Cheat Engine

[itsoqrappy]

I have found an address of a game, and, when I try to nop it I can see the effect of the hack.
But just after a bit (like 5 mins, but the time changes, it could be also after 30 seconds) my game crashes.

I have no idea what would fix this, so I'm asking suggestions to get a solution.

Anyhow, pre-thanks in advance.
Screenshot (the blue-selected is the address I was meant to nop):

[BringChaos]

the eax register is used twice right after that before being set to something new. I don't think it would be surprising stopping the register from being set in this case could cause issues

[itsoqrappy]

[ParkourPenguin]

Why would you want to replace that instruction with NOPs in the first place? It's reading from an address, not writing to an address. It would probably be better to load an immediate into eax instead of doing nothing.

Also, make sure that instruction is only accessing the address you're concerned with. If it accesses multiple addresses, then it could be changing more than you think.

What is this section of asm suppose to be doing? Providing more information could help us help you.

[itsoqrappy]

[ParkourPenguin]

So one of the addresses it's reading from is spread. What's the other address it's accessing?


When you replace that instruction with NOPs, you're removing the assignment of the eax register. That means every instruction that expects a certain value in eax will now get whatever value eax was at, which isn't guaranteed to be remotely close to any expected value. As such, instead of removing that instruction, it is usually better to place some other value into eax. The easiest way is to use an immediate, or a value that is a part of the instruction itself. For example, mov eax, 1234.

I'm assuming changing the value of the address esi+630 changes the spread of your weapon. Figure out which value makes it have 0 spread and change the instruction to move that value into eax.


The dword at esi+62C also seems somewhat important since it's used in an xor with esi+630. What are the values at esi+630 and esi+62C?

[itsoqrappy]

[ParkourPenguin]

mov eax,eax does absolutely nothing. I'm pretty sure it's even less efficient than replacing the instruction with NOPs.

Right click on the instructions mov eax,[esi+00000630] and xor eax,[esi+0000062C]. Then, select "Find out what addresses this instruction accesses". Look at the "value" column to get the value of those addresses.
You could also easily use breakpoints.

[Zanzer]

Replace instruction: xor eax,[esi+0000062C]
With: xor eax,eax

[itsoqrappy]