Cheat Engine

[macsbug]

I've frequently run into the problem of attempting to determine how some scrap of data is related to an object. An example of this could include matching a character's health/name/ect. to an object pointer I've already located. In the past I wrote a simple recursive search that attempted to locate a series of offsets to the specified data from some object, under various constraints - this proved to be by and large quite effective.

I lost said project in one of my recent reformats and haven't had the time or inclination to do the work again - does Cheat Engine have anything similar to what I describe above?

[Dark Byte]

There is the option "dissect data" that will take an address and split that region of memory up into a structure with basic element types what it thinks is most appropriate. (string, float, double, int, etc...)
Not sure if that's what you want though

memorybrowser->tools->dissect data

[macsbug]

Not exactly - perhaps a better way to describe it would be suppose you have the address of some object and we assume for a moment that a series of pointers connect that object to some related data we also have the address to, say four levels down. The scan would list all "offset paths" that would connect the object to the data while subsequent scans would quickly reveal a possible fixed path between the two or where to look from there...hmm, that's still probably not all that clear, however I'm not sure how to describe it any better than that

[Dark Byte]

hmm, there's the pointer scan. You can specify how many levels down it'll scan and find offsets for them.
What you're describing sounds like the reverse pointer scan routine.
You give it a address
It then scans the memory for all addresses that point in the block of the given address, and then goes down the found addresses

[macsbug]

The reverse pointer scan does appear to be what I was looking for...I think, thank you.

To clarify, a reverse pointer scan will search for any valid path to "Address to find" originating in the specified region, with no offset larger than "Size of structure", no more than "Max level"...levels deep - is that correct? Are any additional restrictions imposed? I apologize if this is detailed somewhere - the search function was unable to help me here.

[Dark Byte]

that is correct. Other restriction imposed (if you choose it) is that it can filter out pointer paths that don't have a static address in the path.

e.g if you give address 12345000 , and structsize 1024 and max level 2:
it scans all memory for addresses that contain a value between 12344000 and 12345000 and will do the same for all addresses it founds, and does that up to the given level (2)

[macsbug]

Excellent - then it is exactly what I was looking for, already turned up a few rather unexpected results actually

Thanks again for the help, greatly appreciate it.