[GUIDE]How to find pointers in CE6.1

[Misteraaargh]

I am using cheat engine 6.2. After putting a lot of effort into searching for the coords of ball in a game. ( a big offline game) I have managed to find the addresses. Each coords has about 9 addresses that show exactly the same value.

First , I dont know which is the correct one. Perhaps all of them are.

The real issue though is that the value immediately reverts back to what it was before changing.The new value just flickers and dissapears and the old value comes back. I've tried freezing it. Setting freeze time to 10ms. I have tried changing every single one of them

I understand that freeze is simply the automation of putting a certain value, so its not actually a real freeze.

I would really appreciate your guidance from here.

[IAmMama]

when i attach a debugger to it, anyway to solve the problem, or work around it? Cheat Engine 6.2 x64.

[bartbilf]

Originally Posted by IAmMama

when i attach a debugger to it, anyway to solve the problem, or work around it? Cheat Engine 6.2 x64.

Bypass, the target you try to attach the debugger to probably has a security against debugging.

Originally Posted by Misteraaargh

I am using cheat engine 6.2. After putting a lot of effort into searching for the coords of ball in a game. ( a big offline game) I have managed to find the addresses. Each coords has about 9 addresses that show exactly the same value.

First , I dont know which is the correct one. Perhaps all of them are.

The real issue though is that the value immediately reverts back to what it was before changing.The new value just flickers and dissapears and the old value comes back. I've tried freezing it. Setting freeze time to 10ms. I have tried changing every single one of them

I understand that freeze is simply the automation of putting a certain value, so its not actually a real freeze.

I would really appreciate your guidance from here.

As far as I know, there is only 1 correct address for each value. If you find 9 addresses with the same value, get them all, then change them one by one to find out which is the one you realy want.

The things that automaticly change back, are not values you can use to edit.

[masacist]

Hey guys,

I'm currently trying to change some stats on a football MMO, Football Superstars (soccer for you yanks), so far i can find the values i want to change, i can find the green pointers too (sometimes a lot more than i'd like 45+), however even the green base pointers still change upon restarting the game or after finishing a match.

Kind of stumped at this point, from reading here the green pointers are what i'm looking for yet they change when the client is restarted. Any suggestions please?

I'll try and add exactly what i'm doing here so you have more of an idea, if needed.

EDIT:

Heres exactly what i'm doing:

My boots give me +261 in 4 different areas (Tackling, Ball Control, Slide Tackling, Hardiness).
Stats Value = 261
Scanning for that in CE, make changes ingame to make sure its the right address and then adding the address to my list.
This gives me 4 results, like it should.



I now right click on Ball Control (32153020) and select "Find out what accesses this address".
It tells me that 32153020 is probably the address. Which is the address it gives above.



I take 32153020 and Hex search for this value and it returns:

Address:
0587F868

I open MHS 6.1 and do a pointer search for 0587F868.
It gives me 4 results:



I then add these pointers and the offsets (868) to CE.



Jobs a good one right?

Nope. When i restart the client, play a match or wait a while the addresses and values just turn into 0000000 and ??.

Example - this happened whilst i was typing all of this out, all of a sudden the addresses and values disappeared. Yet when i search for the stat of 261 it still returned the same addresses, only these addresses didn't lead to anything else.



Help? :/

[bartbilf]

@masacist
If you find a green address after scanning once: it is a static address, then you can take that out and it's fine like that.

If not, you'll need to note down every offset you used to find the new address up till the point where you find the green address.

[masacist]

I've taken the green static addresses out yet they change upon a client restart, thats my problem. Already done exactly what you've said as you can see above.

I've tried this multiple times now but it just keeps on resetting and changing to different address even though they're green :/

[Frejoh466]

I can't find the pointers. Take, let say CrosixTH.

I find the value, it's a double type, if I look what writes to, I find that it's ">> 7FEF406C22F - mov [r13+00],rax", "rax = 4079B00000000000" and that the value is probably "191A1990". I change to 4 bytes and check hex and try to find it, but it never finds it.

So then I tried the pointer scan. I unchecked the 4 top boxes and increased the level to 8 (tried with the default too). After a while I get roughly 10^9 hits with a 38gig file. I reload the game, find the value again and rescan the memory with the new address.

After I have done this some times I always end up with zero pointers. I have tried this 5 time but always the same at the end.

Anyone know what I'm doing thats wrong?

[valtaruz]

My question is, what do we do if we receive a negative offset when searching for a pointer when using "find what writes to this address" or "find what accesses this address". Example: I have the address 342DB8D8 (dynamic), I use "find what writes to this address" and receive: 003B8621 - 88 44 2F FF - mov [edi+ebp-01],al

EDI=00000002 and EBP is -01. (negative 1) I never have a problem when finding positive offsets, example: ESI+2. But when I get negative results, I get stuck and have no idea where to go from there. How to I go about finding the correct base address and offset when I am receiving 003B8621 - 88 44 2F FF - mov [edi+ebp-01],al?

[amakrkr]

Hello,

I am currently playing an MMO game and i am wondering how to find value of a special NPC (boss monsters) attack.
I have static pointer to an NPC that does that special attack but i have no clue where or how to start searching for *his* attacks.

So far i have tried by searching for damage adrees he does while he does a special attack but that have not pan out well ... am i going to right direction here or is there another way?

Thank you for your help!

[ilusionista]

after i baypass cabal,start CE find combo adress and when i try to atach debuger cabal ends(official EU gladiator update), so i cant find pointer in that way and every time i open cabal i need to find adress again ty for answer and help

[Squall15]

Originally Posted by ilusionista

after i baypass cabal,start CE find combo adress and when i try to atach debuger cabal ends(official EU gladiator update), so i cant find pointer in that way and every time i open cabal i need to find adress again ty for answer and help

Use DBVM debugger in CE. Before you start Cabal, start CE, then go Help->About and there you will see if your OS support DBVM, if it does, click on that green line, and the DBVM will be loaded, then start Cabal, and you will be able to attach the debuger without cabal crash.

[vasilis_daniel]

Tried to find base address in vega conflict but without any success. Tried on fleet health and looks there is no base address.