Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Way to monitor another processes Mem Address being modified?

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> General programming
View previous topic :: View next topic  
Author Message
pursuited357
Cheater
Reputation: 0

Joined: 23 Sep 2020
Posts: 26

PostPosted: Sun Aug 01, 2021 6:33 pm    Post subject: Way to monitor another processes Mem Address being modified? Reply with quote

I know there is something like this:
https://docs.microsoft.com/en-us/windows/win32/api/memoryapi/nf-memoryapi-getwritewatch

I think thats along what I am trying to explain.

Is there a Program that can monitor "*<Program1> attached to <MiscProgram>*" and be able to detect the changes it may or may not be doing to the *<MiscProgram>* ?

Lets say *<Program1>* is modifiying Memory Addresses of *<MiscProgram>*
-Is there a program that can say *<Program1>* has modified or is attempting to modify a* <MiscProgram> *memoryaddress '19D7F4B00F0' (example)

Does my question make sense?
Is there a program that does this already or a decent source code example??

Or more or less do this with VS2019....
Back to top
View user's profile Send private message
atom0s
Moderator
Reputation: 198

Joined: 25 Jan 2006
Posts: 8516
Location: 127.0.0.1

PostPosted: Sun Aug 01, 2021 10:43 pm    Post subject: Reply with quote

There were old tools like tSpy, TrainerSpy, etc. that would do this. Basically you can just hook ReadProcessMemory / WriteProcessMemory and log what calls are being made from within the 'Program1'. (Or hook the lower level NT versions of the functions as needed.)
_________________
- Retired.
Back to top
View user's profile Send private message Visit poster's website
Dark Byte
Site Admin
Reputation: 457

Joined: 09 May 2003
Posts: 25262
Location: The netherlands

PostPosted: Mon Aug 02, 2021 4:17 am    Post subject: Reply with quote

if it's memory that's part of a module then you can use CE's patch scanner tool to give you a result of all the memory that got changed.
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> General programming All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites