Study Warcraft III full map for a while, here is a record of the production process.
First of all, the experience assumes that each unit has a mark, if it can be seen for 1 can not be seen for 0. Use Cheatengine to test the correctness of this conclusion.
Select a unit when there is a field of view when searching (byte type) 1, go to the place where you cannot see the unit search 0 Filter by multiple times
You can find an address that marks whether the unit is visible
Lock this value in CE back to the game to see this unit flashing
Use the CE to find out what's accessing this address.
6f3a20a3-66 8B 0C 41-mov cx,[ecx+eax*2]
6f00f5cd-0fb7 41-movzx Eax,word ptr [ecx+eax*2]
6f4ac4f4-0fb7 31-movzx Esi,word ptr [ecx]
6f4076f4-8b 0C 10-mov Ecx,[eax+edx]
game.dll+3a20ab-66 Bayi C9 00f0-or cx,f000 {61440}
game.dll+f5d1-0d 00f00000-or eax,f000 {61440}
These two commands are related to the full-image display unit.
We've changed the F000 to F001, and the map is open, and we can see the units outside the field.
This is the principle of the vast majority of assistive tools. Cheat by modifying the Game.DLL bytecode.
Other features, such as displaying stealth units, display the capabilities of the enemy signal can be achieved by modifying memory, GitHub on the different versions should patch the address, here is not tired of.
The Production of Warcraft III full map