Cheat Engine

BlackDeviL13 · Newbie cheater Reputation: 0 Joined: 17 Mar 2012 Posts: 15

I want to detect .sys process in delphi.
I've tried using ModuleEntry32 but it just return .dll process.
Can anyone give the source to detect .sys process and store it in a listbox?
Thanks Before Very Happy

Dark Byte · Posted: Fri Mar 23, 2012 5:32 am Post subject:

enumdevicedrivers and GetDevicedriverBaseNameA

check: http://code.google.com/searchframe#R_UxfE3PeLI/trunk/Cheat%20Engine/CEFuncProc.pas&q=getDriverList%20package:http://cheat-engine%5C.googlecode%5C.com&l=3499

BlackDeviL13 · Newbie cheater Reputation: 0 Joined: 17 Mar 2012 Posts: 15

Thanks,,
BUT,

What is PtrUint?

and can I suspend/unload those .sys?

Dark Byte · Posted: Fri Mar 23, 2012 7:01 am Post subject:

ptruint is a dword when compiled in 32-bit and a qword when compiled in 64-bit

and you can't unload those .sys files, you need to unload the devices that are made by those .sys files, and only if those devices support unloading, and if they don't require a special code to unload.
in short: Try to prevent them from being loaded in the first place...

BlackDeviL13 · Newbie cheater Reputation: 0 Joined: 17 Mar 2012 Posts: 15

Can delphi unload the devices that are made by those .sys?
I know this may trigger BSOD, but I want to try it.

and how can I prevent them from being loaded?
for example, I want to prevent asdf.sys from being loaded.
how is the trick?

Can you help this one too?

forum. cheatengine. org/viewtopic. php?t=549728

Thank You Very Much Very Happy

NoMercy · Posted: Fri Mar 23, 2012 8:15 am Post subject:

Hook: StartService, CreateService.