Cheat Engine

MErtHRMKsE · Newbie cheater Reputation: 0 Joined: 02 Jul 2012 Posts: 21

Is there a way to find where the code jumped from?

Example I have this :

00400000: jmp 12345678

If set a breakpoint at 12345678, is there a way I can tell it jumped from 00400000

Dark Byte · Posted: Wed Jun 25, 2014 6:03 pm Post subject:

you could use tools->dissect code, which will then show if there are any jumps to 12345678

alternatively, (only if it's really important) get XP, an intel cpu, and use the last branch recording functions in the kernel debugger which will show up to 4 to 16 jumps before the last breakpoint got hit (depending on the cpu)

MErtHRMKsE · Newbie cheater Reputation: 0 Joined: 02 Jul 2012 Posts: 21

What if it was this instead :

00400000: jmp eax

and in this case, eax would be 12345678

Would using "dissect code" work?

Dark Byte · Posted: Wed Jun 25, 2014 6:10 pm Post subject:

nope, then you're out of luck, get XP

MErtHRMKsE · Newbie cheater Reputation: 0 Joined: 02 Jul 2012 Posts: 21

does the kernel debugger work on windows 7? I tried it but I kept getting a BSoD

Dark Byte · Posted: Wed Jun 25, 2014 6:20 pm Post subject:

yes, but only on a few systems, and even then last branch recording won't properly work as windows 7 and vista interfere with that