Cheat Engine

bbeben · Posted: Thu Oct 18, 2007 5:16 am Post subject: [Question] Values of addresses

Say you find an address in dissassembler, is there a way to find out the value of it's ecx, eax and so on without having to do a pointer search?

So if I had an address with the code: cmp edx,[ecx+1c] is there a way to find out its ecx? Thanks.

Labyrnth · Moderator Reputation: 10 Joined: 28 Nov 2006 Posts: 6301

Are you serious?

You have 200+ posts and you are asking that question.....
OK look, stop what you are doing.

1. Go to C:\Program Files\Cheat Engine
2. Double click Tutorial.exe
3. Read and follow instructions.

kjmarket · Posted: Thu Oct 18, 2007 12:51 pm Post subject:

Wow...that is a little hard to believe. Go with Lab's advice and do the tutorials.

bbeben · Posted: Thu Oct 18, 2007 1:18 pm Post subject:

Well, actually I have done the tutorial and completed it. My situation is this:

In dissassembler I've come across an address with the code:

cmp edx,[ecx+1c]

what that is saying is to compare the value of the address of the pointer ecx + 1c to edx. My question is how do you find out the value/address of ecx from this code?

Labyrnth · Moderator Reputation: 10 Joined: 28 Nov 2006 Posts: 6301

Well in ce, there is a button that says "more info" after you attached the debugger and found this instruction.
And if you would have done the tutorials and understood them, you would already know about this.

Symbol · Posted: Thu Oct 18, 2007 2:07 pm Post subject:

But what if he isn't using "Find out what writes to that address"? or access/read? you can set a breakpoint at that address and when the game reads that address it will break there. (For example, if its in the part where you get a message you can't do thing, pop up the message and then is will break. I think you got my point)

Labyrnth · Moderator Reputation: 10 Joined: 28 Nov 2006 Posts: 6301

bbeben · Posted: Thu Oct 18, 2007 4:22 pm Post subject:

Labyrnth · Moderator Reputation: 10 Joined: 28 Nov 2006 Posts: 6301

You can set a break point on it and when it breaks during game it will show you that in the mem window "top right", or you can pop open ollydbg and do the same thing. * But be sure not to be in full screen mode when doing it.

Sorry, bout before im getting a little irritated by some of the dumb stuff i am seeing lately.

kjmarket · Posted: Fri Oct 19, 2007 4:18 pm Post subject:

I'll apologize for my response as well. Keep mouth shut until question is clear. Lesson learned. Again...sorry, man. It is very easy to get to a point on here when you expect people to ask really dumb questions.

hero4rune · Newbie cheater Reputation: 0 Joined: 20 Oct 2007 Posts: 15

i got probs with founding pointer!
look, this is when i writes to this adress and getting extra info by AEX:
00CFF020
What must i type in by searching in hex?
PW by tutorial is:098712

greez, hero4rune

bbeben · Posted: Sat Oct 20, 2007 4:40 am Post subject: