Cheat Engine

xiaoy312 · How do I cheat? Reputation: 0 Joined: 09 Mar 2010 Posts: 1

Hi DarkByte

Im working on a projet and I need to find an address of Unicode String. Ive tried few mem scan method in C# but the time that it takes in terrible. Im really amazed by ur cheatengine efficacy.

I was asking if there is any method that let me use ur mem scan outside of CheatEngine.

Ive looked over ur code (memscan.pas). But I really have no idea how I can use it.

So could you show me a simple exemple?

Slugsnack · Posted: Sun Mar 14, 2010 5:12 pm Post subject:

what about if you just use wcscmp()

Dark Byte · Posted: Sun Mar 14, 2010 6:32 pm Post subject:

My guess is that he's making the same mistake as almost everyone that makes a memory scanner:
Calling ReadProcessMemory for every single byte

So, first my usual answer:
First find out the memory regions of the application. Do that using VirtualQueryEx, then either allocate a buffer that's big enough to hold the biggest contiguos region, or split it up into smaller chunks (when splitting up, take into mind of overlap, so then always allocate the stringsize*2 extra)

Then go through that region list and call ReadProcessMemory for the whole block (+overlap if required) and write it to the buffer

Then scan the buffer

CristoferMartins · Newbie cheater Reputation: 0 Joined: 18 Dec 2009 Posts: 22

Dark Byte · Posted: Sat Mar 20, 2010 11:59 am Post subject:

VirtualQuery(Ex)
As for the access violation, is it a dll?
If so, protect every read with a try/except because the game might free a block even while you're still reading it

CristoferMartins · Newbie cheater Reputation: 0 Joined: 18 Dec 2009 Posts: 22

Dark Byte · Posted: Sat Mar 20, 2010 1:38 pm Post subject:

I see used the ce source

have you allocated (setlength) the memRegion array yet (to at least 16) and also initialized the memRegionPos variable to 0 ?

memregionpos holds the current free index of the memRegion array (should be 0 at first run)

CristoferMartins · Newbie cheater Reputation: 0 Joined: 18 Dec 2009 Posts: 22

Dark Byte · Posted: Sat Mar 20, 2010 2:19 pm Post subject:

you probably want to have scan_mem_image and scan_mem_image to true, and scan_mem_mapped to false since mapped memory is useless most of the time anyhow

as for your rewrite of the if condition, I recommend just splitting ity apart so it's something you want

CristoferMartins · Newbie cheater Reputation: 0 Joined: 18 Dec 2009 Posts: 22

Dark Byte · Posted: Sat Mar 20, 2010 3:24 pm Post subject:

that's a normal amount yes

CristoferMartins · Newbie cheater Reputation: 0 Joined: 18 Dec 2009 Posts: 22

Dark Byte · Posted: Sat Mar 20, 2010 3:46 pm Post subject:

Just implement your own memory scanner from scratch, it'll be a lot easier than trying to get pieces of ce slapped together to work

anyhow, place the copy code between a try/except since as I have said, the game might have freed the memory

as for the startaddress and baseaddress:
startaddress is the offset in the allocated block of memory that contains the whole game's memory. E.g first region will always be 0, second one will be 0+firstregionssize, etc...
the baseaddress is just the baseaddress that region starts at in the game's location
for dll's this method can be different since you don't really need to copy the memory to scan

Also, the big problem with dll memory scanning is that it also scans it's own memory, which is why i'm scrapping hyperscan from ce, it's useless

CristoferMartins · Newbie cheater Reputation: 0 Joined: 18 Dec 2009 Posts: 22

Dark Byte · Posted: Sat Mar 20, 2010 7:25 pm Post subject: