Cheat Engine

Tatsu808 · Newbie cheater Reputation: 0 Joined: 15 Nov 2014 Posts: 20

Hi, I was wondering, are there good techniques for connecting and/or relating data structures that are far apart from each other in memory? Let's say for example we found the data structures for the following entity in the game:

1. Coordinate structure which holds X, Y, Z coordinates of the entity.
2. Health structure which holds the HP of the entity.
3. Faction structure which indicates whether this entity is friendly or an enemy.

These structures can sometimes be a million bytes away from each other with no set pattern between their distances from each other in memory.

Let's say we found the instruction which writes the HP to all entities in the game. Using this instruction, we can find the Health structures of all entities in the game.... but what if we want to find the coordinates and faction of the entities FROM their health structure, how can we do this? Could it be, the only method is to be lucky and somehow discover a pointer(s) that is at a predictable offset apart within the health structure which points to the Faction and Coordinates structure?

Zanzer · Posted: Sat Feb 06, 2016 1:34 pm Post subject:

One easy method is to just use CE's pointer scanner.
Have it find pointers on each structure.
Then look through each jump in each pointer.
See if they all share a common structure at one point.

Tatsu808 · Newbie cheater Reputation: 0 Joined: 15 Nov 2014 Posts: 20

Thanks for the reply. I think I understand. When you say look through each jump, you mean look at all the offsets right? Just want to make sure I understand.

FML: I did a pointer scan at an entity's health structure with max level 8, no results were returned Sad

I'm fairly certain that I was at the start of the health structure.

Zanzer · Posted: Sat Feb 06, 2016 2:28 pm Post subject:

Yea, that is what I meant.

With CE, you just find a pointer for the health address itself. It will guess the base.

When you right-click the address and find out what accesses it, what's the instruction that pops up?

If the instruction is something like mov ***,[***+100], then the base of the structure is -100 (hex) from the health address.

You can provide CE with that value and tell it that the last offset is 100.

++METHOS · Posted: Sat Feb 06, 2016 2:58 pm Post subject:

You can also look inside data structure pointer trees or use the structure spider.

Tatsu808 · Newbie cheater Reputation: 0 Joined: 15 Nov 2014 Posts: 20

++METHOS · Posted: Sat Feb 06, 2016 3:22 pm Post subject:

Sometimes, it can be difficult to find a connection. Sometimes, the structures may not be connected. You can still use the base of each structure to create your own structures and build on them as you identify important variables. If you are having a hard time trying to find an ID or establish a reliable filter for your script(s), you can try these things.

Tatsu808 · Newbie cheater Reputation: 0 Joined: 15 Nov 2014 Posts: 20

Daijobu · Posted: Sat Feb 06, 2016 5:19 pm Post subject:

I'd wager the second one from the top is the instruction which writes health.

If the enemy health is located in a table like structure it's likely something like this: