Cheat Engine

SuperAndromeda · Newbie cheater Reputation: 0 Joined: 30 Jul 2022 Posts: 12

Hello, I'm a beginner at CE, so take it easy on me.

I got a green address after searching for "what access the target address" once. It is in the form of process-name.dll + address (gameoverlayrenderer.dll+10F684).

The values I want to control are the controller inputs for the 4 players of the game (Rivals of Aether), and each of them is distinguished by one offset of F8 plus a register times 8 (which is always a multiple of hex 10). The problem is, each time I open the game the offsets are redistributed. How do I get a pointer which has a fixed offset?

ParkourPenguin · Posted: Sat Feb 24, 2024 1:57 am Post subject:

Try the pointer scanner.
https://www.youtube.com/watch?v=3dyIrcx8Z8g

If it really only goes through that data structure, you'll have to loop through each element in that array and figure out which one it is. Similar to step 9 of the CE tutorial.

Code injection is an alternative. Search "injection copy"

SuperAndromeda · Newbie cheater Reputation: 0 Joined: 30 Jul 2022 Posts: 12

ParkourPenguin · Posted: Sun Feb 25, 2024 12:36 pm Post subject:

When dissecting data, you can also look at the structures pointed to by pointers in the structure being dissected.
There are tons of walkthroughs going over step 9 of the CE tutorial if you want help or examples. Search on youtube.

Regarding code injection, you'd ideally find a better injection point. Specifically one that only accesses the address you want. If no such instructions access this address, try other addresses in the same structure. You only need a pointer to the structure itself- the offset to the address of the value you want will always be the same (0xF8).
If you can find something that distinguishes the address you want from those you don't (CE tutorial step 9), you could use that injection point anyway.

Also, when you said "offsets are redistributed", you were talking about ecx, right? esi changing is expected. ecx changing is not.
If you want the controller inputs for all 4 players and not just one specific player, isn't that pretty much what you already have? What other addresses does that instruction access?

SuperAndromeda · Newbie cheater Reputation: 0 Joined: 30 Jul 2022 Posts: 12

SuperAndromeda · Newbie cheater Reputation: 0 Joined: 30 Jul 2022 Posts: 12

So, I managed to find a commonality among the 4 addresses that distinguishes each player (offset C), but it's in the RSP (Snapshot). Do you think it can work?

If it does, do you think I can inject a code in which I can move values to a fixed address according to the value of RSP+C?

ParkourPenguin · Posted: Tue Mar 05, 2024 1:02 pm Post subject:

ESP is the stack pointer. I'd need to look at more of the original code to see if it's technically safe, but you can try it anyway.
Just watch out for instructions that modify ESP. e.g. if you're backing up a register with push/pop, you'll need to change the offset accordingly.