Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


How to follow this value ?

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Discussions
View previous topic :: View next topic  
Author Message
Sanglante
Cheater
Reputation: 0

Joined: 27 Sep 2018
Posts: 43

PostPosted: Thu Dec 19, 2019 8:52 am    Post subject: How to follow this value ? Reply with quote

Hi.
I need help with a part of code.
I usually follow my value with:
-Find What access this value
then Trace what i want and read the code and so on
So i have a value 40000000 that is move somewhere then read then move again
My first problem was the last code is used to move multiple value



so i put my trace on next instruction with a start condition EDX == 0x40000000

but i' ve made some trace and ecx change each time
so i can't add the next moving address and find what access it.



help.jpg
 Description:
 Filesize:  106.26 KB
 Viewed:  2627 Time(s)

help.jpg


Back to top
View user's profile Send private message
Csimbi
I post too much
Reputation: 94

Joined: 14 Jul 2007
Posts: 3108

PostPosted: Thu Dec 19, 2019 3:43 pm    Post subject: Reply with quote

Why do you care about ECX changing? EDX does not seem to depend on ECX. It depends on ESI it seems.
Back to top
View user's profile Send private message
Sanglante
Cheater
Reputation: 0

Joined: 27 Sep 2018
Posts: 43

PostPosted: Thu Dec 19, 2019 4:00 pm    Post subject: Reply with quote

esi is here actually the base offset + ecx

close to the end this :

mov [ecx+esi],edx

move my edx value again to another place
esi allways same value, ecx change everytime

i don't know how to perform an instant : Find what access [ecx+esi] with edx == 0x40000000 as condition just after it has been move there
Back to top
View user's profile Send private message
Csimbi
I post too much
Reputation: 94

Joined: 14 Jul 2007
Posts: 3108

PostPosted: Fri Dec 20, 2019 1:04 pm    Post subject: Reply with quote

Looks like some kind of indexed table, I guess ECX changes based on what position the record you want occupies.
Well, if ESI is fixed, then you need to follow ECX.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Discussions All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites