Cheat Engine

[aikoncwd]

Well, I need to ask this because I can't understand haha. I decided to make a cheat table:

1. Search & found the address that holds player HP
2. F5 to this address (show what access this address)
3. Pick one instruction mov eax,[esi+4C)
4. Assume that ESI hold the baseaddress of player structure and 4C is the offset of HP
5. Let's copy ESI value to dissect:



6. Paste ESI address/value to the dissect tool
7. Say YES to default options (CE will fill the structure data/type)
8. A wizard cast some shit on my CE and the structure looks like this:



What the f*ck? CE filled the structure, dumping all the descriptions associated to the player structure, with the correct address type (float, byte, ...), etc...

First time of my live I see this, every time I use dissect/structure, CE fill 4048 address of data, without descriptions... Just need to say thanks. This helped me a lot and saved precious time to spend seeing cat's over the internet.

I was obligated to say thanks for this DB

Is there any way to reproduce this magic to every game?

[Dark Byte]

This is done when the target uses .net
You can also get these kind of results for mono (unity) but you have to activate the mono features first before CE can gather that data when dissecting structures (as it's more intrusive)

for other games it's not possible (unless there are .pdb files available but ce doesn't use those yet as it's very rare that happens)

I wonder what happens when both isDead and isAlive are 1 or 0 at the same time.
edit: seeing that it's called brainsss, i'd have to guess, zombie

[aikoncwd]

[Dark Byte]

you don't need to know how to use the mono data collector. if it's activated, the structure dissect will use it for you (it just doesn't activate automatically, because if it fails, the game will crash. You can change that behaviour in monoscript.lua though)
(it can help if you know the functions , as you can pre-jit methods and modify them instead of having to wait till you die at least one time before AOB's can work)

check the monoscript.lua file in autorun. It contains quite a lot of functions that can be used inside cheat table scripts ( using the {$lua} tag )

---
I also recommend looking at the assembler code of the function that accesses health in the memory viewer. With luck it'll show names that can be easily looked up ( If it shows no names, click on file->set symbol searchpath and click ok and wait, or call lua command reinitializeDotNetSymbolhandler() )

[KevAqn]

Off-topic slightly but what would cause this to not work on a .NET game?

[Dark Byte]

If it uses .net 3.5 or older this won't work

[aikoncwd]

[Dark Byte]

An alternate method is copying an existing entry and paste it a dozen time andthen only change the description and offset

Or lua

[aikoncwd]