Cheat Engine

[Deathwinds]

Hi Guys,

I am new here, and I passed the tutorial for cheat engine minutes ago. Yay!.

Just a few questions though, in regards to the auto assemble,
I am playing with the code injection for step 2, in which I want to increase the value everytime i click hit me.

I found the address, and finds where the address links to ,
when I am at auto assemble going through code injection,
The origincal code says :
sub [ebx+00000314],eax

I believe that sub is subtract. add is additional

From what I've learn from the tutorial, usually to add 2 points after clicking hit me , what the changes are is
add[ebx+00000314], 2

But in this "task" it's not working, what does the eax mean?

Moreover, is there a link where i could understand these (shortforms) mean? I do not know what are the terms use for the (shortforms) therefore the search button is nt much of a help

Thanks in advance people!

[ChainRule]

In order to understand what is EAX, you will have to learn IA32 or Assembly, which is a more readable version of IA32 or x86. It is actually what the computer speaks at the almost most basic level. Before the CPU can actually process anything, it needs to store the instructions some where. The place where the CPU stores instructions are called Registers. Here is a list of Registers:

AX, BX, CX, DX, SI, DI, SP, BP, IP

They are only 16-bit in length/size.

As computer technology advances, 32-bit registers were introduced with E (extended) in front, hence:

EAX, EBX, ECX, EDX, ESI, EDI, ESP, EBP, EIP

Edit: The 64-bit registers (thx)

RAX, RBX, RCX, RDX, RSI, RDI, RSP, RBP, RIP

and here's what they are designed to do

AX/EAX/RAX: accumulator
BX/EBX/RBX: base
CX/ECX/RCX: counter
DX/EDX/RDX: data/general
SI/ESI/RSI: "source index" for string operations.
DI/EDI/RDI: "destination index" for string operations.
SP/ESP/RSP: stack pointer for top address of the stack.
BP/EBP/RBP: stack base pointer for holding the address of the current stack frame.
IP/EIP/RIP: instruction pointer. Holds the program counter, the current instruction address.

So yeah, basically they are just a place to store stuff; notice your assembly:

sub [ebx+00000314],eax

it means, subtract what is stored in eax register from the contents of the memory address (ebx + 314).

So if ebx = say 0x00010000, and eax = 0x00000002

then the above translate to:

sub [00010314], 2

If you want to know more, there is ALOT more to learn. I have barely scratched the surface. So good luck

[hcavolsdsadgadsg]

the Rxx registers are the 64 bit registers.