Cheat Engine

antan77 · Newbie cheater Reputation: 0 Joined: 04 Jan 2013 Posts: 13

Hi, I'm here to understand a problem in CE. Using the Pointer scanner I've found successful a pointer (multi-level). According to CE starts at the pointer exe +0076CE1C, and points to the address 0DB090C0. The pointer points on the right values. But when I look to address 0076CE1C there is (both CE and in TSearch) a completely different value. So I need, the starting address of the multi-level pointer. I have also tried to look at the CT XML file, as well as find just the same as in CE. Just again, so it's clearly! CE does the job very well and points to the right value, but I need the starting address of the multi-level-pointer.

Hope you can help me

Martin

Dark Byte · Posted: Fri Jan 04, 2013 2:07 pm Post subject:

you need to go to modulename+0076ce1c, not 0076ce1c

often modulename is 00400000, so it's probably 00b6ce1c

antan77 · Newbie cheater Reputation: 0 Joined: 04 Jan 2013 Posts: 13

Hey,

thats it!

THX a lot

BTW is there a way to get the value for modulname?

Greets

Martin

Dark Byte · Posted: Fri Jan 04, 2013 2:29 pm Post subject:

Yes, enumerate all the modules, and then get the base address of each module. (Hmodule tends to be the same as the base)