View previous topic :: View next topic |
Author |
Message |
meggachilly How do I cheat?
Reputation: 0
Joined: 22 Dec 2015 Posts: 2
|
Posted: Tue Dec 22, 2015 8:55 pm Post subject: Qbeh-1, finding pointer paths |
|
|
Ok, I speedrun a game called Qbeh-1, and I am trying to create an autosplit (This will control my timer for me, making it more accurate and easier for me and the other people that speedrun the game).
To create it I need the Pointer Path of an address that changes as I finish a level, I can find address's that do this, and I try to find the pointer paths but they never work after I reset the game.
When creating the autosplit you list all your variables and there pointer paths at the top , for example:
int level1LoadScreen : "Project64.exe", 0x107AD8, 0x3480;
I'd be really great if someone could help push me in the right direction and sorry if I posted this in the wrong area of the forum.
|
|
Back to top |
|
 |
Rydian Grandmaster Cheater Supreme
Reputation: 31
Joined: 17 Sep 2012 Posts: 1358
|
|
Back to top |
|
 |
ParkourPenguin I post too much
Reputation: 152
Joined: 06 Jul 2014 Posts: 4699
|
Posted: Tue Dec 22, 2015 10:09 pm Post subject: |
|
|
Yep. If you can't copy the address by making a code injection around some instruction that accesses the address, then the pointer scanner is your next best bet. Tips for using the pointer scanner:
- Select "No looping pointers". It'll slow down the scan a bit, but less disk space is used, and less invalid results are found.
- Make sure you're letting the stack addresses of the first few threads be handled as static. You can even try increasing the values on these a bit to possibly find more valid results.
- Increase the max offset value and max level if you aren't finding anything.
- The game might have marked some pointers as read-only. Uncheck "Don't include pointers with read-only nodes" if you want to, but it'll increase the amount of results found.
- If other pointers you've found have a common base address, selecting "Base address must be in specific range" will help narrow down your results by a lot, but you'll also miss it if it's not in that range.
- You might be able to use "First element of pointerstruct must point to module" depending on the game.
- The "Improve pointerscan with gathered heap data" option might help as well, depending on the game.
- If you're having trouble with diskspace, using "Pointers must end with specific offsets" will help, but you might miss valid results (see the topic Rydian linked to).
- If you're really having trouble with disk space, use max different offsets per node. You'll miss tons of pointer paths, though, so you'll need to be lucky.
_________________
I don't know where I'm going, but I'll figure it out when I get there. |
|
Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25788 Location: The netherlands
|
Posted: Wed Dec 23, 2015 2:42 am Post subject: |
|
|
pointerscans on an emulator will most likely not result in useful results though.
perhaps if you redirect ce's memory access api's to use the base address of the emulated memory as address 0 it might return less useless results but may take more wirth than you wish.
perhaps a groupscan can help finding it
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
 |
meggachilly How do I cheat?
Reputation: 0
Joined: 22 Dec 2015 Posts: 2
|
Posted: Wed Dec 23, 2015 7:06 pm Post subject: |
|
|
Rydian wrote: | Try using the scanner?
Not sure how well it'll work in an emulator though. |
Something that I think that isn't helping is that there are quite a few different addresses that change during the end level screen, so I find an address to use but when I restart to try a narrow my previous scan down, I have no idea what address is the one I used before. I tried looking to see what value it changed to before and after, and found one that changed to that after, but there were no matches when I rescanned.
|
|
Back to top |
|
 |
cloudzero How do I cheat?
Reputation: 0
Joined: 05 Dec 2010 Posts: 9 Location: US
|
Posted: Mon Mar 14, 2016 3:34 pm Post subject: |
|
|
Dark Byte wrote: |
perhaps if you redirect ce's memory access api's to use the base address of the emulated memory as address 0 it might return less useless results but may take more wirth than you wish. |
hwo do you do that?
|
|
Back to top |
|
 |
|