Zombies Have Powerup Issue

[seaplusplus]

Okay, I'm trying to find the pointer to if you have the instant kill powerup, or not. I found that when you don't have it, the value is 0, and when you have it, the value is 1. My problem is, I can't find a static pointer! I get some at first, but once I get really close to finding it, I don't have any static pointers on my list! anyone have any idea why?

[lolbie]

try to find a pointer



or else you can't

[seaplusplus]

try to find a pointer



or else you can't

im searching for pointers, i just made a mistake in the thread. fixed the post

[lolbie]

lol you just changed addresses to pointers?
dude....

 ---------To find a pointer: 
Say you got an adress, doesn't matter what, but let's say it's for health. Right click it and select "find out what writes to this pointer". Get hit. 
You'll have some code, maybe more pieces... they could be something like this: 
Code:
dec [eax+65] 
mov [eci+65],300 
inc [eax+65]


So, clearly, there is something with the 65. It is the offset. Now, if you double click one of those lines, a window will pop-up. It will tell you the values of eax,eci and all the others. Find the one that you need (for the first it would be eax, the second eci and third eax again). Now, start a new scan, 4 bytes and tick the box HEX. Scan for the value that we just looked up. 

Worst case scenario: you get thousends of adresses. 
Best: you get one 
If you get one adress it's simple... If you got more it gets a bit harder. Anyway, look for green adresses in the search list. They are static (meaning that it doesn't change). If there are no greens, than just continue with a black one. 

Click the button "add manualy". Check the box pointer and enter the adress we just found. In offset, enter 65. Done. 

Now, if you didn't have a green adress, repeat for the pointer from the beginning. But make sure you find out what writes to the pointer, not the value pointed to. 


-------- 
There is another way... Let's say you found this: 
mov [eax+65],300 
And you can't seem to find a pointer. Click "show assembler". The top most line is the code we found. Scroll up a bit, and you might find a line writing to eax.. for example, you might see this: 
Code:
mov eax,0026F286 
mov [eax+65],300

Now you need to know what [] is for. When something is between [], it meens it is treated as a pointer. 
so 
Code:
mov eax,300      //moves 300 into eax 
mov[eax],300             //moves 300 into the adress stored in eax.


Back to the example. eax now holds 0026F286. It might be an adress (and it is in this case) 
Now, "mov [eax],300" will write to the adress stored in eax, wich we just saw. So, our pointer has to be 0026F286 with offset 65. 

-------------------- 
it is also possible to treat adresses as pointers, instead of registers. So 

mov [0026F286],300 

is the same as 

mov eax,0026F286 
mov [eax],300 

The problem with this way is that you can't use an offset.. unles "mov [0026F286]+65,300" is allowed. But I don't know that for sure...

yes c/p
credits: Glest

[seaplusplus]

lol you just changed addresses to pointers?
dude....

yeah, i just told you i was gonna...

and i know how to find a pointer... im not one of those stupid kids who think they can code...

[lolbie]

yeah, i just told you i was gonna...

and i know how to find a pointer... im not one of those stupid kids who think they can code...

look at that code i have in my earlier post

[seaplusplus]

look at that code i have in my earlier post

i don't have the address to instant kill...

[lolbie]

i don't have the address to instant kill...

try to look for damage of the gun
and i am gone 3k ban

[seaplusplus]

try to look for damage of the gun
and i am gone 3k ban

what do you mean?

[Skyline.]

what do you mean?

i think he means look for address for when shot being the damage of the gun 10/20/30 and so on.

[lolbie1]

or get 2 weapons with different damage than search for unknown value and switch between these too and search the whole time for lower and higher

btw this is just a way that shoots in my head i don't know if it's working

[pyton789]

Dude I don't think it is possible to get pointers to that kind of stuff.
It is the same thing with the round address. You kind find it, change it, but it isn't static and there are no pointers for it. And if you try to change the stuff that changes the round the game will crash.

It is possible to find the time you have a powerup and freeze it but it is almost impossible to find the correct address before the timer runs out.

An easier way to get the powerups would be to replicate what it does.
For example my trainer and craig87s have 1 shot 1 kill.
It is one of the hardest functions I ever made.
It actually inst very advanced but it is so freaking hard to find an address for a zombies hp.

And btw the stuff about finding a weapons damage on an address isn't possible.

[seaplusplus]

An easier way to get the powerups would be to replicate what it does.
For example my trainer and craig87s have 1 shot 1 kill.
It is one of the hardest functions I ever made.
It actually inst very advanced but it is so freaking hard to find an address for a zombies hp.

I was looking for that... I'm not gonna be a noob and ask for it. But is it true that zombies start at 100 hp during the first round and then go up 100 hp each round?

[pyton789]

I was looking for that... I'm not gonna be a noob and ask for it. But is it true that zombies start at 100 hp during the first round and then go up 100 hp each round?

Nope. They start at some random number and then their health increases randomly. I think. I didnt try to calculate how much their health increases per round.

[seaplusplus]

Nope. They start at some random number and then their health increases randomly. I think. I didnt try to calculate how much their health increases per round.

okay, thanks man. i could just use godmode, and the dynamic insta kill pointer, and survive 100s of rounds looking for unknown value... xD