Cheat Engine

[Gear2ndGandalf]

I've been researching how to find offsets from game runtime to affect values ingame. I'm using OpenKH for Kingdom Hearts and something called Lua Backend engine. In the attachment I set up I have questions in Yellow text, but I mainly need to have the 3rd question sovled.

1. Steam version is 0x3B2271. How do we determine this?
2. ReadLong == 0x7265737563697065. IDK where to begin with this number.
3. ReadLong(0x2537E48)+0x40, true. I get this one aside from the offset in parenthasis. It's different from how the game looks at runtime where the offset from the module is "KINGDOM HEARTS FINAL MIX.exe"+2D372A0 + 40 so the final address is = "KINGDOM HEARTS FINAL MIX.exe"+2D372E0 for size x.

I just don't know where 0x2537E48 was determind. I've tried scouring the .exe in HxD, using ReClass.NET, and Cheat Engine. Mind you I've been trying to learn via Guided Hacking and Udemy and am currently learning C++ and LUA. I just don't get offsets sometimes or I'm just not understanding how it works at game initialization in LUA.

Please help and view attachment.



Update: I spoke to the man KSX himself just now and got my answer. I just had to pointer scan 1 level since sora as an entity sits above loading room entities ingame I think. *facepalms*

Please check other attachment for highlighted answer.

[ParkourPenguin]

1, 3: That offset is just a number. There is no semantic value that can be gotten just from that. Given it's passed to the function `ReadLong`, you should look up documentation for that function to learn the meaning of those arguments.
The only documentation I can find is here:
https://github.com/Sirius902/LuaBackend/blob/hook/DOCUMENT.md
It's a little lacking, but it's not unreasonable to assume "base address" refers to the address that the exe was loaded at. This is also shown in your other image "offsets_size_x.JPG".

2: That number is the ASCII string "epicuser" reinterpreted as an 8-byte integer.

[Gear2ndGandalf]

Thanks, it's more clear to me now due to your explanation! I'm reading and book marking that page now. Looks like 'ReadLong' is typically reading 8 bytes (64-bit) as opposed to 'ReadShort' which is 2 bytes (32-bit) which makes sense due to the game being 64-bit.

Also, I learned since the game is hard coded (green static addresses) I could've done on line 59 for ex: ReadLong(0X2D372E0), true instead of using offsets.

Edit: As to not flood the forum with more topics I have a question regarding this script. What am I doing wrong it shows I have no snytax errors but I'm not affecting the address to enable fly anywhere. Do I need a loop timer? Is the code only running once?