Cheat Engine

maatooh · How do I cheat? Reputation: 0 Joined: 19 Oct 2021 Posts: 2

I need to obtain the base address of a 64-bit .exe process, in the same way that CE does, I find myself in the need to do this since the address changes over time, I have had experience obtaining addresses for dll from a process 32 bits but I have not had success with the .exe process and less with 64 bits since I must store it in a variable that supports the "7FFFFFFFFFFF" type of extension.

I know it is a very asked topic here, but I can't quite understand it. If you can help me step by step I would be very grateful.

Thanks very much!

atom0s · Posted: Tue Oct 19, 2021 7:07 pm Post subject:

The API used to poll that same information works for both 32bit and 64bit.

With Toolhlp:
- CreateToolhelp32Snapshot
- Process32First / Process32Next
- Module32First / Module32Next

Or via PSAPI:
- EnumProcesses
- EnumProcessModules
- GetModuleInformation

There are a handful of other ways to do it, but these are the two most common.

maatooh · How do I cheat? Reputation: 0 Joined: 19 Oct 2021 Posts: 2

wow, thanks for your quick response, I'll try from there. If you can provide me with an example it would be excellent, but thank you very much in advance, I hope to achieve it, it has been a lot complicated for me.

I'm still not very clear about the handling of those APIs, I will be investigating it.

OldCheatEngineUser · Jul 26, 2020

check out this example from microsoft.

atom0s · Posted: Wed Oct 20, 2021 11:15 pm Post subject:

There are a lot of examples of doing this across this forum and the web as well. For all the API I listed above, as well as several other common methods used if there are other requirements in place such as bypassing basic anti-cheat measures.