title: How to find pointer w/ offset [ecx+eax*4] (address offset?)
body: <p>I've seen this topic: <a href="https://www.cheatengine.org/forum/viewtopic.php?p=2824401&amp;sid=527ac82065e97ed86431cf89b5be1356#2824401" rel="nofollow noreferrer">How to find a point with offset eax+ebx*4</a></p>
  
  <pre><code>eax will be the pointer value to look for
  ebx*4 will be the offset (ebx is the offset in an array with elements of 4 bytes long)
  so:
  ebx=0 : offset=0
  ebx=1 : offset=4
  ebx=2 : offset=8
  ebx=3 : offset=c
  ebx=4 : offset=10
  </code></pre>
  
  <p>But I'm still don't understand how can I determine ebx?</p>
  
  <p>Here is my situation: I'm trying to get current ammo pointer for Red Faction: Guerrilla (gfwl version)</p>
  
  <p>I see that the address of this ammo is changed when I load another save file. So I use "Find out what writes to this address" for the ammo pointer (which no longer working after load another save file)
  <a href="https://i.stack.imgur.com/qt5CK.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/qt5CK.png" alt="Find out what writes to this address"></a></p>
  
  <p>Then I load another save file to see what it writes to the pointer:
  The result is the pointer with offset [ecx+eax*4]</p>
  
  <p><a href="https://i.stack.imgur.com/M5VE1.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/M5VE1.png" alt="[ecx+eax*4]"></a></p>
  
  <p>So I make a pointer like this</p>
  
  <p>ecx=00C1B988 (address 00C1B988 holds the value: ECX=00C1B994)</p>
  
  <p>EAX*4= I don't know how to work with this, so I just put: E71*4</p>
  
  <p><a href="https://i.stack.imgur.com/c6RQv.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/c6RQv.png" alt="E71*4"></a></p>
  
  <p>But it still doesn't work when I load another save file. I stuck at E71*4, what should I replace for E71? I even tried to search the value E71 (or 3697), but it seems like I'm going nowhere.</p>