Finding Pointers and Offsets

[PharmerPhale]

You seem to know stuff... maybe you can help us newbies how to find offsets? What tool do you use and how? If you want/have time .

As requested, here's a quick tutorial. :wave:
Finding Pointers and Offsets in Warhammer

Pointer and Offset Tutorial
(Note: You will need to have Warhammer and CheatEngine to follow this tutorial.)

This tutorial uses HP as an example so please understand that HP is one of the easiest to find.

[rockman319]

Thanks, I have not looked yet (working) but I wonder how do you find the player base ptr? (0xd3d4dc for 1.2.1)

Did the tutorial cover this too?

[PharmerPhale]

Thanks, I have not looked yet (working) but I wonder how do you find the player base ptr? (0xd3d4dc for 1.2.1)

Did the tutorial cover this too?

It did.

[HansW]

Thanks, I have not looked yet (working) but I wonder how do you find the player base ptr? (0xd3d4dc for 1.2.1)

Did the tutorial cover this too?

Not so easy just from memory locations. if you know the offset of lets say the HP from the player object start, you can calculate the memory position of the player object. Now you need to search for other memory locations that hold that address as a value. If theres only one , you may have found the address where the client stores the pointer.

A more professional way would be to dissasemble the client, find the function that creates the player object and get the player pointer location from there. You can use ollydbg for that ( a free debugger/disassembler). Best tool, in my opinion, is IDA Pro for that job, but its not free.

To not have to do that again , once a new client is out, you usually build signatures for the functions that access the pointers you need. With those signatures you can , in most cases, find the function and the pointer in a new client version. This is, in a way, what war ultimate.

In the long run, there is no way around learning assembly language, so if you really want to do it, start there. There as tons of asm tutorials over the net.

[PharmerPhale]

/agree with HansW

Also, IDA Pro has a freeware (non-commercial) version. I'm not certain the differences between this and what HansW has but it worked for me.

Hex-Rays IDA Page : IDA Pro Freeware Download Page

[Sychotix]

actually if you use the pointer scanner on CE or MHS, you do not have to learn ASM at all =P

BUT it is highly recommended since in order to get any farther with learning to edit memory, you will need that knowledge.