Posted: Mon May 13, 2019 11:37 pm Post subject: Trying to find pointers to static address
Okies, got a game, I can find the value, I can edit it successfully. There's sort of 'two' spots involved, one being a whole number in Double and the other a decimal value in Double (as far as I can tell all numbers are in Double in this thing), with the double counting from the prior value to very very near the new one. Deciding to focus first on the whole number, I did a 'what accesses this address'. Changing the value (XP, incidentally) I found a 'copy memory' type address:
Doing a search for the 4-byte value of EDI (0E2C1520) got me a single address, but not a green static one. Okies. So I'm looking for another link. Searching for this one, though, all I get are two really similar 'copy memory' types (even after gaining XP), one of which looks like this.
0141E4A5 - 85 C0 - test eax,eax
0141E4A7 - 74 08 - je Forager.exe+8CE4B1
0141E4A9 - 8B 00 - mov eax,[eax] <<
0141E4AB - 5F - pop edi
0141E4AC - 5E - pop esi
cheat engine show registers after being updated, either look couple instructions above and see what is being moved to eax or place a breakpoint on mov eax,[eax]. _________________
About Me;
I Use CE Since Version 1.X, And Still Learning How To Use It Well!
Jul 26, 2020
Joined: 09 May 2003 Posts: 25296 Location: The netherlands
Posted: Tue May 14, 2019 11:10 am Post subject:
Don't look at the registers, only look at the instruction
You did find what accesses on address XXXXXXXX
that showed that the instruction in blabla yyy,[zzz] which can be rewritten as blabla yyy,[zzz+00000000]
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
Reputation: 20
Reputation: 458
