Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Hooking Cheat Engines read/write...

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine
View previous topic :: View next topic  
Author Message
KevAqn
Cheater
Reputation: 0

Joined: 14 Nov 2014
Posts: 37

PostPosted: Sat Jun 30, 2018 11:06 am    Post subject: Hooking Cheat Engines read/write... Reply with quote

I've hooked OpenProcess, ReadProcessMemory, WriteProcessMemory and VirtualQueryEx. I seem to be running into an issue in terms of memory region queries and I'm not too sure if it's something weird with 64-bit programs or if I'm missing something else...

Are there more functions I need to be hooking?

Edit: It seems like sometimes the RPM/WPM/OpenProcess aren't being hooked... I'm not sure why this is, but I'm really starting to think I should just make a loop that constantly hooks the variables...
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 457

Joined: 09 May 2003
Posts: 25262
Location: The netherlands

PostPosted: Sat Jun 30, 2018 12:35 pm    Post subject: Reply with quote

how do you hook it? using the plugin system, lua exported api pointers or windows hooks?

if plugin or lua, watch for pointer reset events as they can change when the user clicks on settings

if windows hook, check if kernelmode functions are used as they do not call the windows api

_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
KevAqn
Cheater
Reputation: 0

Joined: 14 Nov 2014
Posts: 37

PostPosted: Sat Jun 30, 2018 12:42 pm    Post subject: Reply with quote

It's a C++ based on the physical memory plugin you wrote in the past and using the example solution file in the source code of CE. Was not aware that I should be looking for pointer resets.
Back to top
View user's profile Send private message
KevAqn
Cheater
Reputation: 0

Joined: 14 Nov 2014
Posts: 37

PostPosted: Sun Jul 01, 2018 3:05 pm    Post subject: Reply with quote

One last question, it would appear that CE thinks my 64bit process i attach to is 32 bit. I believe that should be something I'm doing wrong in my OpenProcess? Is there a way I can just force 64bit mode? (I plan on always attaching to 64bit programs.)
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 457

Joined: 09 May 2003
Posts: 25262
Location: The netherlands

PostPosted: Sun Jul 01, 2018 3:11 pm    Post subject: Reply with quote

yes there is a lua command (and an option in the disassembler view)
i can't check what i called it right now (stuff) but check celua.txt

_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
KevAqn
Cheater
Reputation: 0

Joined: 14 Nov 2014
Posts: 37

PostPosted: Mon Jul 02, 2018 1:22 am    Post subject: Reply with quote

I think I found the option (in the disassembler), that appears to be able to change it, but it doesn't appear to change the way structure dissect functions on pointers or how I believe memory regions will be queried.
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 457

Joined: 09 May 2003
Posts: 25262
Location: The netherlands

PostPosted: Mon Jul 02, 2018 2:21 am    Post subject: Reply with quote

lua has a pointersize override you can use
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
KevAqn
Cheater
Reputation: 0

Joined: 14 Nov 2014
Posts: 37

PostPosted: Mon Jul 02, 2018 11:05 am    Post subject: Reply with quote

Found the two things you were mentioning. It works amazingly now. Thank you so much for the help Smile
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites