Cheat Engine

[Unknow_Hero]

Why is a CE's pointer system adding that FFFE0 in front of a first address result?

I was doing the first step to find the static address.

Only the FFFE0 at the beggining of the result doesn't match. The last 11 bytes of the address match perfectly.

[LeFiXER]

Just for clarification, a byte is represented by two hexadecimal characters. You've set the type to 4-bytes which is at most 8 hexadecimal characters e.g.: 00000000 through to FFFFFFFF. 4-bytes are 32-bit values and 8-bytes are 64-bit values. Change the type from 4-bytes to 8-bytes and see if that remedies your problem.

[ParkourPenguin]

That's almost certainly not CE's fault. The game probably packs data in with the pointers.

e.g. for Java, use -XX:-UseCompressedOops

PS: a byte is 2 hexadecimal characters, not 1

[Unknow_Hero]

Thanks for pointing out my mistake and clarifying about 4-bytes and 8-bytes in hex value LeFiXER and Parkour Penguin.


That 1F9B3C91770 used to make a pointer is the correct address I found using the value in RCX of the code from a instruction that access and write to the Target.
(Since I can't link URL yet, look at the image 'Info of instruction' to see what I'm saying.)

Serching for 1F9B3CA9EB0 address resulted on 1F9B3C91770.


But in second case if you put the FFFE in and make the RCX value with 8-bytes (FFFE02878A442B68) the result still the same.
(IMAGE: Table of second case)


I know it's a simple thing for you, but not for those who are learning

I need to know why the addresses don't show up as 8-bytes hex value in the search results like the pointer points to.
Looking in the memory they are 2 different places.

[Dark Byte]

if you're doing this to learn, then the target you've picked is not a good target, as this program prefers to optimizes over memory usage instead of speed.
(it's java or another emulator isn't it ?)


anyhow, execute lua command

[Unknow_Hero]