Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Finding Pointers - Different Game Problem

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Gamehacking
View previous topic :: View next topic  
Author Message
DEVCORE
Cheater
Reputation: 0

Joined: 11 Aug 2018
Posts: 28

PostPosted: Wed Sep 05, 2018 8:28 pm    Post subject: Finding Pointers - Different Game Problem Reply with quote

Hi, I have only practice and learned finding pointers on one game which is Assault Cube. I have found the addresses so I thought I know how to find them on other game. But my problem comes in when I try a different game like CS to practice on.

What I’m trying to do is find the Local Player Base manually. Trying to get the pointer by the health value and ammo value.

1) I first scan the ammo value.
2) I shoot then scan new value.
3) I get 15 results.
4) I then freeze and see what freezes the ammo. I get like multiple address that freezes. So I just pick one.
5) I then click on “find what writes to”
6) I shoot again then only one address pops up.
7) I click more information, write down the address that may be pointed to. Which is some hex number but it has no offset.
8..) I then do new scan and search the hex number.
9) Multiple results come up so I add pointer manually.
10 ) I then put in the offset and the address.
11) It points right address.
12) I then right click and find “what writes to”
13) I shoot once, the same address may be pointed to pops up.
14) So maybe I did it wrong and need to “find what accesses” so I do this all over again. Repeat steps but this time “find what accesses”.

Questions:

- When you get multiple results for the value. How do you know which is the right one to freeze when multiple value address freezes the ammo?

- When I find pointers by “what writes to” it won’t show any new address. But when I use “what accesses” instead. I get a whole a lot of address showing when I find what accesses. After shooting once, I get some results with no offset, some result with +21, and another result +93c. How do I know which is the right (address may be pointing to) one to search?

- Basically to make short, when finding local base pointer.
*How do I know which is the right value to freeze when multiple value address freezes the ammo. Which is the right one so I can find what accesses this address?
*How do I know which is the right address and offsets that will lead me to the pointer when more than one that pops up after shooting?
Back to top
View user's profile Send private message
OldCheatEngineUser
Whateven rank
Reputation: 20

Joined: 01 Feb 2016
Posts: 1586

PostPosted: Wed Sep 05, 2018 11:09 pm    Post subject: Reply with quote

- there is only one right address that can freeze/change your ammo

- you have to see what accesses the address instead of what writes to and then what accesses the pointer (not the pointed address)

notes:
- multiple instructions may access the same address
- multiple addresses might be found when scanning for pointers
- offset '0' is a valid offset
- you never know how deep is the pointer

_________________
About Me;
I Use CE Since Version 1.X, And Still Learning How To Use It Well!
Jul 26, 2020
STN wrote:
i am a sweetheart.
Back to top
View user's profile Send private message Visit poster's website
DEVCORE
Cheater
Reputation: 0

Joined: 11 Aug 2018
Posts: 28

PostPosted: Thu Sep 06, 2018 11:10 pm    Post subject: Reply with quote

OldCheatEngineUser wrote:
- there is only one right address that can freeze/change your ammo

- you have to see what accesses the address instead of what writes to and then what accesses the pointer (not the pointed address)

notes:
- multiple instructions may access the same address
- multiple addresses might be found when scanning for pointers
- offset '0' is a valid offset
- you never know how deep is the pointer


I been at this for nearly a day now. I have tried alot of things and still cannot find it. Having problems too. Also I will not use pointer scanner because I want to learn how to do it manually. I will post my steps:

1) Search 100 Health in CE
2) Hurt yourself and find new Health value
3) About 20 results come up
4) Narrow it down to 3 addresses that seem to affect the health when freezing
5) Freeze the 3 addresses each to see which one is most effective when freeze
6) Pick a address, now right click, find what accesses this address
7) Am I suppose to hurt myself again? And click on the instruction that pops up once I get hurt?
8.) If so, the instruction that pops up has no offset. Which leading me to the wrong result.
---------------------------------
9) But using other people forum threads the right offset is FC which was already there. But how do I know if this offset is the right one if I did not look at other people forum thread? How would I determine FC would be the right offset?
10) Carrying on, lets say I use FC offset and get the probably pointer is: XXXXXXX
11) I search that in Hex scan and I get 5 green static addresses
12) I add them into address list and I click to see what module name it is the right one should be "client.dll"
13) But all of them are "wow64cpu.dll"
14) Something is not right here, is something wrong with my CE?


Extra Questions:

15) When freezing to see which is the right address value, what is the best way to find the exact value address? Since I had 3 results that all had something to do with the health when freezing.

16) When finding what accesses the address, how do I know which is the right address to find the offset? The health offset is "FC" but I want to know how do I know it is FC if there was no tutorial or forum threads. How would I find this out by myself?
Back to top
View user's profile Send private message
OldCheatEngineUser
Whateven rank
Reputation: 20

Joined: 01 Feb 2016
Posts: 1586

PostPosted: Fri Sep 07, 2018 3:13 am    Post subject: Reply with quote

pLearner wrote:
7) Am I suppose to hurt myself again? And click on the instruction that pops up once I get hurt?

yes, but ensure its read instruction. (it can be a compare as well)

pLearner wrote:
8.) If so, the instruction that pops up has no offset. Which leading me to the wrong result.

i said earlier offset '0' is a valid offset, when instruction have no offset it means the offset is '0'. (and you must add offset '0' when searching for pointers)

pLearner wrote:
9) But using other people forum threads the right offset is FC which was already there. But how do I know if this offset is the right one if I did not look at other people forum thread? How would I determine FC would be the right offset?

maybe different game version, maybe another valid pointer.

pLearner wrote:
13) But all of them are "wow64cpu.dll"
14) Something is not right here, is something wrong with my CE?

nothing wrong with CE, its you .. did something wrong in your steps. (and try to ignore wow64cpu.dll)

pLearner wrote:
Extra Questions:

i will make a short video tutorial for you, but you have to download it from mediafire.

- just wait a bit. (approx 15-20 mins)

_________________
About Me;
I Use CE Since Version 1.X, And Still Learning How To Use It Well!
Jul 26, 2020
STN wrote:
i am a sweetheart.
Back to top
View user's profile Send private message Visit poster's website
OldCheatEngineUser
Whateven rank
Reputation: 20

Joined: 01 Feb 2016
Posts: 1586

PostPosted: Fri Sep 07, 2018 11:15 am    Post subject: Reply with quote

http://www.mediafire.com/folder/5sgc9u0jpn2np/CE_TUT

here is a quick tut, i tried to write-down what im doing and not using much hotkeys.
so you can understand.

notes:
- when you use "what accesses this pointer" and nothing pops up, it means you picked the wrong address and/or with wrong offsets.
- the first step after finding the dynamic address, you can start with
what writes / what accesses and pick any instructions pops up.
but you have to use what accesses afterwards.

_________________
About Me;
I Use CE Since Version 1.X, And Still Learning How To Use It Well!
Jul 26, 2020
STN wrote:
i am a sweetheart.
Back to top
View user's profile Send private message Visit poster's website
DEVCORE
Cheater
Reputation: 0

Joined: 11 Aug 2018
Posts: 28

PostPosted: Sat Sep 08, 2018 2:53 am    Post subject: Reply with quote

OldCheatEngineUser wrote:
http://www.mediafire.com/folder/5sgc9u0jpn2np/CE_TUT

here is a quick tut, i tried to write-down what im doing and not using much hotkeys.
so you can understand.

notes:
- when you use "what accesses this pointer" and nothing pops up, it means you picked the wrong address and/or with wrong offsets.
- the first step after finding the dynamic address, you can start with
what writes / what accesses and pick any instructions pops up.
but you have to use what accesses afterwards.


Told you it was CE. I knew it problem solved with CE: Had to run as Administrator to show the right static pointer address.
Back to top
View user's profile Send private message
OldCheatEngineUser
Whateven rank
Reputation: 20

Joined: 01 Feb 2016
Posts: 1586

PostPosted: Sat Sep 08, 2018 4:45 am    Post subject: Reply with quote

not sure why it doesnt run as admin by default (for you), but im glad you found your issue.

- video deleted

_________________
About Me;
I Use CE Since Version 1.X, And Still Learning How To Use It Well!
Jul 26, 2020
STN wrote:
i am a sweetheart.
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Gamehacking All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites