Cheat Engine

[Rexkh]

StateOfDecay.exe+106ED7A - lea ebx,[ebx+00000000]
StateOfDecay.exe+106ED80 - mov eax,[edi+StateOfDecay.exe+1571098]

I set Break and Trace with condition (EDI==0x48) on the second line and the condition meet.
Then I set Break and Trace with the same condition (EDI==0x48) on the first line but the condition does not meet.

The first code does not seem to have anything to do with EDI so what change EDI value

[Dark Byte]

perhaps the first line never gets executed and the second line gets jumped to from somewhere else

also, perhaps the start address is different, and it doesn't start at StateOfDecay.exe+106ED7A but at StateOfDecay.exe+106ED79 or StateOfDecay.exe+106ED7B or somewhere around there

( lea ebx,[ebx+00000000] does nothing )

[Rexkh]

Did you mean that a code somewhere jump in the second line? Is it possible to jump in the middle of a function? How can I find what jump?

[Dark Byte]

use dissect code and let it run
once it's done it will show the references

[Rexkh]

Not sure how to do that. Can you give the detail please?

[Dark Byte]

tools- dissect code

[Rexkh]

It took about 3 minutes and showed how many String references, Conditional Jumps, Unconditional Jumps and Calls. What next?

[Dark Byte]

the assembler screen will show the references

[Rexkh]

It's only tell the number of those 5 things. Excuse me, how those number help to find what jump in the code?

[Dark Byte]

the location that they jump to is imprtant to figure out if the code is executed or not

[Rexkh]

May be I miss something? Dissect Code only scan for statistic. It only show how many of Condition/Uncondition Jump etc. Can those number tell you what jump to where?

[Dark Byte]

once it's done the disassembler shows more info