Cheat Engine

Hotrootsoup · Posted: Mon Aug 17, 2009 7:49 am Post subject: [C] Question

Can C change values in another program without injecting DLL's?

If I could load addresses in, and be able to change values, I could make quick, undetected trainers.

HomerSexual · Posted: Mon Aug 17, 2009 7:58 am Post subject:

write / read process memory. First thing detected by most anti-cheat solutions

Hotrootsoup · Posted: Mon Aug 17, 2009 8:20 am Post subject:

Grats on 1500 posts

Oh, right, so id need a bypass anyway. Well,the main point was to see what its called, not to see if its undetected, so I got what i need.

Slugsnack · Posted: Mon Aug 17, 2009 10:28 am Post subject:

you could even use Toolhelp32ReadProcessMemory to read memory hahaha

just thought i'd come out with that random API there..

Polynomial · Posted: Mon Aug 17, 2009 7:31 pm Post subject:

Would it be possible to duplicate kernel32.dll and modify the export (using a hex editor or disassembler) in order to change the API's name to something like CheatReadProcessMemory? Would that somehow still be detected?

Flyte · Posted: Mon Aug 17, 2009 8:53 pm Post subject:

Polynomial · Posted: Tue Aug 18, 2009 4:33 am Post subject:

So how would one bypass the kernel checks? I can't see how it might be done as we can't exactly create duplicates of the kernel API and mangle their exports Razz

Slugsnack · Posted: Tue Aug 18, 2009 6:38 am Post subject:

you could ^_^ you can just copy the kernel memory and then do the same process

Polynomial · Posted: Tue Aug 18, 2009 6:41 am Post subject:

But wouldn't copying the kernel memory require an API (such as ReadProcessMemory) that the protection can just hook again?