Cheat Engine

Nemexia55 · Posted: Tue Jun 23, 2015 1:54 am Post subject: Address

Why some addresses are only hex number,but some others are an .exe plus number?
what is difference?

i have two picture showing them here
thanks

(i noticed that the second types are green in Hexview)

atom0s · Posted: Tue Jun 23, 2015 4:18 am Post subject:

It means that Cheat Engine's symbol handler understands what the address translates to based on the module that the address resides in. (Be it a direct address or a calculated offset.)

You can turn the feature off in the Memory Editor's 'View' menu. Turn off the Show Symbols option as well as the Show Module Addresses option.

Nemexia55 · Posted: Tue Jun 23, 2015 6:00 am Post subject:

The upper one is value and the below one is th code that changes it, is it possible that codes are like that and values are like upper one?

atom0s · Posted: Tue Jun 23, 2015 11:35 am Post subject:

Dark Byte · Posted: Tue Jun 23, 2015 2:50 pm Post subject:

if memory is part of a module, CE will show it as modulename+offset if that option is enabled.

if it's not part of a module, CE can't show it as such, and thus shows it as hexadecimal.

Modules mostly contain code, but they can also contain addresses (data segment)
Memory outside of modules can also contain executable code (eg JIT)