Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Patch scanner

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine Extensions
View previous topic :: View next topic  
Author Message
Dark Byte
Site Admin
Reputation: 361

Joined: 09 May 2003
Posts: 21345
Location: The netherlands

PostPosted: Wed Feb 20, 2019 5:32 pm    Post subject: Patch scanner Reply with quote

This extension will add a new menu item to the memory viewer under tools (below dissect pe header, ctrl+shift+p)

It will scan the selected module for changes.

Example of using it: Open chrome.exe, start the patch scanner, select ntdll.dll and you'll see it'll fill with diffs
Code:

Diff found at 7ffaa70aab30 (ntdll.NtSetInformationThread)
Diff found at 7ffaa70aab38 (ntdll.ZwSetInformationThread+8)
Diff found at 7ffaa70aae10 (ntdll.NtOpenThreadToken)
Diff found at 7ffaa70aae18 (ntdll.ZwOpenThreadToken+8)
Diff found at 7ffaa70aae50 (ntdll.NtOpenProcess)
Diff found at 7ffaa70aae58 (ntdll.ZwOpenProcess+8)
Diff found at 7ffaa70aae70 (ntdll.NtSetInformationFile)
Diff found at 7ffaa70aae78 (ntdll.ZwSetInformationFile+8)
Diff found at 7ffaa70aae90 (ntdll.NtMapViewOfSection)
Diff found at 7ffaa70aae98 (ntdll.ZwMapViewOfSection+8)
Diff found at 7ffaa70aaed0 (ntdll.ZwUnmapViewOfSection)
Diff found at 7ffaa70aaed8 (ntdll.NtUnmapViewOfSection+8)
Diff found at 7ffaa70aaf70 (ntdll.ZwOpenThreadTokenEx)
Diff found at 7ffaa70aaf78 (ntdll.NtOpenThreadTokenEx+8)
Diff found at 7ffaa70aaf90 (ntdll.ZwOpenProcessTokenEx)
Diff found at 7ffaa70aaf98 (ntdll.NtOpenProcessTokenEx+8)
Diff found at 7ffaa70aaff0 (ntdll.ZwOpenFile)
Diff found at 7ffaa70aaff8 (ntdll.NtOpenFile+8)
Diff found at 7ffaa70ab130 (ntdll.ZwQueryAttributesFile)
Diff found at 7ffaa70ab138 (ntdll.ZwQueryAttributesFile+8)
Diff found at 7ffaa70ab430 (ntdll.ZwCreateFile)
Diff found at 7ffaa70ab438 (ntdll.ZwCreateFile+8)
Diff found at 7ffaa70acda0 (ntdll.NtOpenProcessToken)
Diff found at 7ffaa70acda8 (ntdll.NtOpenProcessToken+8)
Diff found at 7ffaa70ace60 (ntdll.NtOpenThread)
Diff found at 7ffaa70ace68 (ntdll.NtOpenThread+8)
Diff found at 7ffaa70ad140 (ntdll.NtQueryFullAttributesFile)
Diff found at 7ffaa70ad148 (ntdll.NtQueryFullAttributesFile+8)


Perhaps when I have time I'll update this with a GUI result, so you can click it to restore the code back to original, and do multiple dll's in one run

To use:
Add this lua file to the autorun folder of CE (or just run the code once yourself)



patchscan.lua
 Description:

Download
 Filename:  patchscan.lua
 Filesize:  8.24 KB
 Downloaded:  50 Time(s)


_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Back to top
View user's profile Send private message MSN Messenger
Aylin
Master Cheater
Reputation: 5

Joined: 16 Feb 2017
Posts: 274

PostPosted: Thu Feb 21, 2019 4:23 pm    Post subject: Reply with quote

I tried some. I think it's early for me. Smile

But I realized: "Discrete Color code" in this forum makes it dysfunctional.

https://forum.cheatengine.org/viewtopic.php?t=609418


EDIT:
Sorry, DarkByte, it's my fault.
When another Form was open, I tried your .Lua.
When I opened the second CE there was no Color mixer.
I wrote it to indicate that.
But now I understand that there is a hasty outcome.
Both .lua does not affect one another.
Sorry again.

_________________
Hi Hitler Make a Youtube Web for Trainer
https://forum.cheatengine.org/viewtopic.php?t=609146
Enthusiastic people: Always one step ahead
Do not underestimate me Master: You were a beginner in the past


Last edited by Aylin on Fri Feb 22, 2019 11:28 am; edited 3 times in total
Back to top
View user's profile Send private message MSN Messenger
Dark Byte
Site Admin
Reputation: 361

Joined: 09 May 2003
Posts: 21345
Location: The netherlands

PostPosted: Fri Feb 22, 2019 8:21 am    Post subject: Reply with quote

I don't see why it should
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Back to top
View user's profile Send private message MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine Extensions All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites