Cheat Engine

ShadouFireborn · How do I cheat? Reputation: 0 Joined: 03 May 2020 Posts: 1

I'm trying to find a memory address in a game I'm playing, but the developers did something weird and Cheat Engine isn't finding the address I want.

I have successfully found -a- address, which holds the value I want to change. But when I change the value, it nearly instantly reverts to its previous value. So I'm looking for the address for the value that's being copied into the address I'm looking at, so I can change -that-. But I'm running into dead ends here; right clicking on the address and 'find out what writes to this address' has given me a bit of code that reads "mov [rcx+00000088],rdx". It tells me "The value of the pointer needed to find this address is probably 13561F861A0", and some quick hex math reveals that the address I've found with the value I'm trying to edit, 13561F86228, is indeed the memory address referenced by the code (13561F861A0+00000088). Ok, so far so good.

I cannot find rdx. That's the value that's being written into the address I have. I want THAT address, but I can't figure out where to go from here. The Extra Info panel lists rdx = the hex of the value I'm trying to change, not a memory address. How do I find out what rdx's memory address is?

Note that whatever address rdx is was -not- being discovered by cheat engine when I was doing my value scans. When I finished scanning, there was only one address that had the value I was looking for.

crtzrms · Newbie cheater Reputation: 0 Joined: 26 Apr 2020 Posts: 13

Short answer is find what writes to RDX within the code. Should be next to the line you found with "Find what writes to this address".

Depending on what exactly you are trying to do with this value, i would suggest just patching the code to write the desired value to RDX.

ParkourPenguin · Posted: Sun May 03, 2020 9:13 pm Post subject:

If changing the value doesn't work, changing the instructions writing to the value isn't likely to work either.

Disconnect from the internet. If the game stops working, you should give up. CE can't change values that aren't stored on your computer.

Otherwise, try unknown initial value and changed/unchanged scans to find the real value.

rdx isn't an address in memory- it's a register. It just holds a value. Scroll up to see what last wrote to it. (or if rdx is a parameter, execute until it returns to the caller and see where the argument comes from)