Finding named Data Structures

[Aboleth]

Hello,

I've been sitting on a game for over a week now and trying to find an entity list.
I know the complete data structure of the game, it's written in C++ and I have access to the GitHub code which makes it easier for me to understand class logic.

However I ran into an issue.
I found all instances of a certain structure (class).

---

An example:

When finding the Player object and dissecting the structure of the base, CE is so nice as to suggest: "This is CPlayerBase, do you want to name it like that?"

However, let's assume I want to find an instance of CWhateverOtherClassIKnowExists?
There's a script from Dark Byte that finds all class instances based on visual studio classnames, which also results in finding CWhateverOtherClassIKnowExists@@, but it won't find any instances.

In fact when I look for CPlayerBase@@ I won't find any instances either, even though I know it exists.

---

I tried removing the @@s, just because I thought it might be related, but no luck there either.
Any clues as to how else I could find things instances of a class CheatEngine clearly knows?

[Shaggalicious]

i'm not sure i'm gonna be any help here but, if you can clarify some things i may be able to help you look.

first of all what game are you talking about?
you are able to view the games sourcecode i understand? is it posted on github as open-source or did someone dump it?
do you know what engine it runs on?

you say you have a script by darkbyte that finds all "instances", are you sure these are instances or do you just mean class names?
can you link me the script?

[Paul44]

^^ @Aboleth: If the instances inherit/have the same VFT(ptr), you could scan for that pointer (from its main class). However: from the top of my head, i expect that the resultslist will give you all instances then, including ones no longer in use; or are part of a different group of structs ?! (eg: npc_struct_vft can/will return human/animal/bird/etc structs)
Btw: i have no idea if this 'inheritance' is consistent though, but it does work: eg to find all 'archers' in a game, you just need to find one and then scan for its VFT-ptr ~ i do this regularly... (and yep: if you just killed one, it will usually stay in the list for "some" time)

@Shaggalicious: names, not instances "per se" (and that is probably what he meant to say). This CE feature interacts the moment you dissect a structure...You'll find the lua script @CEF.
(don't ask me for details; well above my pay grade )