Cheat Engine

aduke · How do I cheat? Reputation: 0 Joined: 28 Apr 2012 Posts: 3

Hello all,

Im using pointer scan with this configs:

img171.imageshack.us/img171/8349/configscan.jpg

I used this address as the base address of pointer...

And getting this error after save the .ptr file:

img441.imageshack.us/img441/8024/errorscan2.jpg

When I dont set the region to scan it work...

I have 2gb memory and 2.5gb HD free

Any config is wrong?

Dark Byte · Posted: Sat Apr 28, 2012 8:10 pm Post subject:

I think the error message you get is more because ce thinks the memory mapping has failed because there is no memory found, but this is more likely because in that little region you scanned, no valid pointers where found to map

That region option means that it will only look for pointers that are located inside the specified region and have a value that does not go outside that range.
And since that region is really small, I doubt any pointer adheres to that rule (the searched for address even falls outside that region)

aduke · How do I cheat? Reputation: 0 Joined: 28 Apr 2012 Posts: 3

yes, sorry, I unterstood wrong what means "pointer path region"...

but start a pointer scan with a specific base address is not possible right?

thanks

Dark Byte · Posted: Sat Apr 28, 2012 9:35 pm Post subject:

No.
And while it's possible to add that, it would not speed up the scan one bit, at best save you some diskspace

But you can use the structure spider, which I kinda forgot about

Fill in as base region the address that your base pointer points to
Now, check the checkbox of pointer needs to be in region and fill in the region of your destination address , or just the same address twice (e.g for 365cfc I'd fill in 365cfc to 365cfc)

Now click scan and it will show you pointerpaths that lead to that region.
You may have to play with the max level though

aduke · How do I cheat? Reputation: 0 Joined: 28 Apr 2012 Posts: 3

Hum...

I tried it but no results... I think I dont understood it right.. =S

My situation is:

I have an address 0x365DAC with value 145, and I want to pointer scan to discover what offset I need to use with the base address.
I need to scan for more than 8 offset level, and it take more than 2 hours...
But I know that the base address is "App.exe+3AD610"...
If I set from where the scan need start, it take less time no?

Dark Byte · Posted: Mon Apr 30, 2012 4:44 pm Post subject:

The pointerscanner itself will not take less time even if it knew that (it goes from the end address till it encounters a path to the base

The structure spider does, but you must set the base address to the address that App.exe+3ad610 points to. (go there in the hexview, select the 4 bytes, press space, press ctrl+g, and copy that address to the clipboard and paste it into the base address for structure spider)
Then set the region to scan for to between 365DAC and 365DAC and a correct level (default is 2, which might not be big enough, but a bigger value might take a LOT longer)