View previous topic :: View next topic |
Author |
Message |
tacofiend Newbie cheater
Reputation: 0
Joined: 08 Apr 2016 Posts: 18
|
Posted: Fri Apr 08, 2016 8:22 am Post subject: Hi. Need help with pointers... |
|
|
Every guide is saying there should be offsets. I'm not getting any. If I search the "The value of the pointer needed to find this address is probably XXXXXXXX" value, it's not a green value. Clicking "Stop" also turns the values to "??"
Description: |
|
Filesize: |
160.52 KB |
Viewed: |
5771 Time(s) |

|
|
|
Back to top |
|
 |
ParkourPenguin I post too much
Reputation: 152
Joined: 06 Jul 2014 Posts: 4695
|
Posted: Fri Apr 08, 2016 8:28 am Post subject: |
|
|
There is an offset in your case: 0. It's just not explicitly shown in the instruction since edx+0 is just edx.
Not finding a static pointer on the first level is pretty common. Multilevel pointers do exist. Try looking at step 8 of the CE Tutorial.
Alternatively, you may find the pointer scanner to be a better option.
_________________
I don't know where I'm going, but I'll figure it out when I get there. |
|
Back to top |
|
 |
BringChaos Advanced Cheater
Reputation: 5
Joined: 31 Jul 2011 Posts: 92
|
Posted: Fri Apr 08, 2016 8:37 am Post subject: |
|
|
Maybe if you are lucky the instruction setting the edx register can be easily found in the Show disassembler
|
|
Back to top |
|
 |
tacofiend Newbie cheater
Reputation: 0
Joined: 08 Apr 2016 Posts: 18
|
Posted: Fri Apr 08, 2016 9:25 am Post subject: |
|
|
ParkourPenguin wrote: | Try looking at step 8 of the CE Tutorial.
|
When I get to this step:
"At this point, you need to do it all over again. Right click that, but this time click "Find out what accesses this address". Then click "Find out what accesses this pointer"."
Nothing shows up.
When I do try to search for the first value, it doesn't work as well as the tutorial. ALL the addresses change value when the value of what I'm searching for in game changes. I just pick the one that when edited, the new value is reflected in game. Then I search what writes to that address. Go in game and play a bit. Grab the value suggested in more information. Now at this point, if I click stop and then enter the suggested value into the search box with hex ticked, I get no hits. If I don't hit stop, I get 1 black address, which brings me to the below screenshot. I don't get anything when I try "what accesses this pointer".
Description: |
|
Filesize: |
129.61 KB |
Viewed: |
5750 Time(s) |

|
|
|
Back to top |
|
 |
ParkourPenguin I post too much
Reputation: 152
Joined: 06 Jul 2014 Posts: 4695
|
Posted: Fri Apr 08, 2016 10:12 am Post subject: |
|
|
If the pointer you're talking about is 06E9EC48, that's not pointing to the address 004212C4 in that picture. That's pointing to itself.
Since "the value of the pointer needed to find this address is probably XXXXXXXX" isn't working out, you could either backtrace it to find out how it's getting that address (probably too advanced) or use the pointer scanner as I previously suggested.
_________________
I don't know where I'm going, but I'll figure it out when I get there. |
|
Back to top |
|
 |
realrbn Expert Cheater
Reputation: 3
Joined: 22 Jan 2016 Posts: 112
|
Posted: Fri Apr 08, 2016 10:13 am Post subject: |
|
|
Just use the Pointer Scanner man. Way easier.
_________________
|
|
Back to top |
|
 |
BringChaos Advanced Cheater
Reputation: 5
Joined: 31 Jul 2011 Posts: 92
|
Posted: Fri Apr 08, 2016 10:13 am Post subject: |
|
|
Since this game is old you could try "Find out what accesses this address" on 004212C4. The game probably pulls the address every frame.
You could use a pointerscan but it could be a very large offset given the age.
|
|
Back to top |
|
 |
tacofiend Newbie cheater
Reputation: 0
Joined: 08 Apr 2016 Posts: 18
|
Posted: Fri Apr 08, 2016 10:18 am Post subject: |
|
|
I tried pointer scanner too.
I ticked "Pointers must wend with specific offsets". Put in 0.
Max offset 512, Max level 4.
Got zero results.
Tried Max offset 1024 and Max offset 9999, Max level 5.
Also zero.
|
|
Back to top |
|
 |
BringChaos Advanced Cheater
Reputation: 5
Joined: 31 Jul 2011 Posts: 92
|
Posted: Fri Apr 08, 2016 10:31 am Post subject: |
|
|
I don't want to give the final answer but I managed to find it two ways
Max 35000 offset max level 1 no specific offset (the offset turns out to be extremely large, and you would never try this on a modern game)
and by trying "Find out what accesses this address" on the 004212C4 address
and everything you needed was available to see in the More information tab
|
|
Back to top |
|
 |
tacofiend Newbie cheater
Reputation: 0
Joined: 08 Apr 2016 Posts: 18
|
Posted: Fri Apr 08, 2016 11:00 am Post subject: |
|
|
BringChaos wrote: |
Max 35000 offset max level 1 no specific offset
|
I managed to get it with these settings. Thanks!
BringChaos wrote: |
and by trying "Find out what accesses this address" on the 004212C4 address
and everything you needed was available to see in the More information tab
|
This one I couldn't do.
|
|
Back to top |
|
 |
BringChaos Advanced Cheater
Reputation: 5
Joined: 31 Jul 2011 Posts: 92
|
Posted: Fri Apr 08, 2016 11:16 am Post subject: |
|
|
I'll try to explain the second part for future reference.
so CE give us that the address is found via
It says the pointer is "0000824C" but that's silly
what the asm is saying is that the pointer is eax with the offset edx
looking right above the highlighted line
Code: | mov eax,[libbgdrtm.globaldata] |
shows that eax is a static address libbgdrtm.globaldata
and look at the register values at the bottom says edx = 0000824c
so you just put in the table a pointer base of "libbgdrtm.globaldata" with the offset 824c
with pointerscan I ended up with "libbgdrtm.dll"+00045040 with the offset 824c
Description: |
|
Filesize: |
7.76 KB |
Viewed: |
5686 Time(s) |

|
|
|
Back to top |
|
 |
tacofiend Newbie cheater
Reputation: 0
Joined: 08 Apr 2016 Posts: 18
|
Posted: Fri Apr 08, 2016 8:16 pm Post subject: |
|
|
Thanks for the lesson
|
|
Back to top |
|
 |
|