View previous topic :: View next topic |
Author |
Message |
synack How do I cheat?
Reputation: 0
Joined: 22 Jul 2009 Posts: 2
|
Posted: Sat Oct 24, 2009 1:02 am Post subject: [Solved] Understanding how CE determines region addresses |
|
|
I'm looking through memoryscan.c and not really understanding how it's getting the list of memory region addresses. Could someone point me in the right direction (source or external documentation is fine) to how cheat engine is able to determine all memory regions of a process?
Backstory:
I'm working against a game to find the value of heath, among other things. I'm unable to locate the static pointer, but I have been able to find a byte signature that will allow me to get a pointer to the address i need. I'm trying to automate this, so I've prototyped a simple injected memory scanner in python, which works fine. The problem is (and here's where my ignorance shows) the memory address isn't within the bounds of any of the modules listed in the snapshot made via CreateToolHelp32Snapshot which is what I'm using to get my start and end addresses for the scan.
I wasn't sure whether to post this here somewhere in development. I'm sure you'll move it if it's in the wrong spot, sorry!
Last edited by synack on Sat Oct 24, 2009 7:56 am; edited 1 time in total |
|
Back to top |
|
 |
Dark Byte Site Admin
Reputation: 470
Joined: 09 May 2003 Posts: 25788 Location: The netherlands
|
Posted: Sat Oct 24, 2009 3:25 am Post subject: |
|
|
check memscan.pas instead
anyhow, it uses virtualqueryex to find the regions to scan
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
 |
synack How do I cheat?
Reputation: 0
Joined: 22 Jul 2009 Posts: 2
|
Posted: Sat Oct 24, 2009 7:56 am Post subject: |
|
|
Dark Byte wrote: | check memscan.pas instead
anyhow, it uses virtualqueryex to find the regions to scan |
Man, I don't know how I missed that function in my 8+ hours of digging, but I did. Thanks for the quick fix.
|
|
Back to top |
|
 |
|