Cheat Engine

[Xhayla]

Hello, I used to use the "StealthEdit" plugin in CE to bypass code integrity checks, but now there is a desire to do the same, only in C ++.

Here is the code -

Code:

#include <Windows.h> #include <string>   DWORD dwOld; DWORD jmp_original;   DWORD from_addr = address;   __declspec(naked) void patch() {     __asm     {         mov eax, 1         jmp jmp_original     } }   LONG WINAPI HookPage(EXCEPTION_POINTERS *pExceptionInfo) {     if (pExceptionInfo->ExceptionRecord->ExceptionCode == STATUS_GUARD_PAGE_VIOLATION)     {         if (pExceptionInfo->ContextRecord->Eip == from_addr)         {             jmp_original = (DWORD)(pExceptionInfo->ContextRecord->Eip + 5);             pExceptionInfo->ContextRecord->Eip = reinterpret_cast<DWORD>(&patch);         }           pExceptionInfo->ContextRecord->EFlags |= 0x100;           return EXCEPTION_CONTINUE_EXECUTION;     }       if (pExceptionInfo->ExceptionRecord->ExceptionCode == STATUS_SINGLE_STEP)     {         DWORD dwOld;         VirtualProtect(reinterpret_cast<void*>(from_addr), 5, PAGE_EXECUTE | PAGE_GUARD, &dwOld);           return EXCEPTION_CONTINUE_EXECUTION;     }       return EXCEPTION_CONTINUE_SEARCH; }   void main() {     VirtualProtect(reinterpret_cast<void*>(from_addr), 5, PAGE_EXECUTE | PAGE_GUARD, &dwOld);     auto hVEH = AddVectoredExceptionHandler(true, static_cast<PVECTORED_EXCEPTION_HANDLER>(HookPage)); }   BOOL APIENTRY DllMain( HMODULE hModule,                        DWORD  ul_reason_for_call,                        LPVOID lpReserved                      ) {     switch (ul_reason_for_call)     {     case DLL_PROCESS_ATTACH:         main();           break;     case DLL_THREAD_ATTACH:     case DLL_THREAD_DETACH:     case DLL_PROCESS_DETACH:         break;     }     return TRUE; }

There is a game in which you need to remove the “fog” on the mini-map (to see opponents on the mini-map), when I do it through the StealthEdit plugin on CE, FPS does not change, but if through VEH on C ++, FPS drops up to 30-40 FPS ... I don’t know what the problem is ...

[Dark Byte]

copy the whole page and the overlapping pageboundary instructions to the patchcode and not just the line you patch, else you will get very long page guard, single step, pageguard, single step,pageguard loops

the less exceptions the better

(do adjust rip relative instructions that jump outside of the range to to original)

[Xhayla]

[quote="Dark Byte"]copy the whole page and the overlapping pageboundary instructions to the patchcode and not just the line you patch, else you will get very long page guard, single step, pageguard, single step,pageguard loops

the less exceptions the better

(do adjust rip relative instructions that jump outside of the range to to original)

Hello Dark Byte

4 hours trying to do what you wrote to me about, as a result - failure

[Dark Byte]

Eip == from_addr

you're looking for a specific address, it has to be a full pagerange

[Xhayla]