Cheat Engine

Aesma Daeva · How do I cheat? Reputation: 0 Joined: 26 Oct 2006 Posts: 4

I've written my own crappy little usermode debugger, while it works on normal stuff, I tried using it to set a breakpoint on a gunz pserver's client and it just wouldn't work. After debugging my debugger I figured out it couldn't find the process' threads to set the breakpoint on (except for the ones that were created later on, as they caused a CreateThread debug event).
I was using CreateToolhelp32Snapshot(TH32CS_SNAPTHREAD,0) with Thread32First/Next to find the threads.
I tried doing the same thing with CE (not a UCE or anything) and it worked fine. I've already searched in CE's source and I can't seem to find how frmprocesswatcher.processes[i].threadlist is populated either.
So, my question is, could someone tell me how exactly CE finds a process' already existing threads when it opens it?
Thanks in advance.

Symbol · Posted: Thu Jul 10, 2008 2:29 pm Post subject:

Cheat Engine hook many APIs, check if CreateToolhelp32Snapshot API is hooked.