|
Cheat Engine The Official Site of Cheat Engine
|
View previous topic :: View next topic |
Author |
Message |
DestinyTakes How do I cheat? Reputation: 0
Joined: 24 May 2024 Posts: 2
|
Posted: Fri May 24, 2024 8:19 pm Post subject: I have a question about some assembly. |
|
|
I am extremely new to reversing and have been stuck for days trying to reverse this . I'm currently trying to traceback a combo address in Batman Arkham Origins. When I see what access it there is no offsets. When I open the dissembler, this is what I get.
lea ebx,[esp+08]
mov eax,[esi+10]
mov ecx,[esi+0C]lea ebx,[esp+08]
mov [esp+10],00000000
movzx edx,byte ptr [eax]
inc eax
mov [esi+10],eax
mov edx,[edx*4+BatmanOrigins.exe+1412C10]
lea eax,[esp+10]
push eax
push esi
call edx
inc [esi+10]
mov eax,[esi+10]
cmp byte ptr [eax],41
jne BatmanOrigins.exe+31F33
mov ecx,[esi+0C]
push 00
inc eax
push esi
mov [esi+10],eax
call dword ptr [BatmanOrigins.exe+1412D14]
mov eax,[esp+10]
add [ebx],eax
It adds 1 or eax to the current combo address which is ebx. ebx is set above as lea ebx,[esp+08], but what confuses me when I try to get the address at esp + 08 using the info given to me from the see what assess this address here's the info if you're wondering:
EAX=00000001
EBX=673C67DC
ECX=00000001
EDX=0019E318
ESI=0019E3D4
EDI=673C5400
EBP=0019E870
ESP=0019E308
EIP=00431F39
when I do [0019E308 + 08] I get a totally different result. I know I'm doing something stupid, but I honestly just can't get it. What can I do to get the result I'm looking for? If this post wasn't very clear I'm sorry
|
|
Back to top |
|
|
ParkourPenguin I post too much Reputation: 143
Joined: 06 Jul 2014 Posts: 4382
|
Posted: Sat May 25, 2024 12:16 am Post subject: |
|
|
In spite of what CE may say, `lea` doesn't access any address. It just uses the same CPU mechanism that calculates addresses to do math.
Code: | lea ebx,[esp+08]
// same as:
mov ebx,esp
add ebx,8 |
You seem confused by the idea of a thread's stack. Try searching for "x86 stack" and learn from what comes up.
Beyond that, I have no idea what you're saying or what you're trying to do.
_________________
I don't know where I'm going, but I'll figure it out when I get there. |
|
Back to top |
|
|
DestinyTakes How do I cheat? Reputation: 0
Joined: 24 May 2024 Posts: 2
|
Posted: Sat May 25, 2024 5:38 am Post subject: |
|
|
ParkourPenguin wrote: | In spite of what CE may say, `lea` doesn't access any address. It just uses the same CPU mechanism that calculates addresses to do math.
Code: | lea ebx,[esp+08]
// same as:
mov ebx,esp
add ebx,8 |
You seem confused by the idea of a thread's stack. Try searching for "x86 stack" and learn from what comes up.
Beyond that, I have no idea what you're saying or what you're trying to do. |
Thanks I just didn't know what I was looking for. I looked up some things on thread stack and figured it out thank you so much for directing me in the right direction.
|
|
Back to top |
|
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
|