Cheat Engine

[kangkung_sawah]

anyone can help me? how to find memory address on memory, example i want to find an integer and it has 4 value on xx.exe on process and i want to change it to 5 with creating a pointer on my app... i try it with CE and its work, and then i try to read and understanding the source, and i never understand coz to many code i dont understand, help me please !!! i just a newbie.....

sorry if my english is not well

[atom0s]

First things first, you should learn a language suitable for you before jumping straight into game hacking with it. You will only confuse yourself more if you jump into things too fast.

If you are familiar with a language already though, you can read/write information to another process using the following API:
- ReadProcessMemory
- WriteProcessMemory

These two API will require some more API for you to obtain access to a process and so on.

You can also create a DLL that will be injected into the process, which you will then have direct access to the processes memory, which does not require you to use API then to alter and read the processes memory.

[kangkung_sawah]

i'm learning about Threading and Process in C++ now, but i need more tutorial and guide to understanding them, can you show me some link about that? and i know there are a lot of source code, and i try to read and comprehending of it, but i hardly to do that..

[atom0s]

http://msdn.microsoft.com/en-us/library/ms684254%28VS.85%29.aspx

Will go a bit more indepth about threads and such. Also read the pages regarding the API mentioned in those articles. There are tons of links and information on the net, just use Google to find them. Use search patters if you need to for example:

C++ threading +tutorial +information

[kangkung_sawah]

thank you very much for all the information, now I can slightly understand about all that, and now, i can set a token privilege of my app and creating some thread... but dont have a way to suspending some process, any ideas?

[atom0s]

[kangkung_sawah]

wow...thanks a lot guys,, now i can suspend a thread and some process by calling a SuspendProcess function on ntdll.dll,,, but i would like to ask how to keep smaller size of compiled and linked file by static linked to MFC ?? any idea?? i dont wanna 1,6mb for one form only...

[atom0s]

[kangkung_sawah]

so... how to find some value in memory? i cant use WriteProcessMemory if i dont know where is to be written? please tell me how,,,

[iPromise]

If your aiming for your memory scanner to most likely be detected by any anti-hacking software that the game uses, you can just make a application use these api's:


- OpenHandle
- VirtualQueryEx
- ReadProcessMemory


and


- WriteProcessMemory


If you also want to tamper with memory.

If you want your memory scanner to be undetected, you can always inject your dynamic link library (dll) into your target, then use:


- VirtualQuery
- memcpy


To enumerate through the memory regions and find readable memory, then just copy the memory in the region and compare each value it has stored to what your looking for, and if you find matches write it to a temporary buffer, then after the scan is finished move the content of the buffer to something like a listbox if you want.

If you want to determine a static address from a dynamic address, your going to need to use this api:


- GetModuleHandleEx


With the GET_MODULE_HANDLE_EX_FLAG_FROM_ADDRESS flag.