pointer
Extra3: If you're still reading. You might notice that when looking at the assembler instructions that the pointer is
being read and filled out in the same codeblock. This doesn't always happen, but can be really usefull in finding a
pointer when debuggng is troublesome
|
Thank you 
|
|
| Back to top |
|
 |
Turtle
Advanced Cheater
![]() Reputation: 7
Joined: 25 Jul 2004
Posts: 85
|
|
| Back to top |
|
|
runer262
Expert Cheater
 Reputation: 0
Joined: 04 Sep 2006
Posts: 241
|
|
| Back to top |
|
|
ProRathack
Newbie cheater
![]() Reputation: 0
Joined: 28 Dec 2006
Posts: 24
|
| Posted: Sat Dec 30, 2006 9:32 pm Post subject: |
|
|
OMG..you are so helpful guys...
and fastt ..
oh i can't believe that there is good users like these..
|
|
| Back to top |
|
|
kkid28
Expert Cheater
 Reputation: 0
Joined: 30 Sep 2006
Posts: 110
Location: The only flat part of the planet.
|
| Posted: Sun Dec 31, 2006 4:35 am Post subject: |
|
|
English is better than most people's here. lol
_________________
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
