Cheat Engine

Fandom · How do I cheat? Reputation: 0 Joined: 01 Aug 2014 Posts: 3

Hello, I would like to know -- how CE knows the data types of variables in Structure Dissect?

Dark Byte · Posted: Sat May 02, 2015 7:21 pm Post subject:

If .net or mono, it checks the metadata describing the object you're kooking at

Otherwise it just guesses blindly based on some rules.
E.g if it is unaligned, pick a type that will align the next entry
If the 4 byte value represents a human readable address (below 1000 or ending with a 0) it's a 4 byte
If the 4/8 bytes represent an currently allocated memory address, it's a pointer
And for float and double it also checks if the value is human readable If it requires an Exponent , then no

Fandom · How do I cheat? Reputation: 0 Joined: 01 Aug 2014 Posts: 3

Few more questions Dark Bye, and thanks for your time.

i) What if two short ints are beside each other, how would you know if its an int or two shorts?

ii) For a 4 byte, how can you tell if its a pointer or variable?
eg. the 4 byte holds 0x40AA, it could be an address or data. Do you check and see if the address(0x40AA) is in the data section (from PE header)?

Dark Byte · Posted: Sat May 02, 2015 7:44 pm Post subject:

1: try a debugger and see what writes to it. CE will almost certainly not guess it
2: check if the address is currently allocated Also, windows will never allocate memory in the range of 00000000 to 000010000

Fandom · How do I cheat? Reputation: 0 Joined: 01 Aug 2014 Posts: 3

Thanks a lot mate:)

Good day my friend and thanks for your time.