Cheat Engine

GigaTexel · How do I cheat? Reputation: 0 Joined: 20 Dec 2023 Posts: 1

Hi all.

For a specific hack, I need to edit a const-value in memory before the program starts running.

I cannot hex-edit its value in the .exe, because the application has quite a complex amount of detection-mechanisms to detect modifications to the exe. For example, it calculates the MD5 hash of the executable and compares this hash to complex calculations of other file hashes.

My first success was accomplished using dnSpy. I launch the debugger and let int break on entrypoint. I search the memory for the specific string I need, I edit it and let the debugger continue. All works well.

However, I don't want to rely permanently on dnSpy so I was looking to program a launcher in CheatEngine.

First things first I thought, and I wrote this line of code to load up the exe but make it break on entrypoint.

atom0s · Posted: Wed Dec 20, 2023 2:53 pm Post subject:

.NET files have two different entrypoints, one of which CE's debugger is not designed to break on as far as I'm aware.

The 'break on entrypoint' flag passed to 'createProcess' is used to break on the general application entrypoint, which will be either a 'WinMain' or 'main' variant.
This does not break on the .NET defined entrypoint.

As an alternative, if you are familiar with writing code in C#, you can look into projects like Harmony or Mono.Cecil to write a .NET loader that can modify the program at runtime.