| View previous topic :: View next topic |
| Author |
Message |
The0neThe0nly Expert Cheater
Reputation: 0
Joined: 08 Dec 2009 Posts: 119 Location: In a box
|
Posted: Thu Oct 06, 2011 7:18 pm Post subject: Green Text in Assembly? |
|
|
I have some green text that keeps showing up in memory viewer.
It'll say call [ecx],Ogre::Compositor::`vftable'+76
When I try to Assemble, instead of the text, it shows an address.
What is this text?
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 474
Joined: 09 May 2003 Posts: 25954 Location: The netherlands
|
Posted: Thu Oct 06, 2011 7:26 pm Post subject: |
|
|
That is a symbol.
You can turn them off with view->show symbols
they are useful in cases where an address for an instruction has a name, like: player::GetGold since they are more accurate between patches of a game
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
The0neThe0nly Expert Cheater
Reputation: 0
Joined: 08 Dec 2009 Posts: 119 Location: In a box
|
Posted: Thu Oct 06, 2011 7:29 pm Post subject: |
|
|
Can I use symbols to my advantage?
Ex. Inject my text/code with a symbol
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 474
Joined: 09 May 2003 Posts: 25954 Location: The netherlands
|
Posted: Thu Oct 06, 2011 7:41 pm Post subject: |
|
|
yes, the addressparser has support for symbols so you can use them in assembler scripts and addresses in the ct
Just make sure the address is actually related, and not just a random leftover.
to me Ogre::Compositor::`vftable'+76 means the 19th function method of the Ogre::Compositor class object. But if it's something else I recommend using another method of finding as it might be unrelated then (Of course, seeing you mention it's use in a CALL instruction, this makes sense)
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
|