Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


is it possible to debug instruction pointer?

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine
View previous topic :: View next topic  
Author Message
Thunder_Bird
Cheater
Reputation: 0

Joined: 27 Apr 2018
Posts: 33
Location: pakistan

PostPosted: Tue Nov 23, 2021 3:48 pm    Post subject: is it possible to debug instruction pointer? Reply with quote

I have been thinking of a way to find out which code is executed when I perform a certain action, lets say when I shoot. cheat engine find out the instruction if we have a memory address related to that instruction.
for example if I have the address for animations, I start drbugging it so when I shoot and shooting anim is played, cheat engine will grab the instruction and will show it to me.

but what if I dont have an address? So, with my basic knowledge of assembly language, I know that instruction pointer(EIP) holds the address of every instruction which gets executed. so I thought if I vould debug EIP, I will be able to trace/grab all the code which gets executed whenever I shoot.

so my question is, is it possible to debug EIP and not only EIP but other registers as well, it might sound stupid as idk if registers have addresses of their own as they are part of CPU and not RAM xd
Back to top
View user's profile Send private message
LeFiXER
Grandmaster Cheater Supreme
Reputation: 20

Joined: 02 Sep 2011
Posts: 1069
Location: 0x90

PostPosted: Tue Nov 23, 2021 4:52 pm    Post subject: Reply with quote

You're somewhat mistaken. The EIP register holds a pointer address which is a 32-bit value indicating the location in memory where the current instruction starts. Normally, it increments to point to where the next instruction in memory begins after executing an instruction. The EIP register cannot be manipulated directly, but is updated implicitly by control flow instructions (JMP, CALL, RET etc...). The only way to read the EIP register is to execute a CALL instruction and then read the value of the return instruction pointer from the procedure stack.
Back to top
View user's profile Send private message
ParkourPenguin
I post too much
Reputation: 152

Joined: 06 Jul 2014
Posts: 4719

PostPosted: Tue Nov 23, 2021 5:42 pm    Post subject: Reply with quote

EIP / RIP is the address of the instruction being executed. Pausing the process at some random point and looking at EIP / RIP will almost certainly not be useful. There are literally billions of instructions executed every second- the odds of you landing on the few hundred relevant to you are negligible, let alone that you have to be able to recognize the instructions' relevancy.

Look into a CE feature called "ultimap".

_________________
I don't know where I'm going, but I'll figure it out when I get there.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites