Cheat Engine

ayuanx · Newbie cheater Reputation: 0 Joined: 15 Oct 2014 Posts: 13

Is there any tutorial?
I searched but couldn't find any.

When I attach Cheat Engine to a .NET program, I couldn't find anything different, no extra menu or stuff. Crying or Very sad

How do you use it?

Thanks.

aikoncwd

Rydian · Posted: Wed Sep 09, 2015 9:45 pm Post subject:

Note that you may need to reload the .NET stuff after a scan or attaching.
http://forum.cheatengine.org/viewtopic.php?t=582697

ayuanx · Newbie cheater Reputation: 0 Joined: 15 Oct 2014 Posts: 13

Thanks for the reply.

What's the setup? Is extracting the add-on zip to CheatEngine root folder enough?

It is a pity that we have the functions available but no manual for these functions on official homepage.

So it is a prerequisite that you must first have the structure base address, only then can you do a structure dissect.

Say if I don't have the base address, maybe because the structure is hard to scan (e.g. the data of that structure doesn't really change, or the data isn't displayed anywhere), is there any function to achieve some kind of auto-scan-and-match if I know the structure name from the decompiled code?

Thanks!

Dark Byte · Posted: Thu Sep 10, 2015 4:56 am Post subject:

it's used automatically
when you target a .net process it will fetch the jitted functions and il code and make it available for you

structure dissect will also work if you're on a random address inside the structure. CE will use the data from the collector to set the correct address for you

you will have to find something of it first though, or try hooking one of the class methods and use ecx to find the object (use enumerate dll's and symbols)

Rydian · Posted: Thu Sep 10, 2015 6:51 am Post subject:

And otherwise, you can find the base address of a structure by finding what writes or accesses something and looking at the offset in the function most of the time. Subtract that offset from your address and you have the base.

Also function names should show up in the memory viewer window.

ayuanx · Newbie cheater Reputation: 0 Joined: 15 Oct 2014 Posts: 13

I was hoping that there would be an easy way to locate the data member by first locating the structure semi-automatically from symbol name, not the another way around.

But I guess there is no such silver bullets. Sad

Thanks. It is still good to know this function.