Cheat Engine

redstarx · How do I cheat? Reputation: 0 Joined: 07 Jun 2011 Posts: 2

I hope this is the right section to ask for assistance. I'm new at this and I'm not sure if I'm going over this the right way.

I have the following string (this is an example string)

AA 61 6C 1E 12 02 00 (8E 5C 10) 00 10 02 A3 1C 00 00

This string represent the packet of a skill in game "X" which I captured using WPE.

Now, I know what skill the string is for, I'm capable of using the packet to trigger the skill but it so happens that whenever I "relog" in game "X" one portion of the string changes while the rest remain the same. AA 61 6C 1E 12 02 00 (8E 5C 10) 00 10 02 A3 1C 00 00.

Now what i want to do is to locate the pointer of that portion of the string that changes so I can create a tool that will allow me to load the skill value every time I relog and use it as I please.

Now just for the record, the values AA 61 6C can be found with Cheat Engine and I'm guessing it represents the Skill ID/Value.

1) Is it possible locate such value with Cheat Engine?

2) If it's possible, how to I use the values (8E 5C 10) to search for the pointer?

3) Will I need to capture the packets every time I want to use them on relog?

Any information is greatly appreciated.

lucidity · Posted: Wed Jun 08, 2011 12:28 pm Post subject:

1) Search for an "Array of Bytes" - enter 8E 5C 10 as the value
2) If the above step is successful, you can use the pointer scanner on the memory location which contains the value
3) No

Also... I am new, but my initial impression is that the value is likely

00 8E 5C 10
or
8E 5C 10 00

not simply "8E 5C 10"

redstarx · How do I cheat? Reputation: 0 Joined: 07 Jun 2011 Posts: 2

Thank you very much for your response,

I will try that out as soon as I can and I will post my findings.

lucidity · Posted: Wed Jun 08, 2011 4:52 pm Post subject:

if you browse the memory region you can tell where the value probably starts... there are separator yellow bars every 8 bytes like this in the CE memory browser (red font is for emphasis, wont appear in memory browser):

AA 61 6C 1E 12 02 00 | 8E 5C 10 00 10 02 A3 1C | 00 00

or it might be like this:

AA 61 | 6C 1E 12 02 00 8E 5C 10 | 00 10 02 A3 1C 00 00

so you can tell where the start of the value is, accordingly.