Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Scanning for code caves on 64bit targets

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine
View previous topic :: View next topic  
Author Message
Redouane
Master Cheater
Reputation: 3

Joined: 05 Sep 2013
Posts: 363
Location: Algeria
PostPosted: Mon May 01, 2017 4:18 pm    Post subject: Scanning for code caves on 64bit targets Reply with quote
Hello,

I am reversing a 64bit target, and I noticed that the code-cave scanner of Cheat Engine does not accept 8 byte start-end addresses, is it a bug?

using cheatengine-x86_64.exe
Back to top
View user's profile Send private message
++METHOS
I post too much
Reputation: 92

Joined: 29 Oct 2010
Posts: 4197
PostPosted: Mon May 01, 2017 11:19 pm    Post subject: Reply with quote
This was reported some time ago. It may have been overlooked due to low-priority, since most people probably do not use that feature anymore.
Back to top
View user's profile Send private message
mgr.inz.Player
I post too much
Reputation: 222

Joined: 07 Nov 2008
Posts: 4438
Location: W kraju nad Wisla. UTC+01:00
PostPosted: Tue May 02, 2017 10:40 am    Post subject: This post has 1 review(s) Reply with quote
Code:
registerFormAddNotification(
  function (f)
    if f.ClassName~='TfrmCodecaveScanner' then return end

    local timer = createTimer()
    timer.OnTimer =
     function (t)
       if f.editStart and f.editStop then
         t.destroy()
         f.editStart.MaxLength = 16
         f.editStop.MaxLength = 16
       end
     end
    timer.Interval=100
  end)



Add this file to autorun folder:

Codecave Scanner fix.lua
 Description:

Download
 Filename:  Codecave Scanner fix.lua
 Filesize:  370 Bytes
 Downloaded:  613 Time(s)

_________________
Back to top
View user's profile Send private message MSN Messenger
Redouane
Master Cheater
Reputation: 3

Joined: 05 Sep 2013
Posts: 363
Location: Algeria
PostPosted: Tue May 02, 2017 1:09 pm    Post subject: Reply with quote
mgr.inz.Player wrote:
Code:
registerFormAddNotification(
  function (f)
    if f.ClassName~='TfrmCodecaveScanner' then return end

    local timer = createTimer()
    timer.OnTimer =
     function (t)
       if f.editStart and f.editStop then
         t.destroy()
         f.editStart.MaxLength = 16
         f.editStop.MaxLength = 16
       end
     end
    timer.Interval=100
  end)



Add this file to autorun folder:


Thanks, that's awesome.

I found a code cave by scanning for an array of bytes of CC (int3) repeated (size of wanted code cave) times in an executable memory region, I guess that it's free memory.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites