Cheat Engine

[iLogic]

I'm currently attempting to code a dll-trainer however I'm having some problem with the pointers.

The pointer that i have looks like this:
DWORD PointerBase = 0x0296F2CC;
DWORD PointerOffset[5] = { 0x10, 0x2C, 0x2C, 0x24, 0x94 };

If I were to use that pointer in C#, it works perfectly.
Same with in CE.

But if I inject it with a dll, it just refuses to work.


One of the ways I tested is this

[Dark Byte]

let's see,

First you check if the 4/8 byte value at the location of ulBase is readable
Then you typecast the ulBase which is a ULONG_PTR* to a ULONG_PTR* and dereference that. So you get a ULONG_PTR that holds the 4/8 byte value ulBase was pointing at
Then to that integer type you add the value provided in nOffset to get an integer that holds the final address
And then convert that integer to a typeless pointer and pass it on to IsBadReadPtr

so far so good (Quite a bit of typecasting that wasn't necessary though, and really, there's nothing wrong with using local variables)

Then the same as above, but when you get to the integer that represents the address you convert it to a pointer of the ULONG_PTR type (pointer to a 4/8 byte integer)
And then you dereference that (so you get the value the pointer was pointing to, e.g 100 for health)

I suggest you don't dereference that and just return the address

e.g:
return *ulBase+nOffset;

[iLogic]

Thank you for your quick answer, I really appreciate that

So I changed the ReadPointer function into this now:

[Dark Byte]

That depends. is the original pointer a modulename+offset notation, or just the hexadecimal address?

Anyhow, use OutputDebugString and output the results of every call to ReadPointer and see where it goes wrong

[iLogic]

What I did to narrow it down was this:

[SteveAndrew]

[iLogic]

Ah, you posted while I were still in the "edit post" window ^^
I were confirming that it really didn't work before I pressed submit

But yeah, as I added to my last post

[SteveAndrew]

[iLogic]

Awesome! It worked!
Well, at least as far as reading the pointers

I tried to only create "Pointer" pointers and now it's reading my pointer correctly

Though it wouldn't write to it but that might be because of something else..
The address that it points to is a float value, I figured I could perhaps write to it in hex format but that might not work?

The value of it is:
in int: 1065353216
in hex: 0x3F800000
in float: 1

What I tried to do was:
TestPtr->WriteValue32(0x3F991444);

Edit:
Yep, that was it. I added this function:

[SteveAndrew]

Well glad you got it working using the pointer class directly! And no problem! And yep I added the float and double methods the same exact way, so you did it right!

I still haven't solved the string problem yet though...


Here's one thing though, I'm not 100% sure it will work all the time though...

Think about this for a second, this line in the 'GetDynamicAddress()' private method:

[iLogic]

Haha, that's great

Also, I don't really mind only using the "Pointer" class, even though PtrHelper was nice and all. It is still making my life a lot easier than it was earlier

[SteveAndrew]

Alright I must've been tired or something as it was a tiny simple mistake...

I checked and strlen inside the class method is actually getting the right length of the string in question... I just forgot that strlen doesn't count the null byte at the end of the c style string... so you change 4 lines, where strlen is used, and then it wont copy any extra garbage characters into the string...

Change: