Cheat Engine

iroku · Posted: Wed Apr 24, 2013 6:02 pm Post subject:

i dont really understand you, but.

'Find what accesses this address' gives you mov [edx+ebx*4+0C],eax (this function is stored at 1CAA0000)

edx=06d9a048
ebx = 03
0c = 0c ,lol

so, [edx+ebx*4+0C] = 06d9a048 + ( 03*4=0C) + 0C = 06D9A060

how do you want this to be spitted out ?

like user SteveAndrew said

iroku · Posted: Wed Apr 24, 2013 6:19 pm Post subject:

i dunno... code injection ?
getNameFromAddress(address): Returns the given address as a string. Registered symbolname, modulename+offset, or just a hexadecimal string depending on what address

c:/program files/cheat engine/ main.Lua
control+f "address" and take a look

c:/program files/cheat engine/ tutorial1386.exe helps ?

im new so yea... not really sure what you want...

whats wrong with code that user SteveAndrew posted ?

cant you use the CurrentDynamicHPAddress ? that seems to be pretty much what you want

eax.qbyte · Posted: Thu Apr 25, 2013 6:39 am Post subject: multiple addresses

why don't you try using "Find out what addresses this instruction accesses" option? you will probably see there are more than one address found.
I guess they are HPs of other players or AI bots. You should find a way to run the hooker code only when it is writing your HP. may be back tracing some functions or finding index of your player between others. also as this code shows i think pointer scanner can help you here.

iroku · Posted: Thu Apr 25, 2013 7:28 am Post subject:

go to add adress manually(on CE main window) and input your Base adress and the remaining offsets.

remember,
edx=06d9a048 - base address to work from
ebx = 03 -main offset

adress: 06d9a048 , offset 1: 0C offset 2: 0C. = EAX(that seems to be where HP value is stored)

you will now have a pointer to your HP.
if the register values on that function is static you re done..
if not, you have to trace back and find what writes the value of edx or ebx on function mov [edx+ebx*4+0C],eax

what does this mean ? somewhere behind that function is another function that defines the value of edx and ebx for function mov [edx+ebx*4+0C],eax. Most likely one is static and the other is not. So you ll have to find what function wrote the value that keeps changing :p

i take it pointer scan didnt work ? what game is this ? does your ebx keep changing on game restart ?

Pingo · Posted: Thu Apr 25, 2013 1:26 pm Post subject:

That instruction is shared by about 20-30 other addresses.
You'l be better off finding something unique to your player.

TsTg · Posted: Thu Apr 25, 2013 3:44 pm Post subject:

If you are sure that the values for edx (for your player's health) and the ebx register are: edx=06d9a048 , ebx = 03 , then you can try this code

TsTg · Posted: Thu Apr 25, 2013 5:02 pm Post subject:

you can try comparing only the value of EBX,remove the:

cmp edx,06d9a048
jne Health_Not_mine

and take alook in the original game code before the mov [edx+ebx*4+0C],eax instruction, you should find something like mov edx,[somewhere] or whatever.

if not, you can try ranged search, let's say your pointer is 06d9a048 for now, search 'Value between' and type in left box: 06d9a000 and in the right box: 06d9a048, see if you find a green colored address in the result

for a bigger range, try 06d90000 in the left box, and keeping the right one: 06d9a048

Fresco