| View previous topic :: View next topic |
| Author |
Message |
Barlad How do I cheat?
Reputation: 0
Joined: 01 May 2008 Posts: 9
|
Posted: Thu May 29, 2008 8:38 am Post subject: Two dissect structures windows at the same time |
|
|
Hey there,
Now I know how to open two "browse memory regions" windows at the same time (thanks for the answer about it Darkbyte, I am a bit ashamed as I should have found that myself), I would like to know if it is possible to have two "dissect structure windows" open at the same time. From what I saw, there is no option for this (clicking on new does not open a new window, just reset the structs).
That would be very useful because that way I could compare two memory regions which I believe have the same structs and compare some values by having the two windows side by side.
Any idea how to do this?
Thanks a lot!
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 475
Joined: 09 May 2003 Posts: 26007 Location: The netherlands
|
Posted: Thu May 29, 2008 1:28 pm Post subject: |
|
|
not possible yet, but being worked at.
You could try running 2 versions of CE next to eachother (and attach to the same process)
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
Barlad How do I cheat?
Reputation: 0
Joined: 01 May 2008 Posts: 9
|
Posted: Fri May 30, 2008 6:57 am Post subject: |
|
|
Ok thanks, from what I have experienced so far running two versions of CE totally mess things up. For some obscure reasons, the search results of one CE process seem to overlap randomly with the search results of the other process.
Anyway I don't know if I am the only one who would find this useful but I believe it would be great to be able to color, at user's will, some bytes or fields either in the memory browse region or in the dissect structure windows. Like when you have a structure of 6k, it's nice being able to immedialy recognize a field because you colored it, say, in green. Same when you are trying to look at a big memory area to figure out if any pattern occurs. That's just a 2 cent idea from a newcomer anyway.
Thanks again for the answer!
B.
|
|
| Back to top |
|
 |
tombana Master Cheater
Reputation: 2
Joined: 14 Jun 2007 Posts: 456 Location: The Netherlands
|
Posted: Fri May 30, 2008 7:23 am Post subject: |
|
|
I agree with that idea.
Also, in a game I play, there's always a pointer to the structure of the selected player. (So if you select someone else, the pointer points to another struct with the same elements). Maybe this is a little weird idea, but is it possible to make CE scan beginning at the address pointed to by some pointer, untill that plus xxx. So instead of having manually fill in the start and end adress, CE can read it from a pointer.
Oh, and is it possible to let CE scan alligned (on a 4 byte boundary) adresses only? I couldn't find it but maybe i've looked over something.
Greetz, Tombana
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 475
Joined: 09 May 2003 Posts: 26007 Location: The netherlands
|
Posted: Fri May 30, 2008 7:54 am Post subject: |
|
|
| Barlad wrote: |
k thanks, from what I have experienced so far running two versions of CE totally mess things up. For some obscure reasons, the search results of one CE process seem to overlap randomly with the search results of the other process.
|
Just don't use the scan function of the other ce
| Quote: |
Anyway I don't know if I am the only one who would find this useful but I believe it would be great to be able to color, at user's will, some bytes or fields either in the memory browse region or in the dissect structure windows. Like when you have a structure of 6k, it's nice being able to immedialy recognize a field because you colored it, say, in green. Same when you are trying to look at a big memory area to figure out if any pattern occurs. That's just a 2 cent idea from a newcomer anyway.
|
| tombana wrote: | I agree with that idea.
Also, in a game I play, there's always a pointer to the structure of the selected player. (So if you select someone else, the pointer points to another struct with the same elements). Maybe this is a little weird idea, but is it possible to make CE scan beginning at the address pointed to by some pointer, untill that plus xxx. So instead of having manually fill in the start and end adress, CE can read it from a pointer.
|
Not possible unless you provide the assembler instruction that accesses the last byte of that structure.
Which means you already know the size, and can just load a struct file.
The struct handler does handle pointers though, so if you give a pointer of type struct it'll let you expand that pointer and it'll read it automaticallt
| Quote: |
Oh, and is it possible to let CE scan alligned (on a 4 byte boundary) adresses only? I couldn't find it but maybe i've looked over something. |
tick fastscan and do a 4 byte scan
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
tombana Master Cheater
Reputation: 2
Joined: 14 Jun 2007 Posts: 456 Location: The Netherlands
|
Posted: Fri May 30, 2008 9:00 am Post subject: |
|
|
| Dark Byte wrote: |
Not possible unless you provide the assembler instruction that accesses the last byte of that structure.
Which means you already know the size, and can just load a struct file.
|
Sorry, I didn't really make it clear. I already know the size, but I just hate filling in the scanning space every time the pointer changes. I mean the scanning range of the main scan, in the main window (default 0040000~7FFFFFFF). I only need to scan for values in the specific structure, values outside of that don't bother me so that's why.
| Quote: | | tick fastscan and do a 4 byte scan |
Thanks. I knew it had to be somewhere... (I assume scanning for floats also is done on alligned adresses with fastscan?)
|
|
| Back to top |
|
 |
Twilly Grandmaster Cheater Supreme
Reputation: 0
Joined: 05 Dec 2007 Posts: 1645 Location: Singapore
|
Posted: Fri May 30, 2008 6:01 pm Post subject: |
|
|
Q: (I assume scanning for floats also is done on alligned adresses with fastscan?)
A: Yes. That's true.
_________________
|
|
| Back to top |
|
 |
|