Pardon me for hijacking, try the following on MP:
1) set in-game MP alert to max
2) scan for unknown initial value in CE
3) start casting until in-game MP bar starts flashing i.e. MP is lower than 95%
4) pause and let MP recover
5) scan for increased value in CE
6) repeat step 4 and 5

The link is still alive.

Well if you already know how to add pointers and offsets to the cheat table, its much easier to get the AOBs. Just right click on the entry and CE will have option to scan access/write memory. True, there may be more than one returns, focus on static addys that are green in color. You can never be ...

Hies..how u find this code from CE?I'm interested to learnt.Thks for ur time. Erm I'm not sure where you are stuck, but generically: 1) I would assume you have already installed CE and knows how to inject HS Bypass. 2) The next step is to setup the base address and offsets to read the desired game ...

Its premature for me to hold any meaningful discussion since I'm new to all these interesting techniques.
Just started reviewing available materials, but are you referring to returning a NULL for OpenProcess?

==========
Edit: doesn't matter anymore, believe this route has been patched.

Yes Nerrazzuri, unfortunately so....But since there is a public semi bypass it didn't cause too much of a headache for me. Buys me some time to study detouring/trampoline.

So yes, my little C# project is working, relying on charbase offsets for potting but once HS updates it's a gonner.

Got too excited, wanted to test if the ReadProcessMemory is accessible before implementing drop down combobox for autopots

Well thanks to the available tutorials, i've created my own potting tool! Its not too hard and there are tonnes of guides out there on how to make one.

Just be patient.

Thanks Raiden for working out the pointers and Nerrazzuri releasing them to the community, its really helpful for a beginner like me!
Keeping my fingers crossed, hopefully there are no major patches or HS revision rolls

This one for the StateBase:

00BBE1A7 - 8B 0D E87C0801 - mov ecx,[01087CE8] : [64926A5C]
00BBE1AD - 85 C9 - test ecx,ecx
00BBE1AF - 74 07 - je 00BBE1B8
00BBE1B1 - 6A 00 - push 00


OOooooo i'm so excited!!