Cheat Engine :: View topic (2025)

Step 1: I find address, then use find what writes to this address.
Instruction:00425B5C - 89 46 18 - mov [esi+18],eax
pointer value 016B76A8.

Step 2: I find the first pointer, offset 18, it points to the right address, etc.

Step 3: I click on the pointer, find what accesses this address, click find what accesses this pointer...
press change value button, I get these two instructions:
00425B1A - 83 3E 00 - cmp dword ptr [esi],00
00425B1F - 8B 36 - mov esi,[esi]

Cmp doesn't make sense, and it doesn't find the right pointer either...
mov esi,[esi] works right? WRONG
The pointer value from this mov is also 016B76A8.
What did I do wrong??? I even followed this tutorial on youtube by David B.
( /watch?v=YTSbHsJs8xw )

mov esi,[esi] is writing to the exact same register it's reading from. CE's guess may be incorrect in this case since the displayed registers are shown after the instruction has already been executed, hence why you're getting the same value.

Regardless, it's obvious the offset is 0 in this case (you said that yourself). Therefore, all you have to do is search for the address of the L1 pointer. Look at what address the value 016B76A8 is stored at, and search for it.

I don't know where I'm going, but I'll figure it out when I get there.

1. I'm looking for the memory address which holds the value. 019B11B0.
2. Find out what writes to this address -> Change value.
00425B5C - 89 46 18 - mov [esi+18],eax
ESI=019B1198
3. I do hex search for 019B1198 and pick the closest address to 019B1198 which in my case is 019B1128.
4. I click 'Add address manually', check pointer and enter 019B1128 + Offset 18 which gets my P->019B11B0 and the correct value.
5. Find out what accesses this address -> Find out what accesses this pointer brings up the window 'the following opcodes accessed 019B1128' and the following opcodes:

00425B1A - 83 3E 00 - cmp dword ptr [esi],00
ESI=019B1128

and

00425B1F - 8B 36 - mov esi,[esi]
ESI=019B1198

In all the tutorials to CE 6.4 the get a mov eax, [esi] instruction when looking for what accesses the pointer and can go on from there.

Can somebody explain to me what I do wrong and how i can solve Step 8 under CE 6.5.1.

but to explain, notice the text that says register states are shown after execution
that means the register states are shown after mov esi, [esi] has been executed

esi was originally 019B1128, but after execution it got the value 019B1198

anyhow, don't look too much as the register, the offset is the important part. you know the address it accesses is 019b1128, you just did the debugging so you'd know the offset

Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping