Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Most referenced static addresses..

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine
View previous topic :: View next topic  
Author Message
Snooman
Cheater
Reputation: 1

Joined: 20 Jan 2012
Posts: 42

PostPosted: Mon Nov 20, 2017 6:36 am    Post subject: Most referenced static addresses.. Reply with quote

I was looking for a feature that lists the most referenced addresses, their reference count and maybe module address.

Like every MOV, LEA PUSH of an address in forms like [00B4A20A], 00B4A20A, [ecx +/- 00B4A20A] will be counted.


After scanning the final view could look like this:
Code:

Address ................................ Count ...... Module

[+] [b]00B4A20A[/b] ............  3 ............. gamemain.exe
.!- 00123456 (Referencing Code 1)
.!- 00abc000 (Referencing Code 2)
.`-00122A31 (...)

[+] [b]02CA1234[/b] ............  32 ............ stupidnonsense.dll
.!- somesh*t here too...


and so on.


I came across the "Find static adresses" view but this is not very helpful as you can only see the count in total and not the referencing sources - which would make this stuff interesting.
Also sorting by reference count (ascending/descending) does not work.


Sorted by highest access count this view could present some very interesting adresses, structures and pointers.

Scanning Range from 0040000 to code end, executable scanning ony and reference address filtering (from/to) is already implemented. This is the good thing.

Maybe add right click options:
"browse in Memory Viewer" for referenced addresses
"view referencing code" for found sources

A treshhold value to remove low reference counts would be good to make the result even clearer. An adress with 552 references appears to be more promising than an address with only 2 (random hit?) references.


Making the found results saveable/exportable (txt file) would really get some sweet whipped cream on top of this. So you can compare 2 result sets for example in case the game client got updated by the publisher. Finding the new addresses based on similar reference counts would make updating a project much easier.

All in all this should hopefully not be too much work to implement / extend the existing code. What do you think?

greez
Snooman



PS: A similar view for most CALL'ed addresses would come in handy to in order to find important subroutines.

PPS: Looks like it is time for another donation then Very Happy

_________________
This text has been encrypted with XOR twice for security reasons.


Last edited by Snooman on Mon Nov 20, 2017 9:15 am; edited 1 time in total
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 457

Joined: 09 May 2003
Posts: 25262
Location: The netherlands

PostPosted: Mon Nov 20, 2017 9:07 am    Post subject: Reply with quote

I'll check it out
Also, most 'called' functions is already in, and sortable
view->referenced functions

_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
Snooman
Cheater
Reputation: 1

Joined: 20 Jan 2012
Posts: 42

PostPosted: Mon Nov 20, 2017 9:14 am    Post subject: Reply with quote

love you.. crazy guy !!

CALL references came into my mind as an additional "nice to have".
Silly me: I have already seen this before... mea culpa!

_________________
This text has been encrypted with XOR twice for security reasons.
Back to top
View user's profile Send private message
Snooman
Cheater
Reputation: 1

Joined: 20 Jan 2012
Posts: 42

PostPosted: Tue Nov 21, 2017 9:45 am    Post subject: Reply with quote

I found an alternative for me:

In memory viewer I do an assembly scan for my desired search pattern eg. "[00B*]" and grab the contents of the result ListBox from Assemblyscan window, then analyze the results

_________________
This text has been encrypted with XOR twice for security reasons.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites