Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


I have a question about some assembly.

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Gamehacking
View previous topic :: View next topic  
Author Message
DestinyTakes
How do I cheat?
Reputation: 0

Joined: 24 May 2024
Posts: 2

PostPosted: Fri May 24, 2024 8:19 pm    Post subject: I have a question about some assembly. Reply with quote

I am extremely new to reversing and have been stuck for days trying to reverse this Embarassed. I'm currently trying to traceback a combo address in Batman Arkham Origins. When I see what access it there is no offsets. When I open the dissembler, this is what I get.

lea ebx,[esp+08]
mov eax,[esi+10]
mov ecx,[esi+0C]lea ebx,[esp+08]
mov [esp+10],00000000
movzx edx,byte ptr [eax]
inc eax
mov [esi+10],eax
mov edx,[edx*4+BatmanOrigins.exe+1412C10]
lea eax,[esp+10]
push eax
push esi
call edx
inc [esi+10]
mov eax,[esi+10]
cmp byte ptr [eax],41
jne BatmanOrigins.exe+31F33
mov ecx,[esi+0C]
push 00
inc eax
push esi
mov [esi+10],eax
call dword ptr [BatmanOrigins.exe+1412D14]
mov eax,[esp+10]
add [ebx],eax

It adds 1 or eax to the current combo address which is ebx. ebx is set above as lea ebx,[esp+08], but what confuses me when I try to get the address at esp + 08 using the info given to me from the see what assess this address here's the info if you're wondering:

EAX=00000001
EBX=673C67DC
ECX=00000001
EDX=0019E318
ESI=0019E3D4
EDI=673C5400
EBP=0019E870
ESP=0019E308
EIP=00431F39

when I do [0019E308 + 08] I get a totally different result. I know I'm doing something stupid, but I honestly just can't get it. What can I do to get the result I'm looking for? If this post wasn't very clear I'm sorry Embarassed
Back to top
View user's profile Send private message
ParkourPenguin
I post too much
Reputation: 143

Joined: 06 Jul 2014
Posts: 4382

PostPosted: Sat May 25, 2024 12:16 am    Post subject: Reply with quote

In spite of what CE may say, `lea` doesn't access any address. It just uses the same CPU mechanism that calculates addresses to do math.
Code:
lea ebx,[esp+08]
// same as:
mov ebx,esp
add ebx,8

You seem confused by the idea of a thread's stack. Try searching for "x86 stack" and learn from what comes up.
Beyond that, I have no idea what you're saying or what you're trying to do.

_________________
I don't know where I'm going, but I'll figure it out when I get there.
Back to top
View user's profile Send private message
DestinyTakes
How do I cheat?
Reputation: 0

Joined: 24 May 2024
Posts: 2

PostPosted: Sat May 25, 2024 5:38 am    Post subject: Reply with quote

ParkourPenguin wrote:
In spite of what CE may say, `lea` doesn't access any address. It just uses the same CPU mechanism that calculates addresses to do math.
Code:
lea ebx,[esp+08]
// same as:
mov ebx,esp
add ebx,8

You seem confused by the idea of a thread's stack. Try searching for "x86 stack" and learn from what comes up.
Beyond that, I have no idea what you're saying or what you're trying to do.


Thanks I just didn't know what I was looking for. I looked up some things on thread stack and figured it out thank you so much for directing me in the right direction.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> General Gamehacking All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites