Cheat Engine

[emmmre]

Hello,
Trying to edit memory which guarding with Game guard game.
I can't edit memory when default settings with C.E.
But When I change the Debugging Options->Use windows debugger to use kernelmode driver (Requires DBVM), I can successfully change the memory.

I want to code in C++.
WriteProcessMemory fails, GetLastError returns 5 which is ACCESS_DENIED.

So I want to use dbk32.sys (Cheat Engine's file) to write memory.

But GetProcAddress returns 0.

Need Help, Thanks.

My C++ Code:

[atom0s]

Drivers are not loaded with LoadLibrary. You also do not use GetProcAddress with them to call their functions, you use the DeviceIoControl API.

https://docs.microsoft.com/en-us/windows/win32/api/ioapiset/nf-ioapiset-deviceiocontrol

For loading/unloading the driver, you need to use the Windows service manager:
- OpenSCManager
- CreateService / OpenService
- ChangeServiceConfig (if needed for your specific setup)
- StartService

and so on. All service related functions can be found on MSDN as well here:
https://docs.microsoft.com/en-us/windows/win32/services/service-functions

There are other means of loading a driver, but I'd suggest not digging into those until you understand what you're doing with the basics of using one first.

You can find the needed IOCTL info for CE's driver here:
https://github.com/cheat-engine/cheat-engine/blob/master/Cheat%20Engine/dbk32/DBK32functions.pas

[emmmre]

[syevale123]

Your suggestion is very important for me. It is useful for my work . Thanks a lot.