Cheat Engine

hesho28 · Newbie cheater Reputation: 0 Joined: 03 Oct 2009 Posts: 13

Hello There,

i have an function (VOID) and want to know its parameter.

The function ends with "ret 0004" that means it has 1 parameter only.

How to get that parameter when the function is called ?

I want to know in details because iam kinda newbie at CE.

Thanks

Dark Byte · Posted: Mon Oct 21, 2013 6:59 pm Post subject:

at the entrypoint [ESP+4] contains the parameter
If you're inside the function body (after the header) then the parameter will be in [EBP+8]

Easiest method is just checking the stackview and optional stackview->stacktrace to see the parameters, and the functions that called that function and their parameters

hesho28 · Newbie cheater Reputation: 0 Joined: 03 Oct 2009 Posts: 13

Thanks it works , but i have a question : this method works also with functions that have more than 1 parameter ?

Dark Byte · Posted: Mon Oct 21, 2013 7:19 pm Post subject:

yes, parameter 2 would then be in [ESP+8]/[EBP+C] etc...
And the stacktrace window will also show it(up to 4 parameters)