Cheat Engine

[xentar]

Hi,

Can anyone help me with injecting AA scripts in the plugin?

I am trying to write a plugin in C, the problem is after I inject the scripts using.

Exported.AutoAssemble(buffer);

I don't know what to do with this? How do I access the address of the registersymbol?

How can I free up the memory in the [DISABLE] section?

Thanks,

[momocha]

[Dark Byte]

hmm, thats 2 things I'll have to fix for next version:

1: Allow the symbolhandler to be used. (so export getaddressfromstring )
2: Add a enable and disable parameter for the auto assembler (default goes to enable)
There is currently no linking between memory of the scripts so dealloc won't work, and since registersybbol can't be retrieved from the exported dll it's also impossible to free the memory yourself with virtualfree(address...)

What you could do is write the address of the allocated memory to a known location in memory in your script, and use that to free it with virtualfree

e.g:

[xentar]

Thanks DB,

It would be great if you can include those 2 features in the next realease. I have been looking at a few macro program to bot, but the amount of information the macro program can feed of the game itself is very limited. But if I make a plugin for CE, I have all the information I need directly from the game memory itself, so with this I can make CE into a very smart bot program.

As for now I will follow your suggestion and try this out, I guess I have to becareful with the know memory area to save the AA code address is not used?

[Dark Byte]

you can call virtualalloc yourself and manage that memory location yourself.

(e.g allocate a 4kb region, and then adjust your script to use that allocated memory region to store stuff in)

heh, one thing you could do after allocating some memory yourself:

[xentar]

[Dark Byte]

yes, if you allocate the memory yourself you're sure it's not used by anything else and you can mess with it as much as you like.

also, you don't even have to specific 20000000, giving 0 and getting a random address is good enough. (as long as you adjust the script to use the allocated address, but a sprintf with a %p to generate the script is easy enough)

[xentar]

Hi DB,

Hope you can give me a hand here.

Follow your suggestions and allocate memory and sprintf() it address into AA scripts.
And at that location I put the address of my code + anything there.

I check this address location and it look like everything is there for me to use in the plugin.

The problem is I ran into access violation at the address I allocated.

Here is what I used in the code.

ptrCEInterface = VirtualAllocEx(*Exported.OpenedProcessHandle, NULL, 128,MEM_COMMIT | MEM_RESERVE, PAGE_READWRITE);

if I deference (*ptrCEInterface) I got access violation.

and yes, ptrCEInterface is not null, it point to the memory region where the address of code used in AA.

<edit>
I did a bit googling and it seems ptrCEInterface is the virtual memory of the target application so I can't use it in CE as is.

So I attempt to do ReadProcessMemory to read the data into CE process.
This get rid of the access violation exception, but some how my data are all zeroed.

ptrCEInterface = VirtualAllocEx(*Exported.OpenedProcessHandle, NULL, ptrCEInterface_size,MEM_COMMIT, PAGE_READWRITE);
ptrLocalCEInterface = malloc(ptrCEInterface_size);

ReadProcessMemory(*Exported.OpenedProcessHandle, ptrCEInterface, ptrLocalCEInterface, ptrCEInterface_size, NULL);

within CE I am using ptrLocalCEInterface instead. but still no real data as I am expecting.

<edit>
my bad, the ReadProcessMemory method works, it just that I read it before I injected the AA scripts so the memory is still zeroed.

Problem solve.

<edit>
Another cocern.

After I use the ChangeRegistersAtAddress() to set a break point, from CE I can see a break point is set, but CE UI somehow doesn't reflect the value or the flag this break point is about. I assume this is ok, maybe because ChangeRegistersAtAddress doesn't let the CE UI know anything about what it did, but I can't findout for sure if this still works until I can test it.

Thanks,

[Dark Byte]

also, replace PAGE_READWRITE with PAGE_EXECUTE_READWRITE , else you'll get a access violation on SP2 when executing it

[xentar]

Is my concern about ChangeAddressAtRegister valid? I try this last night and it seems the debug set doesn't have any affect.

Thanks,

[Dark Byte]

It doesn't even change the register?
Did you fill in the changereg structure properly? (So setting BOTH the changereg boolean and the new state of the register of flag, AND the addres to change)

[xentar]