Cheat Engine

justdream · How do I cheat? Reputation: 0 Joined: 04 Apr 2012 Posts: 7

Hi guys,

I've searched in some places but not found ...
I would like to know how the trainers created with "CheatEngine Trainer Generator" write in the processes memory..

I've created a simple trainer and debugged it in OllyDbg, but I see no call of "WriteProcessMemory" API...

Can anyone explain me?

Thanks.

661089799107

justdream · How do I cheat? Reputation: 0 Joined: 04 Apr 2012 Posts: 7

Interesting...
However, some anti-hack systems block the WriteProcessMemory API, but the WPM of CE trainers works perfectly..
Can you explain me how it's done?

Dark Byte · Posted: Mon Jun 18, 2012 8:28 pm Post subject:

perhaps they make use of the kernelmode wpm/rpm api (just call dbk_useKernelmodeProcessMemoryAccess() )

Or they add a extra plugin like the virtualpagedir plugin that bypasses all hooks including kernelmode

Or they disable the anti hack before writing

Or WPM is only blocked from editing certain regions and they use a certain plugin to redirect execution to a copy outside of the protected region

Or WPM isn't really blocked and you're just doing something wrong yourself when using wpm (e.g not obtaining se_Debugprivilege, not making the page writable, etc...)