Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Hi. Need help with pointers...

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine
View previous topic :: View next topic  
Author Message
tacofiend
Newbie cheater
Reputation: 0

Joined: 08 Apr 2016
Posts: 18

PostPosted: Fri Apr 08, 2016 8:22 am    Post subject: Hi. Need help with pointers... Reply with quote

Every guide is saying there should be offsets. I'm not getting any. If I search the "The value of the pointer needed to find this address is probably XXXXXXXX" value, it's not a green value. Clicking "Stop" also turns the values to "??"


sor.png
 Description:
 Filesize:  160.52 KB
 Viewed:  5771 Time(s)

sor.png


Back to top
View user's profile Send private message
ParkourPenguin
I post too much
Reputation: 152

Joined: 06 Jul 2014
Posts: 4695

PostPosted: Fri Apr 08, 2016 8:28 am    Post subject: Reply with quote

There is an offset in your case: 0. It's just not explicitly shown in the instruction since edx+0 is just edx.

Not finding a static pointer on the first level is pretty common. Multilevel pointers do exist. Try looking at step 8 of the CE Tutorial.

Alternatively, you may find the pointer scanner to be a better option.

_________________
I don't know where I'm going, but I'll figure it out when I get there.
Back to top
View user's profile Send private message
BringChaos
Advanced Cheater
Reputation: 5

Joined: 31 Jul 2011
Posts: 92

PostPosted: Fri Apr 08, 2016 8:37 am    Post subject: Reply with quote

Maybe if you are lucky the instruction setting the edx register can be easily found in the Show disassembler
Back to top
View user's profile Send private message
tacofiend
Newbie cheater
Reputation: 0

Joined: 08 Apr 2016
Posts: 18

PostPosted: Fri Apr 08, 2016 9:25 am    Post subject: Reply with quote

ParkourPenguin wrote:
Try looking at step 8 of the CE Tutorial.

When I get to this step:
"At this point, you need to do it all over again. Right click that, but this time click "Find out what accesses this address". Then click "Find out what accesses this pointer"."
Nothing shows up.

When I do try to search for the first value, it doesn't work as well as the tutorial. ALL the addresses change value when the value of what I'm searching for in game changes. I just pick the one that when edited, the new value is reflected in game. Then I search what writes to that address. Go in game and play a bit. Grab the value suggested in more information. Now at this point, if I click stop and then enter the suggested value into the search box with hex ticked, I get no hits. If I don't hit stop, I get 1 black address, which brings me to the below screenshot. I don't get anything when I try "what accesses this pointer".



sor2.png
 Description:
 Filesize:  129.61 KB
 Viewed:  5750 Time(s)

sor2.png


Back to top
View user's profile Send private message
ParkourPenguin
I post too much
Reputation: 152

Joined: 06 Jul 2014
Posts: 4695

PostPosted: Fri Apr 08, 2016 10:12 am    Post subject: Reply with quote

If the pointer you're talking about is 06E9EC48, that's not pointing to the address 004212C4 in that picture. That's pointing to itself.

Since "the value of the pointer needed to find this address is probably XXXXXXXX" isn't working out, you could either backtrace it to find out how it's getting that address (probably too advanced) or use the pointer scanner as I previously suggested.

_________________
I don't know where I'm going, but I'll figure it out when I get there.
Back to top
View user's profile Send private message
realrbn
Expert Cheater
Reputation: 3

Joined: 22 Jan 2016
Posts: 112

PostPosted: Fri Apr 08, 2016 10:13 am    Post subject: Reply with quote

Just use the Pointer Scanner man. Way easier.
_________________
My +14 Factorio Table: *Click*
Back to top
View user's profile Send private message
BringChaos
Advanced Cheater
Reputation: 5

Joined: 31 Jul 2011
Posts: 92

PostPosted: Fri Apr 08, 2016 10:13 am    Post subject: Reply with quote

Since this game is old you could try "Find out what accesses this address" on 004212C4. The game probably pulls the address every frame.
You could use a pointerscan but it could be a very large offset given the age.
Back to top
View user's profile Send private message
tacofiend
Newbie cheater
Reputation: 0

Joined: 08 Apr 2016
Posts: 18

PostPosted: Fri Apr 08, 2016 10:18 am    Post subject: Reply with quote

I tried pointer scanner too.

I ticked "Pointers must wend with specific offsets". Put in 0.

Max offset 512, Max level 4.

Got zero results.

Tried Max offset 1024 and Max offset 9999, Max level 5.

Also zero.
Back to top
View user's profile Send private message
BringChaos
Advanced Cheater
Reputation: 5

Joined: 31 Jul 2011
Posts: 92

PostPosted: Fri Apr 08, 2016 10:31 am    Post subject: Reply with quote

I don't want to give the final answer but I managed to find it two ways

Max 35000 offset max level 1 no specific offset (the offset turns out to be extremely large, and you would never try this on a modern game)

and by trying "Find out what accesses this address" on the 004212C4 address
and everything you needed was available to see in the More information tab
Back to top
View user's profile Send private message
tacofiend
Newbie cheater
Reputation: 0

Joined: 08 Apr 2016
Posts: 18

PostPosted: Fri Apr 08, 2016 11:00 am    Post subject: Reply with quote

BringChaos wrote:

Max 35000 offset max level 1 no specific offset

I managed to get it with these settings. Thanks!

BringChaos wrote:

and by trying "Find out what accesses this address" on the 004212C4 address
and everything you needed was available to see in the More information tab

This one I couldn't do.
Back to top
View user's profile Send private message
BringChaos
Advanced Cheater
Reputation: 5

Joined: 31 Jul 2011
Posts: 92

PostPosted: Fri Apr 08, 2016 11:16 am    Post subject: Reply with quote

I'll try to explain the second part for future reference.

so CE give us that the address is found via
Code:
mov eax,[eax+edx]

It says the pointer is "0000824C" but that's silly
what the asm is saying is that the pointer is eax with the offset edx

looking right above the highlighted line
Code:
mov eax,[libbgdrtm.globaldata]

shows that eax is a static address libbgdrtm.globaldata
and look at the register values at the bottom says edx = 0000824c
so you just put in the table a pointer base of "libbgdrtm.globaldata" with the offset 824c

with pointerscan I ended up with "libbgdrtm.dll"+00045040 with the offset 824c



sorimage.png
 Description:
 Filesize:  7.76 KB
 Viewed:  5686 Time(s)

sorimage.png


Back to top
View user's profile Send private message
tacofiend
Newbie cheater
Reputation: 0

Joined: 08 Apr 2016
Posts: 18

PostPosted: Fri Apr 08, 2016 8:16 pm    Post subject: Reply with quote

Thanks for the lesson Very Happy
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites