Cheat Engine

Nomad · How do I cheat? Reputation: 0 Joined: 25 May 2006 Posts: 7

I am attempting to find the static address which controls the current amount of health on a character. I do a scan in 4 bytes for the exact amount of health I have. Then I change my health by removing an item which adds to health and do the next scan for the new amount of health.

Now there are 3 addresses shown, and no matter how much I change my health, all 3 of them change to the same value. If I leave the game and come back these addresses are different though (usually), but I always have 3 with the same value.

I've tried the injected scanner to try and find pointers, but have never found anything with it. I've tried it the manual way as instructed in the forums here, but I never find anything when I search for the probable pointer from any of the 3 dynamic addresses, unless I search in 2 bytes. When I search in 2 bytes I get anywhere from 50-100 addresses with no way of knowing how to reduce the number of occurances.

I assume that this game is using Dynamic Memory Allocation. So, how would I get a static address in this situation? I do not want to write to any of the addresses, as this is likely not possible on the client side for this game. I only need to read the addresses so that a program I am writing can use memory reading functions to get the values from these addresses and take the actions necessary at the given time.

Explain in NOOB terms if you can, since I am a NOOB when it comes to using this engine. I did not see any posts on this situation, and I searched for hours.

Thanks for any assistance,

Nomad

Turtle · Posted: Thu May 25, 2006 9:32 pm Post subject:

Have you tried the pointer scanner in the latest compile? I think that May 7th is the latest one, and I think there are some improvements to the pointer scanner. http://www.cheatengine.org/weeklycompile/

For the structure size I think you can leave it as 1024, for "max level" try 3 or 4, if that doesn't work try 5 or more.

A "max level" of 1 or 2 might not be enough sometimes.

Nomad · How do I cheat? Reputation: 0 Joined: 25 May 2006 Posts: 7

Nomad · How do I cheat? Reputation: 0 Joined: 25 May 2006 Posts: 7

So I guess that nobody has any suggestions of any kind?

I've been using SoftIce on the game with a little more success.
(As far as the game not locking up or closing)

Any ideas or suggestions to try will be greatly appreciated.
I don't know much about Assembly Language Programming,
but am catching on quick.

Dark Byte · Posted: Sat May 27, 2006 3:17 am Post subject:

assuming that piece of code is used by only your own player and not the others: (otherwise find a different one, e.g one that displays the value to you)

try a autoassemble script at 6fd5b024 (or whatever address it becomes, use the modulename+offsetm,ethod to pinpoint it in a script)

allocate 4bytes of memory, use registeraddress on that allocated memory so you can ue it in cheat tables, and at 6fd5b024 do a code cave that saves the value of eax+4 to your allocated memory

you can then use the registered address as a pointer with offset 0 and it'll point to the address you want.

Check out the autoassembler tutorial subsection in ce tutorials

Nomad · How do I cheat? Reputation: 0 Joined: 25 May 2006 Posts: 7

Thanks for the tip, I appreciate the attempt at trying to help.

This idea will not work for me because any manipulation of the game code will be detected
by battle.net. This means that anyone who uses my program if I do this will end up
getting their cd-key banned. I have been using Ollydbg with a lot of success in finding
pointers. However the pointers themself are dynamic in this game from what I have found
so far.

Example:

MOV EAX,DWORD PTR SS:[ESP+4]

Then if you go to this address there will be a pointer there with a similar expression.
There has to be a logical pattern which will allow me to identify and follow the pointers as
they move within the program, I just have to figure it out. I have no problem getting
the current life while I'm in the game, the trick is to get it to repeat no matter what when
I leave the game and come back. Wink

All the character information is stored on the game server and sent to the game when you
log on, but there has to be a static receiving address or something to receive the
information. At least I would think so.

I'll post back when I've made some progress.

Thanks again,

Nomad

Dark Byte · Posted: Sun May 28, 2006 8:29 am Post subject:

try hooking recv