View previous topic :: View next topic |
Author |
Message |
KevAqn Cheater Reputation: 0
Joined: 14 Nov 2014 Posts: 37
|
Posted: Sat Jun 30, 2018 11:06 am Post subject: Hooking Cheat Engines read/write... |
|
|
I've hooked OpenProcess, ReadProcessMemory, WriteProcessMemory and VirtualQueryEx. I seem to be running into an issue in terms of memory region queries and I'm not too sure if it's something weird with 64-bit programs or if I'm missing something else...
Are there more functions I need to be hooking?
Edit: It seems like sometimes the RPM/WPM/OpenProcess aren't being hooked... I'm not sure why this is, but I'm really starting to think I should just make a loop that constantly hooks the variables...
|
|
Back to top |
|
|
Dark Byte Site Admin Reputation: 457
Joined: 09 May 2003 Posts: 25262 Location: The netherlands
|
Posted: Sat Jun 30, 2018 12:35 pm Post subject: |
|
|
how do you hook it? using the plugin system, lua exported api pointers or windows hooks?
if plugin or lua, watch for pointer reset events as they can change when the user clicks on settings
if windows hook, check if kernelmode functions are used as they do not call the windows api
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
|
KevAqn Cheater Reputation: 0
Joined: 14 Nov 2014 Posts: 37
|
Posted: Sat Jun 30, 2018 12:42 pm Post subject: |
|
|
It's a C++ based on the physical memory plugin you wrote in the past and using the example solution file in the source code of CE. Was not aware that I should be looking for pointer resets.
|
|
Back to top |
|
|
KevAqn Cheater Reputation: 0
Joined: 14 Nov 2014 Posts: 37
|
Posted: Sun Jul 01, 2018 3:05 pm Post subject: |
|
|
One last question, it would appear that CE thinks my 64bit process i attach to is 32 bit. I believe that should be something I'm doing wrong in my OpenProcess? Is there a way I can just force 64bit mode? (I plan on always attaching to 64bit programs.)
|
|
Back to top |
|
|
Dark Byte Site Admin Reputation: 457
Joined: 09 May 2003 Posts: 25262 Location: The netherlands
|
Posted: Sun Jul 01, 2018 3:11 pm Post subject: |
|
|
yes there is a lua command (and an option in the disassembler view)
i can't check what i called it right now (stuff) but check celua.txt
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
|
KevAqn Cheater Reputation: 0
Joined: 14 Nov 2014 Posts: 37
|
Posted: Mon Jul 02, 2018 1:22 am Post subject: |
|
|
I think I found the option (in the disassembler), that appears to be able to change it, but it doesn't appear to change the way structure dissect functions on pointers or how I believe memory regions will be queried.
|
|
Back to top |
|
|
Dark Byte Site Admin Reputation: 457
Joined: 09 May 2003 Posts: 25262 Location: The netherlands
|
Posted: Mon Jul 02, 2018 2:21 am Post subject: |
|
|
lua has a pointersize override you can use
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
|
KevAqn Cheater Reputation: 0
Joined: 14 Nov 2014 Posts: 37
|
Posted: Mon Jul 02, 2018 11:05 am Post subject: |
|
|
Found the two things you were mentioning. It works amazingly now. Thank you so much for the help
|
|
Back to top |
|
|
|