Cheat Engine

[jello_121]

hello hackers!
I want to make hack name stealer and hack change name but I don't know from where I should start and how to find player ID
I can find my name by using CE and change it but that will not work and if I changed my name to the enemy player this too wont work it just change my name on my screen but don't steal the enemy name ,, someone told me I must find the playerID and I need to change my ID to the enemy ID to can steal his name ,, so if thet true then I need to ask here :
1.Q How to make hack Name stealer
2.Q how to find playerID
I hope some one help me on that ,, sorry for my bad English and thank you

[disruptive]

I'd trace how my name is sent to the gameserver by firstly backtracing the visual name to the one lying in the player structure (if it isn't already).
Then either breakpointing it or searching for static references (depends on how the engine will use it) until you recognize any code used for networking, like P2P engine functions.

If you found that P2P function you can probably just call it with some other data, or otherwise modify that packet. (if necessary, fix checksum)

But since you look like a newbie, try that approach of your friend.
The ID is probably also contained in the player class so just find some player-related stuff like team/health/position and then look around.
For a name changer it would also be good if you can maintain a list of players in the current lobby. You will easily find that if you look how your player ptr is used.

Once you found the player id and assuming your friend's method works, here's how you could do it with Cheat Engine's scripting facilites:

1. Allocate a block of memory
2. Save a ptr to the player list(array, node-based, vector, whatever) on stack, heap, etc.
3. Now to select some names you have some possibilities:
- random indices, traversal loop counter (srand/rand maybe?)
- sequential traversal
4. Select the preferred method and use it to get the player info
5. Change your id

You can place a hook just before the real action comes in and redirect to your allocated block of code, not forgetting to skip the real code.
If you refuse to use hooks you can create another thread with a loop.

[jello_121]