Cheat Engine

Kahenraz · Newbie cheater Reputation: 0 Joined: 29 Jun 2015 Posts: 16

I'm scanning memory of a program in which I know the module I want to scan. Is there a way to prevent CE from wasting time scanning and then re-scanning addresses I know I don't want?

Dark Byte · Posted: Mon Jun 29, 2015 5:27 am Post subject:

use "Base address must be in specific range"
and fill in the range of the module you're interested in

Kahenraz · Newbie cheater Reputation: 0 Joined: 29 Jun 2015 Posts: 16

Thanks for the fast reply.

For program.exe which loads module1.dll, module2.dll, etc., how do I find the base address and memory range of program.exe?

I could write something using Win32 which does this but does CE have something built in?

Dark Byte · Posted: Mon Jun 29, 2015 6:16 am Post subject:

the base is easy, you can fill that in there (it uses ce's symbol handler to parse it)

To find the end is a bit more tricky, but just find the base address (in the hexview goto address and fill in "program.exe")
then open view->memory regions and expand it so the extra field is visible.
Go to the base address of program.exe and you'll see the extra field has it's name there. Just scroll down till the last one and you'll have the max address (on the next line)