how to find GF pointers

[zhadow32]

everytime i try to get "what writes to it" the game crashes... any help?

[.nAno]

please give us more infos

solution: try a p-server :P

[zhadow32]

The game when ever I get the hp adress and try to see what writes to it just crashes , the game is grand fantasia. Trying to make a memory hp bot. Just have to get around his little problem

[.nAno]

are there any antihack systems?

[AngelOfYourNight]

Originally Posted by .nAno

are there any antihack systems?

There is an empty X-trap folder and nothing i know that the exe is encrypted and that it seems to have an anti-debugger to it..

I've tried many things to find pointers but alas failed..

[.nAno]

i think there are 2 possible reasons for the game to crash:

1.) a hidden anti hack system ( maybe some security precautions in Client itself )

2.) protected memory management (don't know too much about that )

[AngelOfYourNight]

Originally Posted by .nAno

i think there are 2 possible reasons for the game to crash:

1.) a hidden anti hack system ( maybe some security precautions in Client itself )

2.) protected memory management (don't know too much about that )

My main question is how do i go about finding more information about how it's protecting itself.

[.nAno]

http://de.wikipedia.org/wiki/Reengineering_(Software)
(i hope you are able to understand german )

i guess you mean reengineering, that means performing actions on a programm and analyzing the programm's reactions

[AngelOfYourNight]

Originally Posted by .nAno

http://de.wikipedia.org/wiki/Reengineering_(Software)
(i hope you are able to understand german )

i guess you mean reengineering, that means performing actions on a programm and analyzing the programm's reactions

No such webpage.

[.nAno]

ok, then you'll have to use google :P
(maybe you are able to find other people having the same problem as you do + some solutions or answers )

[FeonDust]

You must not have kernelmode debugger enabled, the game crashes if you use CE's debugger.

[zhadow32]

Tried changing debuggers but still same problem...

[FeonDust]

Are you using a x86 or x64 OS? As far as I know for x64 systems you cannot use the kernelmode debugger.

That necessarily doesn't mean you'll never find your pointer. Another option is that you can use "Pointerscan for this address."
For CE 5.5 select "Old Scanner Method" (don't see this option in 5.6), this will make the scan take a hell of a lot shorter time.
You can change the number of threads to about 10, more if you have a good processor.
Change "Max level" to 2 or 3, then start the scan.
After it finds about 10 or so you can stop the scan and add them all to your cheat table.
Reload the game to see if any are static pointers, and you're done.

[zhadow32]

Thanx. I'll give it a try 2morow.

[blackmorpheus]

Or just use ollydbg and place some hardware breakpoints..