Cheat Engine

[hanchiang]

Hi there, I am a beginner just playing around with the cheat engine tutorial. I learnt that I need to find out addresses of pointers. But sometimes the tutorial says find out what writes, while sometimes it says find out what access. And I am confused, what is the difference between both of them??

Please help me thank you!

[Freiza]

There are two types of memory you usually require while programming..
1) Register (Usually 32-bit) [ small temporary variable built inside CPU)
2) Your Computer Memory (RAM)

mov eax, 23456787 // here we are moving value 23456787 to eax
mov [eax],10 // here we are moving value to RAM address 23456787 and not in eax.

So any thing inside [ ] these brackets are pointer to memory(RAM)..
and eax,ebx,ecx,edx,edi,eip,ebp,esp are registers general purpose register
******************************

mov eax,[esi+04] // Here esi is containing address of memory . let us say esi =11123450. and 04 is the offset.. so the actual memory location pointer by [esi+04] = 11123454.
Here we the brackets are deferencing the address..
So, the value stored at 11123454 is moving in eax.. Hence we can say we are reading the memory at 11123454.(memory read)

mov [esi+04],eax // here we are moving the content pointed by esi+04 to eax. So we can say we are writting the value of eax into the memory location pointer by esi+04.(memory write)

When you use " find out what writes". it will show all the codes that are actually writting to memory location..

When you use " find out what read". it will show all the codes that are actually reading from memory location..

When you use " find out what access". it will show all the codes that are both reading and writting memory location..