Ava hack tutorial(CE) With atleast Super Bullet

[gabrielcool1]

Hello, i just wanna see a tutorial of ava hax in CE for superbullet(atleast cuz as i see is the basic one) to understand correctly what to do in next hacks .

[Jabberwock]

Just use the pointer scanner of CE. Equip a shotgun, search in there for 8. Switch to secondary, then find out those who show now 1. Repeat until you have around 8 addresses. You can narrow them down to the true one too. Also the pointer should have 3 offsets, no more no less. If there are ones that repeat an address in the path then they are invalid. The pointer should point to zero in its path at cases when; you are out of game, your character died or you are watching another character.

[gabrielcool1]

Just use the pointer scanner of CE. Equip a shotgun, search in there for 8. Switch to secondary, then find out those who show now 1. Repeat until you have around 8 addresses. You can narrow them down to the true one too. Also the pointer should have 3 offsets, no more no less. If there are ones that repeat an address in the path then they are invalid. The pointer should point to zero in its path at cases when; you are out of game, your character died or you are watching another character.

Well. i maybe understand what u mean or atleast 60% of it but when i have trouble is when trying it so i wanna see a physical video of it so i can know whats the correct thing to do, as i dont own the english language(im at 85% of understand) i cant really do exactly what you mean but i will try anyways thanks.

[powerw6]

Just use the pointer scanner of CE. Equip a shotgun, search in there for 8. Switch to secondary, then find out those who show now 1. Repeat until you have around 8 addresses. You can narrow them down to the true one too. Also the pointer should have 3 offsets, no more no less. If there are ones that repeat an address in the path then they are invalid. The pointer should point to zero in its path at cases when; you are out of game, your character died or you are watching another character.

I get a single pointer, but changing it or freezing it won't do anything. It must be a read-only value? Did I get the wrong one? Thank you for helping out.

[R3DDOT]

Just use the pointer scanner of CE. Equip a shotgun, search in there for 8. Switch to secondary, then find out those who show now 1. Repeat until you have around 8 addresses. You can narrow them down to the true one too. Also the pointer should have 3 offsets, no more no less. If there are ones that repeat an address in the path then they are invalid. The pointer should point to zero in its path at cases when; you are out of game, your character died or you are watching another character.

Also, he could have search the Ammo(bytes) then do dissect data/structures and he could of easily gotten the address(this is how I got it).

[powerw6]

Also, he could have search the Ammo(bytes) then do dissect data/structures and he could of easily gotten the address(this is how I got it).

even better! Why didn't I think of that?

[Jabberwock]

[powerw6]

aha. Now I realize what you've meant. will try that. Thank you for the tip :P

[powerw6]

aha. Now I realize what you've meant. will try that. Thank you for the tip :P

In order to even use that pointer scan feature, I have to scan anything and add an address to the address list, correct? I have no other way of opening the pointer scan other than right-clicking a random address in the address list.
Once I am there, if I scan for 8 after grabbing a shotgun, t takes forever to scan all the values... If I try to stop the search process, CE freezes. I watched all the Fleeps CE tutorial and was able to follow it, but he never showed using the pointer scan to search for initial values (only addresses). I guess I need to learn more.

[powerw6]

aha. Now I realize what you've meant. will try that. Thank you for the tip :P

@RageSmirk
In order to even use that pointer scan feature, I have to scan anything and add an address to the address list, correct? I have no other way of opening the pointer scan other than right-clicking a random address in the address list.
Once I am there, if I scan for 8 after grabbing a shotgun, t takes forever to scan all the values... If I try to stop the search process, CE freezes. I watched all the Fleeps CE tutorial and was able to follow it, but he never showed using the pointer scan to search for initial values (only addresses). I guess I need to learn more.

[Jabberwock]

That's where you are wrong, you don't have to. In fact, if you use the normal method, you won't be able to find the correct address. This is because the address we want to search for has a value that doesn't change at all after the gun has spawned.

With this method CE will have to search more and take more time so it's better if you suspend the process during the search scan. Ctrl+P to get to the "pointer scan".
Also you can shorten the time by specifying the pointer path range which is obviously the range of the AVA.exe module(Ctrl+R, see picture).



As you can see the range is from 400000 to 1F90000. So:



Number of threads scanning should be your CPU's number of cores.

[powerw6]

That's where you are wrong, you don't have to. In fact, if you use the normal method, you won't be able to find the correct address. This is because the address we want to search for has a value that doesn't change at all after the gun has spawned.

With this method CE will have to search more and take more time so it's better if you suspend the process during the search scan. Ctrl+P to get to the "pointer scan".
Also you can shorten the time by specifying the pointer path range which is obviously the range of the AVA.exe module(Ctrl+R, see picture).



As you can see the range is from 400000 to 1F90000. So:



Number of threads scanning should be your CPU's number of cores.

Oh! Those tips are of value. Thank you. I don't understand why CE doesn't have actual buttons or a menu to access some of its functions. maybe it does and maybe it is just me? I didn't understand this part: has a value that doesn't change at all after the gun has spawned.

So you mean the bullet value of 8 won't change at all when you change to another weapon? Then how is the pointer scan finding it? I will try this when I get home Slowly learning...

[Frought]

That's where you are wrong, you don't have to. In fact, if you use the normal method, you won't be able to find the correct address. This is because the address we want to search for has a value that doesn't change at all after the gun has spawned.

With this method CE will have to search more and take more time so it's better if you suspend the process during the search scan. Ctrl+P to get to the "pointer scan".
Also you can shorten the time by specifying the pointer path range which is obviously the range of the AVA.exe module(Ctrl+R, see picture).



As you can see the range is from 400000 to 1F90000. So:



Number of threads scanning should be your CPU's number of cores.

Why all that when you can search for the ammo and then dissect ammo structure

[R3DDOT]

Why all that when you can search for the ammo and then dissect ammo structure

I called it first. Muhahahaha.... (xd)

Also, he could have search the Ammo(bytes) then do dissect data/structures and he could of easily gotten the address(this is how I got it).

[Jabberwock]

I don't understand why CE doesn't have actual buttons or a menu to access some of its functions. maybe it does and maybe it is just me?

It does have, in Memory View's menu...

So you mean the bullet value of 8 won't change at all when you change to another weapon?

When you pick a gun from the ground it deletes the current gun's class and creates another class for the picked up gun. So the addresses are changing. Which means you can't search for 'changed value'. 8 is for the number of bullets the shotgun fires at one shot.