Cheat Engine

dotcom · How do I cheat? Reputation: 0 Joined: 16 Dec 2012 Posts: 3

Hi all!, I'm new to this, I was looking for but did not find anything yet, What I want to know, how do I get files that appear in the memory viewer, to be more accurate are .EDF. I would like to extract them to a folder on my hard drive. Please can someone help

Dark Byte · Posted: Sun Dec 16, 2012 11:07 am Post subject:

search for the header signature/format of the .EDF file, then find out the size (sometimes in the header, or just brute force reading till the end) and then use writeRegionToFile(filename, startaddress, size) to write it to disk

dotcom · How do I cheat? Reputation: 0 Joined: 16 Dec 2012 Posts: 3

Thank you thank you very much for answering dark!, Look I'm new to this, do not know much, but now I would like to learn fast is something I wanted to do, here I leave a picture and tell me how I do it?, If any I search script but do not know much of programming either. If I can help I will be grateful all my life with you, is something I want to do this long ago. Thank you! I send the screenshot by mp!. Thanks!

Dark Byte · Posted: Sun Dec 16, 2012 1:27 pm Post subject:

There's not much I can do with that. It's just a string

dotcom · How do I cheat? Reputation: 0 Joined: 16 Dec 2012 Posts: 3

Oh, u.u, i send you other screenshot. Thanks for answer me!
I'm trying to accomplish everything but I can remove, or when I can achieve anything I put the solution in this post.

If you want we can do this via teamviewer, I'd appreciate it all!

devilkkw · How do I cheat? Reputation: 0 Joined: 16 Dec 2012 Posts: 3

im very interessed on this argument,but im noob.
i found some file loaded in memory,and how is correct way to dump it?

Where is the way to found EDF?

thank you a lot for answer.

Dark Byte · Posted: Mon Dec 17, 2012 6:49 am Post subject:

Memory with a filename in it means nothing. When a file has been loaded into memory, it doesn't have a filename.

You must open the .edf files with a hexeditor and see if you can find a way to recognize them in memory by a header or other kind of signature, then scan for that, and then find a way to determine the size