| View previous topic :: View next topic |
| Author |
Message |
chukkyjr How do I cheat?
Reputation: 0
Joined: 12 Mar 2012 Posts: 4
|
Posted: Mon Mar 12, 2012 6:18 am Post subject: Pointer keeps pointing back |
|
|
i scanned an address (let's say)
0C4D09AC
it has the following :
mov eax, [ecx+eax*4]
ECX = 0C4D09A8
so i scanned that ECX value and it's address is:
13300814
it has following :
mov ecx, [ecx+0C]
my problem that value actually accesses value of ecx (0C4D9A8), so there is no way i use it as a pointer, since when i add :
1Level Pointer :
4 offset (i assume this from eax*4)
2Level Pointer :
13300814 offset C (i assume this from 0C)
the pointer doesn't work, it points some value i don't recognize, ofc i tried this one too and it works :
1Level Pointer :
13300814 offset 4 (eax*4)
and ofc that pointer doesn't work on game restart. can anyone help me?
if needed, the game is Warcraft 3 : Frozen THrone and i tried hacking it in LAN playing alone.
|
|
| Back to top |
|
 |
Fresco Grandmaster Cheater
Reputation: 4
Joined: 07 Nov 2010 Posts: 600
|
Posted: Mon Mar 12, 2012 7:38 am Post subject: |
|
|
try pointerscan
right click the address in the table -> pointerscan for this address
don't change anything -> ok
restart the game
open pointer scanner -> open saved *.pt0
rescan addresses ... and so on
_________________
... Fresco |
|
| Back to top |
|
 |
chukkyjr How do I cheat?
Reputation: 0
Joined: 12 Mar 2012 Posts: 4
|
Posted: Mon Mar 12, 2012 8:21 am Post subject: |
|
|
which address should i do the pointer scan on?
13300814 or 0C4D09A8 ?
|
|
| Back to top |
|
 |
Fresco Grandmaster Cheater
Reputation: 4
Joined: 07 Nov 2010 Posts: 600
|
Posted: Mon Mar 12, 2012 8:31 am Post subject: |
|
|
the address that holds the value of health ... if you're trying to find the pointer that always point to the address of heath ...
_________________
... Fresco |
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 474
Joined: 09 May 2003 Posts: 25952 Location: The netherlands
|
Posted: Mon Mar 12, 2012 9:14 am Post subject: |
|
|
remember that the registers shown are AFTER the instruction is executed
You did a "find what accesses" on address 13300814
and you found that the instruction
accesses that address
In this case, disregard the ECX value as it has been overwritten with the value stored at the address [ecx+0c]
Now use your brain:
mov ecx, [ecx+0C] accesses 13300814
that means that ECX+0C = 13300814
ECX = 13300814-0C = 13300808
And of course, if it fails, try the pointerscanner and give it as offsets 04 - 0c to speed up the scanning (04 at top, 0c at bottom)
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
chukkyjr How do I cheat?
Reputation: 0
Joined: 12 Mar 2012 Posts: 4
|
Posted: Mon Mar 12, 2012 11:31 am Post subject: |
|
|
^i did feel something like this too, but i just don't know how to correctly convert C from hex to decimal
and yes you can say i'm dumb again, i've tried using hex converter from calculator and still doesn't really get it at all... is it just check Hex, then type C, then check decimal?
and also i think i have to use pointer scanner after all, the other try i found address other than 13300814 that also has ECX+0C , that means that isn't the static pointer right?
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 474
Joined: 09 May 2003 Posts: 25952 Location: The netherlands
|
Posted: Mon Mar 12, 2012 11:40 am Post subject: |
|
|
using the calculator: Set to hex. Type in address-0c click '=' and you'll have the result. No need to convert to decimal. (no need to use decimal ever)
it's only static when the address is green (and you're not using win vista 64 since ce doesn't show colors there)
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
Fresco Grandmaster Cheater
Reputation: 4
Joined: 07 Nov 2010 Posts: 600
|
Posted: Tue Mar 13, 2012 9:24 am Post subject: |
|
|
in win xp x86 x32
calculator
view -> scientific
just tick hex -> type in hex number -> tick dec
_________________
... Fresco |
|
| Back to top |
|
 |
|