Cheat Engine

ukgee · Newbie cheater Reputation: 0 Joined: 13 May 2012 Posts: 15

ok,

How to explain this?
I currently have a data file which I have no editor/viewer for and would like to be able to pull the data out using C#

I have a structure for the data from the libraries which access said data and know how the data is stored in the file, what I cannot grasp however is the following.

atom0s · Posted: Fri Jul 31, 2015 11:36 am Post subject:

Are you certain you are reading the file correctly? You could be unaligned while reading the data causing you to hit 00's for 'SomeVariable'. Can you share the code you have so far?

ukgee · Newbie cheater Reputation: 0 Joined: 13 May 2012 Posts: 15

Actually, the code I have is on another machine so will have to wait until tomorrow at the earliest.
Basically the .data file is a list of quests using nodes/conversations and quest data such as NPC ID's, items required, monsters to kill, time restrictions and so on.

I don't know what the policy here is for private servers and such, in fact I don't even play the game and am doing this purely for my own satisfaction and educational purposes.
Anyways on the server side there is a .SO file which deals with these quests/items and so on, using some tools such as GDB I can pull out the debug symbols and get the structures.

So I know how the data is structured, in fact I know I'm reading from the right place as the header information consists of pointers for the beginning of each task Smile

I'll give you the struct/code ASAP, but the ID/Name etc all read fine until I hit this pointer, it basically has like a table structure, so we have a boolean saying does it have a time limit?

Then we have an integer saying how many does it have? (or the upper limit of the index) so basically, I use a binaryreader starting at the position in the header, I read the ID as int32, the name as 60 bytes (actually 30 short because it has the dots between every character making them 2 bytes each) then I read the other info as the structure says and it all adds up fine.

Then we have the actual (pointer?) which is like

justa_dude · Posted: Sun Aug 02, 2015 4:58 am Post subject:

There isn't a one-to-one correspondence between a class or structure in memory and one that's been serialized to disk (for example, class functions don't generally get serialized w/ their data). There isn't a universal formula for serialization, either, so nobody is going to be able to explain this particular file format to you without first-hand knowledge.

ukgee · Newbie cheater Reputation: 0 Joined: 13 May 2012 Posts: 15

Understood, but all the data I require is inside this file and the data is in a table like structure, so there are 4 bytes at the start of each. telling you the upper limit of the index and the structures are in this debug info Smile

So it's just a matter of trial and error really until this can be read, I know others have supposedly pulled it off but they don't like to share Sad

Zanzer · Posted: Sun Aug 02, 2015 11:43 am Post subject:

It would be helpful to show the bytes you are looking at, because your description is confusing.
You state that after the count, you see "00 00 00 00 00 00 00" but then you state that it is a date.
What would make you think zeroes represent a date?

Anyway, is it possible that the full structure follows the count and not just some pointer?
For example:

ukgee · Newbie cheater Reputation: 0 Joined: 13 May 2012 Posts: 15

Zanzer · Posted: Sun Aug 02, 2015 2:17 pm Post subject:

In the first post you defined StructCount and My_Long as 'long' types. That's 8 bytes, not 4.
I don't think you're reading the bytes properly.
At the very least, we need to see a chunk of bytes to help you. Not just some made up values.

ukgee · Newbie cheater Reputation: 0 Joined: 13 May 2012 Posts: 15

justa_dude · Posted: Sun Aug 02, 2015 5:11 pm Post subject:

ukgee · Newbie cheater Reputation: 0 Joined: 13 May 2012 Posts: 15

Seems I have much to learn Sad

Well, any assistance I can get on the topic the better, like I said, I don't even play the game and simply want to learn more than anything.

There are Nodes in the data, rootnodes and treenodes which seem to branch off to left/right child nodes with pointers back to the parent node, but these seem to be used for conversations in this instance.

ukgee · Newbie cheater Reputation: 0 Joined: 13 May 2012 Posts: 15

atom0s · Posted: Mon Aug 03, 2015 11:59 am Post subject:

* is just denoting a pointer. Which is 4 bytes in size. (Assuming you are on 32bit and not 64bit etc.)

So you can just read them as 4 bytes.

You can also read the data and cast to a C# structure using the Marshaling class if you wanted to go that route instead of using a binary reader.

ukgee · Newbie cheater Reputation: 0 Joined: 13 May 2012 Posts: 15

atom0s · Posted: Mon Aug 03, 2015 2:19 pm Post subject:

Once the application is compiled, it'll stay one or the other in size. So a 32bit application will have 4 byte pointers, while 64bit has 8 byte pointers.

As for using a structure, you can define the structure then marshal the data into the structure. The structure would look like this: