First Scan: Finding a Value

Code Example

// Pointer chain resolution
uintptr_t base = GetModuleBase("game.exe") + 0x12345;
uintptr_t ptr1 = *(uintptr_t*)(base + 0x10);
uintptr_t ptr2 = *(uintptr_t*)(ptr1 + 0x20);
int health = *(int*)(ptr2 + 0x8);

Commands & References

• ReadProcessMemory(hProcess, addr, ...)
• First Scan / Next Scan in Cheat Engine
• Add address to list

Lab Steps

1. Set up your environment: ReadProcessMemory(hProcess, addr, ...)
2. Locate the target process or game and attach your tool.
3. Apply the technique and verify the result.
4. Document your findings and any variations.
5. Consider detection risks and mitigation.

Exercises

• Try the same technique on a different value type or game.
• Explore what happens when the game updates.
• Consider how anti-cheat might detect this.
• Design a minimal, undetectable implementation.