Cheat Engine

[PoZHx]

Address of player: 0x0B7D4668

[Dark Byte]

For the first part, remember that the register values are shown after the instruction has been executed, and the tracer looks like it's done from the wrong situation (same instruction accesses multiple addresses, and this isn't the one)

So, disregard the tracer stuff and focus on the "find what accesses this address" part

you used find what accesses on "An Address" and that returned "mov eax,[eax+edx*4]" (see if you can't find another address that is accessed but not using an array)

so, we know that "mov eax,[eax+edx*4]" accesses "An Address"
that means that you can also read this as "mov eax,[An Address]"

that brings us to:
An Address = eax+edx*4
EDX is known, it is 1, so:

An Address = eax+4
that means that
eax = An Address - 4

so, look for a pointer thathas as value "An Address" -4

[PoZHx]

Thanks for the reply.

All other addresses don't have anything access them expect for the:

[Dark Byte]

don't mistake VALUES for ADDRESSES , they are not the same

(have you tried the multilevel pointer tutorial? It has a place with offset 0 which should give the same kind of confusion)

Anyhow, let's start from the beginning and explaining values and addresses

You have the address of the player which is 0x0B7D4668
you use find what accesses on ADDRESS 0B7D4668 and find mov [edx+0C],eax
0x0B7D4668-C=B7D465C

So you look for an ADDRESS with the VALUE 0xB7D465C and you find ADDRESS B12183C (so: ADDRESS B12183C has VALUE B7D465C)

When you use find out what accesses ADDRESS B12183C you find "mov eax,[eax+edx*4]"

B12183C-4=B121838

So now you look for an ADDRESS with the VALUE B121838 and continue from there

---
Or if it gets too difficult just use the pointerscanner. You already know the last 2 offsets it should end with (4, c)

[PoZHx]

Thanks for the reply.

[Dark Byte]

ignore probable base pointer. Never look at that

[PoZHx]