Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Not sure where to go with Break and Trace

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Gamehacking
View previous topic :: View next topic  
Author Message
ikasarum
How do I cheat?
Reputation: 0

Joined: 18 Feb 2023
Posts: 3

PostPosted: Sat Feb 18, 2023 9:53 am    Post subject: Not sure where to go with Break and Trace Reply with quote

So I have first found an address that is related to a stat that I want to change. (The Desired Address is 28A90A90)

Then I went on to Memory Viewer

And while pausing the game through Cheat Engine, I have tried to use Break and Trace with conditions set to RBX==0x28A90A90, that is the address of the desired stat.

Now I had gone back to the Memory Viewer to find the code that writes to RBX, which is RAX, which is being written by RDI.

So now I went back to the Cheat Table to manually add the address of RDI, that is 1084FEE0 and attempt to Break and Trace that to trace what writes to RDI. However, I become stuck when the code I manually added that writes to RDI does not match with the value for RBX. It keeps on changing/alternating, and so now I'm not sure what to do next.



5.png
 Description:
Address of RDI changing
 Filesize:  672.06 KB
 Viewed:  2276 Time(s)

5.png



4.png
 Description:
Address of RDI changing
 Filesize:  664.03 KB
 Viewed:  2276 Time(s)

4.png



3.png
 Description:
Tracer Result
 Filesize:  200.95 KB
 Viewed:  2276 Time(s)

3.png



2.png
 Description:
Memory Viewer
 Filesize:  377.33 KB
 Viewed:  2276 Time(s)

2.png



1.png
 Description:
An address with my desired value (that is 8 in the picture)
 Filesize:  125.77 KB
 Viewed:  2276 Time(s)

1.png


Back to top
View user's profile Send private message
ParkourPenguin
I post too much
Reputation: 152

Joined: 06 Jul 2014
Posts: 4696

PostPosted: Sat Feb 18, 2023 11:41 am    Post subject: Reply with quote

What exactly are you trying to do with break-and-trace?

If you want to know where rdi comes from, scroll up in the disassembler. You'll probably end up at a parameter to the function, at which point you should look at the caller. Repeat as necessary.

_________________
I don't know where I'm going, but I'll figure it out when I get there.
Back to top
View user's profile Send private message
ikasarum
How do I cheat?
Reputation: 0

Joined: 18 Feb 2023
Posts: 3

PostPosted: Sat Feb 18, 2023 6:10 pm    Post subject: Reply with quote

ParkourPenguin wrote:
What exactly are you trying to do with break-and-trace?

If you want to know where rdi comes from, scroll up in the disassembler. You'll probably end up at a parameter to the function, at which point you should look at the caller. Repeat as necessary.


I am trying to trace a value to where the calculation is being done, and then code inject a script. The value of RBX was copied from RAX, and RAX was copied from RDI. I want to do this because all the values go through one opcode
My question is that when I tried to check if RDI matched RBX, it didn't match, but there shouldn't have been any changes (unless maybe it was because I did not pause the game, that's why the value of RDI kept changing) but anyways, I wanted to then trace what wrote to RDI, so eventually it will take me to a value that's probably doing "add" (because I've been increasing this value in the game).
I'll give another go though.

To be more specific, I was following a tutorial on how to perform break and trace, however I was trying to do so with a different game, and so I ran into a different situation than the one in the video, so I became stuck.
In the video, when he had trace the value from like "mov RAX, ECX" and "mov ECX, RDI". When he got to the address for RDI, it was the same value that matched his current RAX. In my case, it kept changing so I don't know why.
Back to top
View user's profile Send private message
ParkourPenguin
I post too much
Reputation: 152

Joined: 06 Jul 2014
Posts: 4696

PostPosted: Sun Feb 19, 2023 1:13 am    Post subject: Reply with quote

RDI is just the source of data being copied from one memory location to another. There's no guarantee it must be the same the next time the code is run. Performing a break-and-trace there won't help. It's like trying to catch a criminal by putting a trap at the scene of the crime that was just committed- it's not particularly likely to work.
The only way what you're doing could work is if you could go backwards in time- it's impossible.

You have to know how to read assembly in order to learn where RDI comes from. Break-and-trace isn't going to be of much help. It'll help you easily move around the callstack, but that's pretty much it.

_________________
I don't know where I'm going, but I'll figure it out when I get there.
Back to top
View user's profile Send private message
ikasarum
How do I cheat?
Reputation: 0

Joined: 18 Feb 2023
Posts: 3

PostPosted: Sun Feb 19, 2023 5:41 am    Post subject: Reply with quote

Oh okay, thanks, I suppose there's still a lot more learning to do.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Gamehacking All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites