Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Function Finding

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Gamehacking
View previous topic :: View next topic  
Author Message
7ru3817
Newbie cheater
Reputation: 0

Joined: 21 May 2010
Posts: 14

PostPosted: Sat Jul 24, 2010 5:19 pm    Post subject: Function Finding Reply with quote

I need to find function that print text on the game screen when i say something. I found address where string starts and then I found what read from this address. Now I have adr that might be what I am looking for but I dont know anything about parametrs. When I noped address the game get crashed. What is the easiest way to find function like printing text and how to know what push affter call?


____
sorry about my bad english
Back to top
View user's profile Send private message
justa_dude
Grandmaster Cheater
Reputation: 23

Joined: 29 Jun 2010
Posts: 893

PostPosted: Sat Jul 24, 2010 7:02 pm    Post subject: Reply with quote

The exact method passing parameters can potentially vary from one function to the next, but they are either going to be on the stack or in registers. You can look at what the calling code is doing w/ your value before the call instruction to make a determination. You can also/instead set a breakpoint and trace into the called function to see how it accesses your parameter.
Back to top
View user's profile Send private message
zile
Advanced Cheater
Reputation: 0

Joined: 11 Jul 2009
Posts: 75

PostPosted: Mon Jul 26, 2010 5:28 am    Post subject: Reply with quote

alright first search for any strings that are printed in the game in olly
once u've managed to find one, look below it , there should be a call a few instructions below

once u found the call, look above for all the nearest pushes , and record them down, they should look like this if the string u found is "You have been booted"

push ADDRESS1 ; ASCII "You have been booted"
push 1 ; some random numbers
call ADDRESS2

there may be more pushes as well, and if you see push eax/ebx/ecx , just breakpoint at that address to get the value of it, IF the value is an address , check if its a pointer ( changes every game )
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 474

Joined: 09 May 2003
Posts: 25952
Location: The netherlands

PostPosted: Mon Jul 26, 2010 5:42 am    Post subject: Reply with quote

Just a note that you don't specifically need olly to find the strings and the code that references it
in ce go to memory view and press ctrl+alt+r, then you can do a search for the text you're looking for and you'll also get to see the addresses that referenced it

_________________
Tools give you results. Knowledge gives you control.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
rooski
Master Cheater
Reputation: 0

Joined: 31 Oct 2007
Posts: 340
Location: Siberia

PostPosted: Mon Jul 26, 2010 1:17 pm    Post subject: Reply with quote

does anyone know of somewhere i can find all the shortcut keys for CE , cause what darkbyte mentioned above i had no idea about and it would have been useful.
_________________
clawtheclouds.com
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 474

Joined: 09 May 2003
Posts: 25952
Location: The netherlands

PostPosted: Mon Jul 26, 2010 4:14 pm    Post subject: Reply with quote

just check the text of the shortcut after the menu item.
e.g this was just memview->view->referenced strings

_________________
Tools give you results. Knowledge gives you control.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
rooski
Master Cheater
Reputation: 0

Joined: 31 Oct 2007
Posts: 340
Location: Siberia

PostPosted: Mon Jul 26, 2010 11:15 pm    Post subject: Reply with quote

damn , i was still using an old beta that didnt even have a options bar at the top , so i downloaded the latest build.
_________________
clawtheclouds.com
Back to top
View user's profile Send private message
root426
Newbie cheater
Reputation: 0

Joined: 09 Feb 2010
Posts: 22

PostPosted: Thu Sep 30, 2010 4:39 am    Post subject: Reply with quote

darkbyte thx a lot for ur mention i love you really i love u Smile and if exe packed then ce cant find string properly right?
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 474

Joined: 09 May 2003
Posts: 25952
Location: The netherlands

PostPosted: Fri Oct 01, 2010 4:50 am    Post subject: Reply with quote

root426 wrote:
if exe packed then ce cant find string properly right?

Unless the packer extracts the exe in memory before execution not no.
Problem is that almost all exe packers decompress the exe in memory...

_________________
Tools give you results. Knowledge gives you control.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Gamehacking All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites