Cheat Engine

T-r-o-n

Hello.
I have a similar problem as BigNoob999.
I try to create a Trainer but every time I start the game the address changes (not value).
Has anyone been able to solve the problem?
I tried different methods according to YouTube video but so far I have not succeeded.
The Trainer always works only for the currently running game and the value found in the memory.
I'm just not able to create a trainer after starting a new game.
And I'm also new to this area, so don't stone me.
THX.

sbryzl · Posted: Sat Jan 30, 2021 5:31 pm Post subject:

Right click the address and select see what accesses it. Then do an auto assembler injection on that operation to get the address.

T-r-o-n · Posted: Sun Jan 31, 2021 7:47 am Post subject:

Hi, thank you for the advice. I found what it writes to that address:

1000279A - 89 48 10 - mov [eax+10],ecx

10002795 - 74 0A - je GameAssembly.dll+2427A1
10002797 - 2B 4D 0C - sub ecx,[ebp+0C]
1000279A - 89 48 10 - mov [eax+10],ecx <<
1000279D - 8B C2 - mov eax,edx
1000279F - 5D - pop ebp

EAX=3501F230
EBX=000015E0
ECX=00002A6D
EDX=000015E0
ESI=07FF2F00
EDI=35106910
ESP=003EF190
EBP=003EF190
EIP=1000279D

So I change of je GameAssembly.dll+2427A1 and mov [eax+10],ecx with nop and I created a trainer but the address where the value is will still change after restarting the game (application).
Each time the game is restarted, the address where the value is stored will change and I have to search for the address again.

How to make the trainer find the right address without looking for it manually ??

sbryzl · Posted: Sun Jan 31, 2021 10:31 am Post subject:

You don't want to simply nop the operation but inject an auto assembler to save the value in eax and use that to make a pointer.

T-r-o-n · Posted: Sun Feb 07, 2021 2:57 pm Post subject:

Hi, finally I was able to find the green address for 1 item.
But I had to go through 50 addresses and pointers + calculations before I hit the correct address.
But I have a problem with 1 item. I am not able to determine the correct poiter from the formula [eax+esi*4+10].
If I calculate correctly then the offset is 10. But when I enter an address with this pointer, it just doesn't fit.
Are my calculations correct? Can you check it?

EAX=4C75A480
EBX=110527B0
ECX=00000000
EDX=050697C8
ESI=00000000
EDI=4703DDA0
EBP=003CECC0
ESP=003CECB8
EIP=10E707F1

Probable base pointer =4C75A480

10E707E7 - add esp,04
10E707EA - mov eax,[edi+08]
10E707ED - mov eax,[eax+esi*4+10]
10E707F1 - pop edi
10E707F2 - pop esi