Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Memory Heap Blocks

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine Source
View previous topic :: View next topic  
Author Message
fred26
Expert Cheater
Reputation: 0

Joined: 20 Dec 2014
Posts: 101

PostPosted: Sun Dec 17, 2017 9:46 am    Post subject: Memory Heap Blocks Reply with quote

I would like to understand how CE works when scanning AOB in memory.

To be more direct, how does it do to search for Heap Blocks.

What is CE's approach?

1) Does it calls VirtualQueryEx passing the GetCurrentProcess() returned HANDLE and loops until done finding for MEM_COMMIT and MEM_PRIVATE blocks?

Or

2) It creates a snapshot via CreateToolhelp32Snapshot and it loops through each Module and then uses the Heap32First and Heap32ListNext to find the memory blocks?

I found that approach 1) may miss Heap Allocations done in the process DLLs modules?

Any hints are appreciated.

Thanks
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 346

Joined: 09 May 2003
Posts: 20193
Location: The netherlands

PostPosted: Sun Dec 17, 2017 2:08 pm    Post subject: Reply with quote

1

but no filter on mem_private, anything readable is scanned (except mem_mapped if that is disabled in settings)

heap data is also found with virtualqueryex (though watch out if you run it in an injected dll)

_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Back to top
View user's profile Send private message MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine Source All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites