Cheat Engine

Synthy · How do I cheat? Reputation: 0 Joined: 18 Dec 2016 Posts: 4

Trying to find pointers.

Found location of target value address, 4 bytes, value 500. Properly changes value when game changes value.

Use windows debugger --> "I couldn't attach the debugger to this process! You could try to open the process using the processpicker..."

Use VEH debugger --> "find out what writes to this", find pointer is edx+12C. search for edx, about 12 addresses pop up so it's difficult to know which one works for sure. I go through each one by one as the pointer+12C until the proper 500 value shows up. So now we have 1st pointer successfully found.

Then I add that pointer address and "find out what accesses this address", game crashes every time when value changes.

Use kernelmode debugger --> right click cheat engine logo, "Your system supports DBVM", right click that, click CPU 0 "Loaded:10". Go to address, "find out what writes to this address", even when value changes nothing will pop up, then after a few value changes eventually the game will crash.

Are there any other settings within my windows 10 64 bit I can try to prevent the crashing? VEH debugger gets me to the 1st pointer fine every time, but then can't find 2nd pointer before crashing. If I can't do anything else, I have windows 7 installed on my PC, could try that? Can't remember if it's 32 bit or 64 bit but I know you've said 32 bit is preferred in the past.

edit: ps, glad to hear you're still around Dark Byte. I came here for help all the way in 2005 and can't remember my username but you helped me back then as well. Much love.

Dark Byte · Posted: Sun Dec 18, 2016 2:16 pm Post subject:

try kernel debug with global debug enabled.

and if all else fails, pointermaps and pointerscans

Synthy · How do I cheat? Reputation: 0 Joined: 18 Dec 2016 Posts: 4

Dark Byte · Posted: Sun Dec 18, 2016 5:35 pm Post subject:

to prevent the bsod first launch DBVM on ALL cpu's, then close CE, run the kernelmodule unloader, and then start CE again

As for pointerscan, set a high level and high structsize and use "max different offsets per node" and set it to 2 or 3

the scan won't take that long and will still give decent paths

Synthy · How do I cheat? Reputation: 0 Joined: 18 Dec 2016 Posts: 4

Great! Thanks so much.

Synthy · How do I cheat? Reputation: 0 Joined: 18 Dec 2016 Posts: 4

Dark Byte · Posted: Mon Dec 19, 2016 2:56 am Post subject:

try
max offsets per node 2 or 3
structsize of 1048575
level of 5 or 6

then if nothing found try level 7, 8,... till something is found

if after a few rescans 0 are found, try max offsets 4 (and perhaps a smaller offset)

and tell it the pointer has to end with 12c