Cheat Engine

HeyItsLars · How do I cheat? Reputation: 0 Joined: 16 Feb 2016 Posts: 4

So, I found the dynamic value I'm looking for, in this case, 3EF5B352, and I need to find out what writes to it so I can get the pointer. After modifying the value a little bit, this is what I have.

14027A063 - 44 8B B1 C0000000 - mov r14d,[rcx+000000C0]
140294901 - 48 63 87 C0000000 - movsxd rax,dword ptr [rdi+000000C0]
140294AE9 - 8B 87 C0000000 - mov eax,[rdi+000000C0]
140294AF9 - 29 87 C0000000 - sub [rdi+000000C0],eax
140294B13 - 39 B7 C0000000 - cmp [rdi+000000C0],esi
140294B2B - 8B 87 C0000000 - mov eax,[rdi+000000C0]
140294B38 - 89 8F C0000000 - mov [rdi+000000C0],ecx
14027A092 - 44 2B B1 C0000000 - sub r14d,[rcx+000000C0]

I need to figure out what exactly it's supposed to be added to so I can find the pointer but it shows hex instead. Is this just a setting I don't have that's correct?

ParkourPenguin · Posted: Wed Feb 17, 2016 1:01 am Post subject:

A hexadecimal number is still a number- you can find out what it's being added to by subtracting the offset (C0) from your address (3EF5B352). Using the windows calculator in the "Programmer" view (Alt + 3), this results in 3EF5B292. So search for that 8 byte value with the "hex" box checked to get some probable pointers to your address.

PS: You should probably use the pointer scanner instead. It's usually easier, faster, and more valid compared to doing it manually.

HeyItsLars · How do I cheat? Reputation: 0 Joined: 16 Feb 2016 Posts: 4

ParkourPenguin · Posted: Wed Feb 17, 2016 1:36 am Post subject:

Try increasing the max offset and/or max level. Leave the other settings at their default values.

Some games like flash games just don't have any good static pointers, in which case you could hook one of those instructions and copy the address to a symbol that way. Just make sure you choose an instruction that's run somewhat often and only accesses that address.

For more information on both that and the pointer scanner:
http://forum.cheatengine.org/viewtopic.php?t=572465

HeyItsLars · How do I cheat? Reputation: 0 Joined: 16 Feb 2016 Posts: 4

Rydian · Posted: Wed Feb 17, 2016 4:28 am Post subject:

Is it's a new game, some games don't have the old static pointers anymore, especially interpreted ones. The scanner can find some nice pathways, but if stuff is being generated at launch you may be out of luck due to various differences in the environment each time.

Got any more info?

Dark Byte · Posted: Wed Feb 17, 2016 4:41 am Post subject:

an offset of c0 that leads to 3EF5B352
that means it's an unalligned pointer, so when using the pointerscanner, tell it to include unalligned pointers. (and don't use compressex pointers, or manually deal with that)

alternatively, it's not a 2 byte value and you're looking for the wrong address.
is this an emulator?

HeyItsLars · How do I cheat? Reputation: 0 Joined: 16 Feb 2016 Posts: 4