Cheat Engine

xNef · Cheater Reputation: 0 Joined: 23 Jan 2011 Posts: 25

Im having trouble with one pointer that I cant find, when I try to use debugger then search the value in hex, dont find anything. If I use Point Scan, find millions of values then when I restart application and redo the scan to filter, I get 0 results :S
Im sure that Im doing everything right, I found others pointers for other functions. Does it have another method than using pointer scan or debugger to find?

Geri · Moderator Reputation: 112 Joined: 05 Feb 2010 Posts: 5627

Probably the base address is not the register between the brackets, but another register. Check the values of other registers too and You may see another one which could be the base address of the structure.

xNef · Cheater Reputation: 0 Joined: 23 Jan 2011 Posts: 25

Hi Geri, thx for ur reply, I just read some of your tutos in ur signature, and really like it. I really appreciate ur work.
What I did to resolve this problem was find another pointer to another value then subtract some bytes from memory to find the adress I want it.
Other thing that I was in doubt, is that the xor in this case means the value is
encrypted ?

Geri · Moderator Reputation: 112 Joined: 05 Feb 2010 Posts: 5627

No, that XOR is just used to set eax to 0.

XOR eax,eax = 0

It may also change some flags (that is not important for You in this case).

Also, Your code is using EBX and not EAX. They are independent from each other so clearing EAX will not affect Your value's address at all.

And the value is float. Float instructions are a bit different, as You can see it has 1 parameter only.

Fstp will copy the value from st(0) to the given address (and remove the value from st(0)).