Cheat Engine

Clark Kent · Newbie cheater Reputation: 0 Joined: 19 Jul 2007 Posts: 14

Hi, i have a problem in the game Pinball 3D on Windows XP. I have found the value for points "00B73C6C" but the adress is not a static one. Now i have tryed to klick on the "what writes to this adress" and another window is comming up with the following text "01013c98 89 08 - mov [eax], ecx" if i klick ther on "show disassambler" a new window is pop up with this information.
Copy memory
The vaue of the pointer needed to find this address is probably
00B73C6C"

And if i try to make a search in HEX for the value "00B73C6C" i became the same one. This is not a static one.

Can someone Help me please.

Thanks in Advance.

SwaggaJackin' · Posted: Tue Feb 09, 2010 8:18 pm Post subject:

I don't understand how the value "00B73C6C" search comes up with the address "00B73C6C", unless this is some very very strange coincidence, I'd say you're doing something wrong.

Unless it is coincidental that the value is the same of its address, you can try to see if it truly is the correct pointer by adding it as a pointer and pointing to offset 0 and find the pointer to that.

More than likely, I think you're just doing something wrong. If all else fails, use the pointer scanner.

Clark Kent · Newbie cheater Reputation: 0 Joined: 19 Jul 2007 Posts: 14

Look im searching a value for points and found the address 00CEAEBA. Now i add this adress for points and click on "find out what writes to this adress" than a opcode apear with the fallowing address "00CEAEBA" look on the pic. If i scan in hex for that address nothing appear.

Hope someone can help me.

Dark Byte · Posted: Sun Feb 14, 2010 5:02 pm Post subject:

Looks like this game was compiled with smallest filesize instead of fastest speed. Loading the address into eax before handing....

anyhow, try doing a hexadecimal value scan for the value 00ceae68 and continue from there. oh yes, the offset is 52

Clark Kent · Newbie cheater Reputation: 0 Joined: 19 Jul 2007 Posts: 14

hey you right how do you know that ?

Radiation · Posted: Thu Feb 18, 2010 8:55 pm Post subject:

look at the disassembly/opcode line:

it's this:
add [eax], esi

and the line above it is:
lea eax, [ecx+52]

right?

so lea stands for Load Effective Address.

and the pointer is 52... well i think you know why... it's because it's +52 in the brackets.

hope i explained it right Very Happy

hey thanks Dark Byte. I actually learned something out of this. I never looked at it before this way. Thanks to the author of this thread too.