Cheat Engine

analfiend · How do I cheat? Reputation: 0 Joined: 04 Jun 2014 Posts: 1

so ive been using cheat engine for a long time now. usually ive been isolated from forums and managed to work things out to what i needed on my own, so my methods probably arent the best.

i have encountered a dead end in mapping out the asm code in a program im hacking. i realized it was due to the fact that the function is being called by a dynamic "call eax" function, as the value of eax is the address of the function. is there a way i can see where does the eax gets changed to this value so i can track the function caller? ive read around the forums, but most solutions by darkbyte included some lua script which im staying well away from.

anything i can do? any help will be greatly appreciated. i apologize for any etiquette i might have overlooked

Polynomial · Posted: Thu Jun 05, 2014 2:52 pm Post subject:

If you know the call target, i.e. the code that gets called by the "call eax" instruction, then just breakpoint at the first instruction of the function and look at the stack. The top item on the stack should be the return pointer for the call.

If it's a jump rather than a call, you can probably use tracing, but I've never done it in CE so I'll leave someone more qualified to explain it.

Daijobu · Posted: Thu Jun 05, 2014 3:13 pm Post subject:

In case of break and trace in CE:
Select the call in Memory View and right-click, select Break and Trace and go back to the game. Get out again and see where the call went.

Or select the instruction at the start of the function, place a break and trace and look at what's inside EAX at the location of your call. Follow it upwards until you find what wrote to EAX.

That's how I'd do it anyway. Good luck!