Cheat Engine

first100used · Newbie cheater Reputation: 0 Joined: 23 Mar 2012 Posts: 11

I have not been successful finding a pointer in Kingdoms of Amalur: Reckoning. I found the address of the value that I wish to modify, and searched for what writes to this address, and this is what came up:

Dark Byte · Posted: Sat Mar 24, 2012 3:06 pm Post subject:

Have you done step 8 of the tutorial? Multilevel pointers? Or did you cheat on that by using a youtube movie ?

Anyhow, find out what accesses all the 3 addresses and find the pointers to there. If nothing accesses an address, you can throw it away

And if all else fails: pointerscan or code injection

first100used · Newbie cheater Reputation: 0 Joined: 23 Mar 2012 Posts: 11

Dark Byte · Posted: Sat Mar 24, 2012 9:37 pm Post subject:

Sorry if I offended you. My comments are not meant to be negative, but to poll the experience/knowledge level and to make you think about the basis of the problem.

It's just that people often mention that they've done the tutorial, and later we find out that they only did step 1 to 6, and skipped the most important step 8, or just saw it on a youtube movie showing off the tutorial solution, or read the required offsets in someone's post and applied them, without ever learning why it works like that. Your explanation for example didn't mention anything about even trying to go for the second level pointer, so I asked if you did step 8, and if you understood it, or just bypassed the learning potential of that specific step. Based on that I would recommend redoing that step or explain it better

On this forum we don't often feed the direct answer, but try to make you solve them instead

first100used · Newbie cheater Reputation: 0 Joined: 23 Mar 2012 Posts: 11

Thanks for the apology; I appreciate it, and again, thanks for the advice.

first100used · Newbie cheater Reputation: 0 Joined: 23 Mar 2012 Posts: 11

I tried to find out what accesses each of the addresses, and nothing accesses any of them. If I use pointerscan, I get thousands of results. There is nothing in the tutorial about how to use this feature. Could you help me understand it better please? Also, How would I use code injection in this scenario? I don't fully understand the purpose of code injection. Would I be attempting to redirect where the pointer points when I load the game, or would I be attempting to do something else?

Dark Byte · Posted: Sun Mar 25, 2012 6:02 pm Post subject:

After the pointerscan is finished and you have billions of results(that's normal), restart the game, and then use the rescan option of the pointerscan and look for the new address. That will filter out the paths that are not working.

Repeat this a few times and you'll be left with a couple of thousand or so pointers that will be valid most of the time. (You can filter out those that go bad on occasion by using a delayed rescan)

Just pick one. (I recommend the one with the lest number of offsets and the smallest values)

If the pointerscan finds nothing then try a higher level, or a bigger structure size
---
As for code injection first do a "Find out what addresses this code accesses" on "mov [eax+0C],esi"
Then see if it accesses more than one (most likely), how often, and if there is a way to distinguish between the address you need and the ones you do not need
Then use the code injection template of the auto assembler and write a routine that saves the address of eax to a known location (e.g allocated yourself) and then use a pointer entry in the addresslist to reference it.

If you can't find out the difference, see what accesses the address instead of writes. Perhaps you have more luck with one of the readers (gui updates tend to access your variable only)

first100used · Newbie cheater Reputation: 0 Joined: 23 Mar 2012 Posts: 11

Dark Byte · Posted: Mon Mar 26, 2012 4:23 am Post subject:

first100used · Newbie cheater Reputation: 0 Joined: 23 Mar 2012 Posts: 11

Dark Byte · Posted: Tue Mar 27, 2012 5:05 pm Post subject:

after the script has been executed you can just give as address pointerlocation1
just like that, as a string

ce will interpret the string to an address (specifically, the address the script allocates)