 |
Cheat Engine
The Official Site of Cheat Engine
|
| View previous topic :: View next topic |
| Author |
Message |
coffeeAchiever
Newbie cheater
![]() Reputation: 0
Joined: 27 Dec 2014
Posts: 22
|
 Posted: Sun Jan 04, 2015 12:21 am Post subject: Pointer Offsets |
 |
|
Something tells me I don't quite understand what the offsets are in a pointer scan. Here's one of my results:
| Code: | Base Address Offset 0 Offset 1 Offset 2 Offset 3 Offset 4 Points to:
"payday_win32_release.exe"+0058 F474 31C 720 238 14 118 144E03C3 = 00 C0 79 44 (999) |
From the attached screenshot, you can see what I'm trying to do.
So I assume that payday_win32_release.exe is considered the base address for the program's virtual memory space, 0.
The first pointer is located at 0 + 0058 F474. The value at that location is C4 08 50 E8.
I looked at both C408 50E8 and 50E8 C408. There's nothing but ?? in those locations for miles, so adding 31C (C408 50E8 + 031C and 50E8 C408 + 031C) is still just a bunch of ??.
Questions:
1. I assume I start at 0058 F474. Right?
2. I look at the 4 byte value at that location, C408 50E8. Should I interpret that as C408 50E8 or 50E8 C408?
3. Whatever the answer is to question 2, do I add 31C to it?
4. And finally, the 4 byte location starting at C408 50E8 + 31C (or 50E8 C408 + 31C) should contain the address of my next pointer.
Obviously, it didn't work out, so I made a mistake somewhere. Where did I go wrong? And lastly,
5. When I see ?? in the CE Memory Viewer, what am I being told? All memory has a value, even if that value is meaningless or random. Seems like ?? is more like a "memory location doesn't exist" kind of value.
| Description: |
|
| Filesize: |
69.72 KB |
| Viewed: |
4891 Time(s) |
|
|
|
| Back to top |
|
 |
Dark Byte
Site Admin
 Reputation: 471
Joined: 09 May 2003
Posts: 25819
Location: The netherlands
|
| Posted: Sun Jan 04, 2015 5:31 am Post subject: |
|
|
1: no, you must start at" payday_win32_release.exe"+0058F474, which is the start address of "payday_win32_release.exe" with 0058f474 added to it
2: neither, it's e85008c4
3: yes
4: yes
5: ?? means that memory address does not exist
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
