Getting Offsets with Cheat Engine

[robhunter]

Hello,

I'm trying to get the static offsets from health, gold, etc on Cheat Engine but I'm lost...

This is what I do:

Search for Health Value: 18651

I get two address, one for MAX and one for CURR, I'll be using MAX HP address

22 79 25 2C

I click on "Find what is accessing this address..."Then I change my HP value, and I get this

0086DFED - 89 50 08  - mov [eax+08],edx

0086DFE9 - 8B 55 0C  - mov edx,[ebp+0C]
0086DFEC - 5F - pop edi
0086DFED - 89 50 08  - mov [eax+08],edx <<
0086DFF0 - 5E - pop esi
0086DFF1 - 5D - pop ebp

EAX=22792524
EBX=205B4000
ECX=FFFFF070
EDX=46AEF800
ESI=0000008F
EDI=77D40000
ESP=0018FB20
EBP=0018FB24
EIP=0086DFF0

the offset is +08 OK, so I now find "22 79 25 24" HEX value and I get this address 14 78 02 7C, which is a Pointer, I add a new pointer manually, with +08 offset and I get the same HP value, so I repeat, find what is accesing, and I get and stuck here...

0086DFAA - 8B 04 B0   - mov eax,[eax+esi*4]

0086DFA2 - 33 F1  - xor esi,ecx
0086DFA4 - 23 B7 18040000  - and esi,[edi+00000418]
0086DFAA - 8B 04 B0   - mov eax,[eax+esi*4] <<
0086DFAD - 85 C0  - test eax,eax
0086DFAF - 74 0B - je Diablo III.exe+6DFBC

EAX=22792524
EBX=205B4000
ECX=FFFFF070
EDX=FFFFF070
ESI=0000008F
EDI=1478002C
ESP=0018FB1C
EBP=0018FB24
EIP=0086DFAD

I got exactly the same HEX Value to search 22 79 25 24, this time with offset 8F*4 (esi*4, which is 23C) and... Now I don't know what to do, because if I search 22 79 25 24 I will get 14 78 02 7C address... so...

I have been searching for this kind of stuff all day, but I couldn't find anything who explains good, just what I'm doing, but I'm stuck :S

Thanks in advice

[_Mike]

There are several threads here on how to read attributes. I don't think we need yet another
As for

I got exactly the same HEX Value to search 22 79 25 24, this time with offset 8F*4 (esi*4, which is 23C) and... Now I don't know what to do, because if I search 22 79 25 24 I will get 14 78 02 7C address... so...

CE shows the state of the registers after the instruction has been executed.