Use OD and Ce to trace and find the base address

The previous tutorials used ce to find the level-1 base address of Wulin. If the game is like that, you can find it in his own way. You can use OD tracking to locate the real base address.

 

Search for the blood value with CE. Generally, you can locate several items. The best thing is that there is only one. A total of 1st addresses are used.

 

Use a game near OD. Go to his memory (lower left corner) and enter the first address.

Then, the memory breakpoint is placed here.

Here there are two types of breakpoint writing breakpoint access breakpoint literally understood

Regardless of the next breakpointCodeCan be followed to the base address.

 

Switch to the game after the OD is interrupted.

Code mov [ESI + 2d8], eax

Who will assign a value to ESI. In Ce, the breakpoint is to be placed. In the OD, you need to look up who assigned the ESI value.

 

Let's take step 1 of CE.

The result shown above is 1291. Only one value is searched .. If there are multiple changes, click Change Value to see which changes.

1291 is stored in the address 00d65318

 

Append this with ODProgram

Go to the address 00d65318 and go to the memory breakpoint. Return to the program point change value

Assembly code after OD interruption

0045662b A1 20cc4500 mov eax, dword ptr ds: [45cc20]
00456630 8b40 0C mov eax, dword ptr ds: [eax + C]
00456633 8b40 14 mov eax, dword ptr ds: [eax + 14]
00456636 8b00 mov eax, dword ptr ds: [eax]
00456638 8970 18 mov dword ptr ds: [eax + 18], ESI

You can directly read the assembly code to know that 45cc20 is the base address + offset, and this 1291 is placed at the end.

 

This is the cheat engine tutorial program of CE. The game program is not like this.

 

Generally, you need to follow up. You can check the value of the Register and find the corresponding assembly code.