Cheat Engine

[KFUPM]

hi,

Iwas wondering if CE can find all addresses if I search about a value. because sometimes when I put a random address & search about it's value I coudlnt find it.

I was working to hack a game but I couldn't. I don't know what is the problem. I hope you guys will figure out.

I first searched about the shown value. after I changed the value I come up with two similer values as the shown one. then I find what accesses that addresses I got these offsets:
for the first value: 84 - 64 - 7c - x
for the second: 30 - x

after the 7c & 30 I get the same values "for the pointers" but I can't get any more addresses accessing that address!!!


anyone have any idea about that??

I've read many topics before writing this post. i think most similer problems peaple suggest noping the code -- what does that mean?


thanks

[blackbitshines75]

[KFUPM]

thank you for replying but that is a dynamic address so if i restart the game the address will change.


the code that writes to the first address:
0D1B8FE1 - 8B 5D BC - mov ebx,[ebp-44]
0D1B8FE4 - 8B 45 A4 - mov eax,[ebp-5C]
0D1B8FE7 - 89 88 84000000 - mov [eax+00000084],ecx <<
0D1B8FED - 8B 50 08 - mov edx,[eax+08]
0D1B8FF0 - 8B 8A D0020000 - mov ecx,[edx+000002D0]

EAX=078250E8
EBX=00000235
ECX=00000235
EDX=026BD3D2
ESI=07E3AF10
EDI=0AAC3F70
ESP=002EEB80
EBP=002EEBF8
EIP=0D1B8FED


for the second:
0C540A84 - FF D0 - call eax
0C540A86 - 83 C4 10 - add esp,10
0C540A89 - 89 5E 30 - mov [esi+30],ebx <<
0C540A8C - C7 45 D0 00000000 - mov [ebp-30],00000000
0C540A93 - E9 A3000000 - jmp 0C540B3B

EAX=00000004
EBX=00000235
ECX=002EEC48
EDX=00400402
ESI=07E3AF10
EDI=0AAC3F70
ESP=002EEC10
EBP=002EECA8
EIP=0C540A8C

[blackbitshines75]

[Fresco]

to find the pointer of the first address
you have to:
find out the code that accesses the first address

if you find this:

0D1B8FE7 - 89 88 84000000 - mov [eax+00000084],ecx <<

EAX=078250E8
EBX=00000235
ECX=00000235
EDX=026BD3D2
ESI=07E3AF10
EDI=0AAC3F70
ESP=002EEB80
EBP=002EEBF8
EIP=0D1B8FED

then you'll see here that this is the address you searched the codes for

[eax+00000084]

since EAX=078250E8
078250E8+00000084 = 0782516C
0782516C ths was the address you searched the code for
so eax is the "base pointer" (the value in hex (4bytes) of the next pointer)
so search for 078250E8
pick a random result and then continue ... what accessed that address etc...
ah ... and you might want to write down the offsets you find

078250E8+00000084 = 0782516C

in this case base=078250E8 offset=00000084
you need the pointer because eax can change at that location next "game restart"

if you find something like this

0D1B8FE7 - 89 88 84000000 - mov [eax+ebx*4],ecx <<

EAX=078250E8
EBX=00000235
ECX=00000235
EDX=026BD3D2
ESI=07E3AF10
EDI=0AAC3F70
ESP=002EEB80
EBP=002EEBF8
EIP=0D1B8FED

the base will still be eax (in almost all cases the top left register is the "value of the pointer needed....")

[eax+ebx*4]
offset is ebx*4
EBX=00000235
offset is 235*4
do it with a HEX calculator not decimal
235*4=8D4 in hex
235*4=940 in dec
so you see it's not the same

[KFUPM]

thanks to all of you

I'll put another post to clear this problem.