| View previous topic :: View next topic |
| Author |
Message |
jim2point0 Master Cheater
Reputation: 4
Joined: 05 Oct 2012 Posts: 336
|
Posted: Mon Feb 18, 2013 2:50 pm Post subject: Question about Crysis 3 \ Pointer Scanner |
|
|
Hello,
So I'm checking out Crysis 3. You can unlock your Origin copy in the States if you connect via a VPN - just to get that out of the way...
Now I'm trying to get my location like I do in other games. Change my Y coordinate and rescan. Keep doing that until I have a small list of values. Narrow down those values by freezing results until I find the right one.
So I pointer scan for that address like I normally do, but in this game I ended up with about 27 million results! So I did what I normally do. Restarted the game. Found the Y coordinate address again, and rescanned my previous scan. I've repeated this several times, and I still have 6 million results. Normally I'd be down to about 200 by now. The worst part is, my last rescan only knocked off about 200,000 results.
When I look at my pointer scanner window, I see the addresses are constantly changing and jumping all over the place. So even if I shove one of those into my table, it changes on me pretty fast. How can I get rid of the pointers that keep changing?
Am I just going about this in the worst way possible? Is there a faster way to find a simple pointer for my Y coordinate?
|
|
| Back to top |
|
 |
++METHOS I post too much
Reputation: 92
Joined: 29 Oct 2010 Posts: 4197
|
Posted: Mon Feb 18, 2013 3:22 pm Post subject: |
|
|
I have no experience with this game, specifically.
Sometimes, you will never get down to 200 or so results. Some games have thousands of pointers. Oftentimes, many of the pointers will always work. You just have to test them out.
If the pointers are constantly changing, sometimes you can just keep doing a rescan to filter many of them out (rescan for pointer address without restarting the game). Doing so may yield zero results (depending on game), so take note should you decide to overwrite the existing scan results.
|
|
| Back to top |
|
 |
mgr.inz.Player I post too much
Reputation: 222
Joined: 07 Nov 2008 Posts: 4438 Location: W kraju nad Wisla. UTC+01:00
|
Posted: Mon Feb 18, 2013 6:27 pm Post subject: |
|
|
Start with level 2 or level 3. Sometimes it is enough.
"Address must be 32bit aligned" - checked
"only find path with static address" - checked
"don't include pointers with read-only nodes" - checked
You can try CheatEngine pointerscan options:
- "first element of pointerstruct must point to module (e.g. vtable)"
- "no looping pointers"
(custom CheatEngine build, source form current SVN revision)
_________________
|
|
| Back to top |
|
 |
TsTg Master Cheater
Reputation: 5
Joined: 12 Dec 2012 Posts: 340 Location: Somewhere....
|
Posted: Mon Feb 18, 2013 8:17 pm Post subject: |
|
|
| Does the game changes it's image base every time it's restarted ?!
|
|
| Back to top |
|
 |
jim2point0 Master Cheater
Reputation: 4
Joined: 05 Oct 2012 Posts: 336
|
Posted: Mon Feb 18, 2013 10:28 pm Post subject: |
|
|
| mgr.inz.Player wrote: |
You can try CheatEngine pointerscan options:
- "first element of pointerstruct must point to module (e.g. vtable)"
- "no looping pointers"
(custom CheatEngine build, source form current SVN revision) |
The first 3 there are checked, but these 2 options I don't have.
THe problem I was having is that my pointers were changing at a certain part of the game and I thought I just needed to narrow them down. I played about 10 minutes more, and they all went back to working again.
I had this same problem with Rage. I guess I can just deal with it until someone makes a proper table
|
|
| Back to top |
|
 |
mgr.inz.Player I post too much
Reputation: 222
Joined: 07 Nov 2008 Posts: 4438 Location: W kraju nad Wisla. UTC+01:00
|
Posted: Tue Feb 19, 2013 9:18 am Post subject: |
|
|
The best thing you can do:
1) Prepare two folders:
- first with name "Crysis3 pointers scan", better on NTFS partition, with folder compression (folder properies, attributes: advanced, "compress content ....")
- second with name "Crysis3 pointers rescan"
2) Find address. Do pointerscan max level5, size 2048 and those three options checked. Save results in "Crysis3 pointers scan". Do not interrupt pointerscan.
3) Now reboot your windows, start game, create another profile, find address
4) open previously saved pointers (ctrl+m, ctrl+p, ctrl+o)
5) press ctrl+r, type new address, save rescanned pointers as "rescan 1" (2,3,4,...) inside "Crysis3 pointers rescan"
6) repeat 3,4,5 few times. Last time, save rescanned pointers as "rescan jim2point0" inside "Crysis3 pointers rescan"
7) now remove all files from "Crysis3 pointers rescan". Leave only files with name "rescan jim2point0" .ptr .ptr.0 .ptr.1 .ptr.2 .ptr.3
8) use 7zip or WinRAR, and compress whole "Crysis3 pointers rescan". Send created archive to mediafire or zippyshare, give link
9) then wait. Maybe someone will download this archive and make few another rescans. And send you back .ptr .ptr.0 .ptr.1 ..... files.
_________________
|
|
| Back to top |
|
 |
Screitor Cheater
Reputation: 1
Joined: 26 Nov 2012 Posts: 33 Location: Venezuela
|
|
| Back to top |
|
 |
++METHOS I post too much
Reputation: 92
Joined: 29 Oct 2010 Posts: 4197
|
Posted: Tue Feb 19, 2013 2:34 pm Post subject: |
|
|
| I see someone does not have a sense of humor. Anyway, if my post hadn't been deleted, you could see that using code injection could circumvent this problem completely.
|
|
| Back to top |
|
 |
mgr.inz.Player I post too much
Reputation: 222
Joined: 07 Nov 2008 Posts: 4438 Location: W kraju nad Wisla. UTC+01:00
|
Posted: Tue Feb 19, 2013 6:07 pm Post subject: |
|
|
| Screitor wrote: | | Are you mad (...) they may weight too much |
No, you are mad. In case you didn't know - ptr files are highly compressible. Read what OP wrote. He has 200,000 results only. Just try compress ptr files with 200,000 results. Archive created with 7zip isn't that big. Second fact - not all games run under sandboxie properly. Third fact, I did whole procedure in the past and I succeed. Fourth fact, the best results (less pointers after rescan) are achieved only this way - different machine, different OS, etc.
Example: ptr files with 4'670'400 (about 20x more than OP has) results weight only 142MB. Compressed with 7zip, compression took 1 minute, whole package weight is only 640KB.
@GNIREENIGNE, yes. Code injection would be the easiest thing. Or not, if game has protections or unofficial game exe file has some anti-debug codes. You know, some cracks are protected.
_________________
|
|
| Back to top |
|
 |
++METHOS I post too much
Reputation: 92
Joined: 29 Oct 2010 Posts: 4197
|
Posted: Tue Feb 19, 2013 6:51 pm Post subject: |
|
|
Of course. And protections can be circumvented as well.
|
|
| Back to top |
|
 |
mgr.inz.Player I post too much
Reputation: 222
Joined: 07 Nov 2008 Posts: 4438 Location: W kraju nad Wisla. UTC+01:00
|
Posted: Wed Feb 20, 2013 2:07 pm Post subject: |
|
|
@jim2point0, compress those ptr files from last rescan, upload archive, post link (Single player cheat request).
Also give some informations: game version, update number, original exe or cracked.
Like this:
topic subject: krajziz3 pointers rescan needed
post content:
Game Name: krajziz3
Game Version: v1.00
Other Info: Here you may place additional info which may be relevent to your request. For example the game may need to be installed/setup a certain way, or you may wish to state that you are using a specific No-disc fix or Mini-image.
{link to uploaded archive}
Then wait. I'm sure somebody will help you. Good luck.
_________________
|
|
| Back to top |
|
 |
|