Cheat Engine

[RaC]

Well, I looked up in the CE source and couldn't find an answer, nor google gave too much support.
So my question is - How do you freeze a value using assembly?

[Dark Byte]

replace the code that changed that value with nops.

or a more complex rotuine that only filters out that address from changing

[RaC]

Noping it is quite troublesome because the value I'm trying to freeze belongs to pointer.
Every time the process runs the pointer is pointed into a different address making it impossible for me to use it as CTAutoAssembler script. (the need to locate the address every time..)

[bahblah]

alloc(Threadproc, 1024)
alloc(DoFreeze, 4)
label(EndThread)
label(Loopy)

DoFreeze:
dd 1

Threadproc:
pushad
Loopy:
cmp dword [DoFreeze], 0
je EndThread
mov eax, [pointer]
mov [eax+offset], valuetofreezeat
push FreezeInterval
call Sleep
jmp Loopy
EndThread:
popad
retn 4


After auto-assembling it, use CE's "Create Thread" feature to create a thread with a starting address of Threadproc


And nopping should work unless it's self-modifying code The code instructions that write to the pointer value should be static.

[Glest]

yeah, that's correct. A nop should still work with pointers. Except if the code handles more stuff than just one. Then you indeed need to have a working pointer to compare the adress in the AA. But you'd also need working pointer if you want to freeze it the standard way.