Cheat Engine

Onelio · Newbie cheater Reputation: 0 Joined: 22 Mar 2016 Posts: 20

Hello, I have one question. Is there any way to find a pointer of an address that have a string value and never change while executing?
This value is written in the program and you can see it with an Hexadecimal editor, but i want to change it while executing the program.
Thanks for your help!

ParkourPenguin · Posted: Tue Mar 22, 2016 11:27 am Post subject:

It's the same way you'd find a pointer to anything else. You could try to find it manually by looking at what accesses that address, but I'd recommend using the pointer scanner.

Onelio · Newbie cheater Reputation: 0 Joined: 22 Mar 2016 Posts: 20

Could you give me(if it is not much trouble) a tutorial URL or something like that? Embarassed

ParkourPenguin · Posted: Tue Mar 22, 2016 11:52 am Post subject:

http://forum.cheatengine.org/viewtopic.php?t=572465

Dark Byte · Posted: Tue Mar 22, 2016 12:45 pm Post subject:

Do a scan for the string you're interested in, and launch a pointerscan for every address found

Onelio · Newbie cheater Reputation: 0 Joined: 22 Mar 2016 Posts: 20

Sorry for being to late, but i just got sutcked in this part

s12.postimg(.)org/q8rq8ds31/offset_118.png

Because i cant see any item in the list.
I've tried everything, included editing the value by myself

i.gyazo(.)com/841fe192f859cae7c8be8926656862a9.png

ParkourPenguin · Posted: Thu Mar 24, 2016 12:35 pm Post subject:

Well, if no instruction accesses that address when something should be accessing it, then that's usually an indicator that that address isn't the one you're looking for.
You can still do a pointer scan for it if you want to, though. It doesn't matter if you have what the final offset probably is. That just means you'll get more (probably useless) results.

Onelio · Newbie cheater Reputation: 0 Joined: 22 Mar 2016 Posts: 20

If I understood well, There should be a instruction right?
But as I remember, this address is a "URL" that just is used to download the latest news when the game start, so this url have no use in-game. Rolling Eyes

And I think this is the correct address, because watching the memory I found it and is the only one that appears. <.<

Can you please post another url of doing a pointer scan? The tutorials that I found don't explain a lot.(If it's not a problem Embarassed

)

ParkourPenguin · Posted: Thu Mar 24, 2016 1:33 pm Post subject:

No. You don't need an instruction to do a pointer scan. All you need is an address.

Steps to do a pointer scan:

Find an address with a value you like.
Put that address in the address list (bottom section of main CE window).
Right click on it.
Select "Pointer scan for this address".
Click on the "OK" button at the bottom.
Save the pointer list file to somewhere.
Wait for the initial pointer scan to complete.
Once it's done, restart your computer.
Open the game and CE.
Find the new address of the same value you liked in step 1.
In CE, go to Memory Viewer -> Tools -> Pointer scan.
Open up the pointer list file you saved in step 6.
Go to Pointer scanner -> Rescan memory.
Copy and paste the new address (step 10) into the "Address to find" textbox.
Click the "OK" button.
Save this new pointer list file to somewhere.
Wait for the scan to complete.
Repeat steps 8 - 17 until the number of found pointers decreases by less than 1%. Note that rescanning the list on a different computer could produce more reliable pointers. This isn't required, but it's helpful if you're able to do this.
If there is something in the list, that's a pointer you can use. If there is nothing in the list, then restart from step 1 except select a higher max offset and/or max level when doing the initial pointer scan (step 4).

Onelio · Newbie cheater Reputation: 0 Joined: 22 Mar 2016 Posts: 20

I did everything.. but when I restared and scaned again, the result became 0 of found Base Address...

I don´t think that I was wrong.. but let me try again saving the exact value in a .txt

_______________________________________________________________________________________________________________

Doing..

ParkourPenguin · Posted: Thu Mar 24, 2016 3:50 pm Post subject:

Onelio · Newbie cheater Reputation: 0 Joined: 22 Mar 2016 Posts: 20

I just read this point 2 minutes ago xD
Now I've tried with mire than 3billions results and there is nothing...
(Is it normal?)

I mean the value of what I find, it never change because it's written in the .exe, And yes, I know that just should change the address.. but just in case that I forget writting the full url xD

I'll try your last point!

ParkourPenguin · Posted: Thu Mar 24, 2016 4:11 pm Post subject:

Wait... what?

You're trying to find a static pointer to something that's already static?

If so, you really need to rethink your current position.

Onelio · Newbie cheater Reputation: 0 Joined: 22 Mar 2016 Posts: 20

It's really both of them because it's a complete url that have a domain(static) and the path that is not static at all.. So I wanted to know the second one Shocked

(But the domain may help me too, if I'm not asking a lot..)

I know it's confusing, let me try to explain.

The exe access a url that is like; domain(.)com/newurl.php(satic)
and then save this url(content of the page) and navigate through it...
So I want to know them two Rolling Eyes

ParkourPenguin · Posted: Thu Mar 24, 2016 4:37 pm Post subject:

I'm not talking about the URL or whatever is contained within that string. I'm talking about the address where the string is stored in memory. Is the address where the string is stored located within a module, or is it in dynamically allocated memory?

And what do you mean "both of them"? I only asked one question pertaining to one thing.