Cheat Engine

[coffeeAchiever]

I was looking for gun bullets in Duke Nukem 3D. After about 20 seconds I found a single green address.



My understanding is that green addresses mean variables pre-allocated in the .data segment. In other words, local static or global variables. But these variables are no relocatable. If gun bullet number is held at green address #0192D89C today, it'll be held at the same place tomorrow. Right?

As a test I killed the game and reloaded. Sure enough, #0188D89C held gun bullets.

Question #1: Is it a general rule of thumb that when I see a green address in the scan section, my work is done?


Just to play around because I like using CE to learn, I tried to find out what writes to this address. When the debugger is attached, whenever I shoot the gun, the game immediately crashes.



Question #2: Does that have anything to do with the address being a global / static local? Is there a way to prevent the crashing? I tried to switch the Preferred breakpoint method to Int3, but the game still crashed. What should be done in a situation like this?



Edit: When I restarted the game, I noticed something really strange.



Question #3: My scanned address is still #0192D89C, but when I attached CE to the game again, the stored address changed to #006DD89C. Why? What's going on here?

Thanks!

[OldCheatEngineUser]