View previous topic :: View next topic |
Author |
Message |
Dark Byte Site Admin Reputation: 465
Joined: 09 May 2003 Posts: 25570 Location: The netherlands
|
Posted: Tue Jan 27, 2009 6:47 pm Post subject: Virtual Pagedir and improved physical memory browse ( In C ) |
|
|
Here's a plugin that will read the memory using physical memory instead of virtual memory by reading the CR3 control register and traversing the page tables at the physical side of memory (So it will only find memory that is actually being accessed by the game, and not paged out)
It also includes an improved physical memory browser, accessible from the processlist.
It's tested with a PAE system, could be I messed up with the non pae part though, so fix it if you like.
(and for those that look through the code and want to compile, yeah, I guess I should care more about type and type safety, problem is, I couldn't get myself... same goes for splitting up the code into separate sourcefiles)
Code: |
virtualpagedir.c:
This plugin will hook openprocess.
If the opened process is not Cheat engine itself it'll redirect the ReadProcessMemory calls to it's own
internel equivalents of ReadProcessMemory and WriteProcessMemory and try to get the CR3 register of the
target process. (CR3 holds the physical address address of the pagetable of a process)
In the new Read/WriteProcessMemory the provided virtual address is converted to a physical address by
traversing the pagetable structure (Keeping in mind about normal, PAE, and in the future 64-bit paging)
Finally the physical address is read out and sent to the caller.
Due to a problem with readphysicalmemory not mapping above 0x80000000 and not everyone wnts to boot up
with dbvm, readphysicalmemory is implemented by mapping the physical address to 0x1000
VirtualQueryEx is also hooked to provide a memory region overview of accesible memory
-------------------
The Processlist is also extended with a [Physical Memory 2 (plugin)] entry by hooking the Process32First
/Process32Next links
The function of this is to provide an improved Read Physical Memory substitute for ce leaving the original
so it can be used to compare. It is quite easy to just replace the original ReadPhysicalMemory of ce so no
new entry is needed in the processlist
|
todo: When not present, see if you can fetch it from the pagefile, and if possible, write to the pagefile as well
note: Remember, it doesn't implement copy on write, so if you change a module address, you're changing it in all processes that use that module
note2: Yes, it can be abused as an alternative form of memory bypass
Download: http://cheatengine.org/download/virtualpagedir.rar
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping
Last edited by Dark Byte on Mon Jan 18, 2010 8:11 pm; edited 4 times in total |
|
Back to top |
|
|
BanMe Master Cheater Reputation: 0
Joined: 29 Nov 2005 Posts: 375 Location: Farmington NH, USA
|
Posted: Tue Jan 27, 2009 7:18 pm Post subject: |
|
|
excellent plugin DB!!
if i had a job id give u money! then again if i had a job i wouldn't spend so much time here helping noobs...but we all were noob at 1 point
Thanx again, invaluable source xD yet i do not see why you allow the CRT or CLR to bloat your code.. (i despise CLR and CRT!) but none the less excellent! it reminds of DebugX2, mooses, and FairX's code
regards BanMe
|
|
Back to top |
|
|
_dan How do I cheat? Reputation: 0
Joined: 06 May 2009 Posts: 3
|
|
Back to top |
|
|
Cheat Engine User Something epic Reputation: 60
Joined: 22 Jun 2007 Posts: 2071
|
|
Back to top |
|
|
Dark Byte Site Admin Reputation: 465
Joined: 09 May 2003 Posts: 25570 Location: The netherlands
|
Posted: Wed May 06, 2009 10:11 am Post subject: |
|
|
I've uploaded it here: http://cheatengine.org/download/virtualpagedir.rar
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping
Last edited by Dark Byte on Mon Jan 18, 2010 8:12 pm; edited 1 time in total |
|
Back to top |
|
|
NooBpluSS Cheater Reputation: 0
Joined: 24 Jun 2007 Posts: 37
|
Posted: Tue Jul 28, 2009 7:59 pm Post subject: |
|
|
Ohhh !! Nice
Now I go try write it in delphi or put it in the driver ;P..
_________________
Newbie cheater ;] |
|
Back to top |
|
|
BanMe Master Cheater Reputation: 0
Joined: 29 Nov 2005 Posts: 375 Location: Farmington NH, USA
|
Posted: Fri Jul 31, 2009 6:14 pm Post subject: |
|
|
you have fun doing that...cause that isn't possible delphi isnt for driver development..
_________________
don't +rep me..i do not wish to have "status" or "recognition" from you or anyone.. thank you. |
|
Back to top |
|
|
user601 Moderator Reputation: 0
Joined: 07 Oct 2004 Posts: 65
|
Posted: Fri Jul 31, 2009 6:37 pm Post subject: |
|
|
this plugin can be ported to delphi without a problem.
As for driver development, alone delphi can't make drivers no, but you can make obj files that you can link into your project. (you'll have to write all imports yourself first though which is annoying)
_________________
|
|
Back to top |
|
|
Ind3siszive Cheater Reputation: 0
Joined: 23 Apr 2009 Posts: 43 Location: in a glitch
|
Posted: Mon Jan 18, 2010 10:14 am Post subject: |
|
|
its gone again, I would like to download it too
_________________
|
|
Back to top |
|
|
Dark Byte Site Admin Reputation: 465
Joined: 09 May 2003 Posts: 25570 Location: The netherlands
|
Posted: Mon Jan 18, 2010 8:12 pm Post subject: |
|
|
updated the link
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
|
Irtzach How do I cheat? Reputation: 0
Joined: 21 Oct 2015 Posts: 2
|
Posted: Wed Oct 21, 2015 11:29 am Post subject: I have tried but |
|
|
i have downloaded what u have posted now dont know from where or howto use it... i have to open it with cheat engine???
Description: |
|
Filesize: |
104.57 KB |
Viewed: |
49371 Time(s) |
|
|
|
Back to top |
|
|
atom0s Moderator Reputation: 202
Joined: 25 Jan 2006 Posts: 8552 Location: 127.0.0.1
|
Posted: Sun Oct 25, 2015 9:49 pm Post subject: |
|
|
You need to place the .dll inside of the Cheat Engine plugin folder. If you want to build from source yourself, you need to download Visual Studio if you want to use the premade .sln file. Otherwise you will need to rebuild a new project in your personal editor of choice.
_________________
- Retired. |
|
Back to top |
|
|
lylcheat Cheater Reputation: 0
Joined: 14 Feb 2009 Posts: 27 Location: Planet 3 Solar System Orion Arm Spiral Galaxy Milky Way
|
|
Back to top |
|
|
|